2024 Amendments to Turkish Personal Data Protection Law

The amendments to the Turkish Personal Data Protection Law in 2024 mark a significant turning point in Turkey's approach to data protection. As someone deeply involved in data privacy law, I recognize the importance of these changes and their implications for individuals and organizations alike.

First and foremost, it's crucial to understand that the right to privacy is enshrined in the Turkish Constitution. Article 20 guarantees everyone the right to privacy and family life, with strict penalties for any violation of these rights, as outlined in Article 134 of the Turkish Penal Code.

The cornerstone of data protection in Turkey is the Personal Data Protection Law (Numbered 6698), which aims to safeguard fundamental rights, particularly the right to privacy, in the processing of personal data. This law imposes obligations on individuals and entities involved in processing personal data, with the goal of ensuring compliance with international human rights standards.

Central to understanding this law is the concept of “processing of personal data,” which encompasses various operations performed on personal data, whether automated or not. This includes collection, recording, storage, disclosure, and transfer, among others.

In Turkey, the authority responsible for overseeing personal data protection is the Personal Data Protection Authority. This institution works to ensure that personal data processing aligns with internationally recognized human rights principles.

The new amendments introduced by Law Numbered 7499 bring significant changes to the Personal Data Protection Law. These changes, which take effect on June 1, 2024, introduce new legal grounds for processing sensitive personal data and cross-border data transfers.

One notable change is the introduction of alternative legal grounds for processing special categories of personal data, subject to specific conditions. Explicit consent becomes a fundamental requirement, and a permission mechanism is established for cross-border data transfers. The Personal Data Protection Authority will issue adequacy decisions under certain circumstances to facilitate these transfers.

In summary, the 2024 Amendments to the Turkish Personal Data Protection Law aim to simplify the processing of special categories of personal data while ensuring robust supervision of data transfers abroad. This reform reflects Turkey's commitment to enhancing data protection standards in line with global best practices.

For more information about Data Protection Law in Turkey visit to https://www.pilc.law/2024-amendments-to-turkish-personal-data-protection-law/