In the Draft Circular Numbered 2022/2 on Establishing Criteria for Identity Authentication and Process Security in the Establishment of Contractual Relationship in Electronic Banking Services and Electronic Medium (“Draft Circular”), it was stated that the attached explanations of the Draft Circular (“Explanations”) should be taken into consideration in order to clarify the uniform application of...

The decision of the Personal Data Protection Board (“Board”) dated 24.02.2022 and numbered 2022/172 regarding requesting special categories of personal data from candidates during the recruitment process by the Turkish liaison office of the data controller resident abroad (“Decision”) has been published. In summary, the data subject submitted a complaint to the Personal Data Protection...

The Regulation on Collection, Storage and Transfer of Insurance Data (“Regulation”) has been published in the Official Gazette dated 18.10.2022 and numbered 31987. With the Regulation, processing activities regarding insurance data such as obtaining, storing and using insurance data from private legal entities, public institutions and organizations, public professional organizations and their superior organizations and...

The Central Bank of the Republic of Turkey (“CBRT”) stated that the Guidelines on Associating Business Models Offered in the Payments Area with Payment Service Types (“Guidelines”) aim to associate business models that are frequently encountered in the field of payments with the payment services listed in the Law No. 6493 on “Payment and Securities...

The decision of the Personal Data Protection Board (“Board”) dated 07.07.2022 and numbered 2022/667, regarding processing of the data subject’s ‘hand geometry’ information to access the service building of an enterprise by the data controller company (“Data Controller”) without explicit consent (“Decision”) has been published. In summary, the data subject submitted a complaint to the Personal...

The Regulation on the Consumer Arbitration Committees (“Regulation”) has been published in the Official Gazette dated 21/09/2022 and numbered 31960. The Regulation regulates the procedures and principles regarding the establishment and functioning of consumer arbitration committees and covers the activities and processes of consumer arbitration committees within this scope. With the Regulation, the Regulation on...

The decision of the Personal Data Protection Board (“Board”) dated 17.03.2022 and numbered 2022/243 (“Decision”) regarding processing of personal data by sending the invoice to the data subject, upon the use of the e-mail address of the data subject by a person with the same name when placing an order on the internet, has been...