The decision of the Personal Data Protection Board (“Board”) dated 24.02.2022 and numbered 2022/172 regarding requesting special categories of personal data from candidates during the recruitment process by the Turkish liaison office of the data controller resident abroad (“Decision”) has been published. In summary, the data subject submitted a complaint to the Personal Data Protection...

The Regulation on Collection, Storage and Transfer of Insurance Data (“Regulation”) has been published in the Official Gazette dated 18.10.2022 and numbered 31987. With the Regulation, processing activities regarding insurance data such as obtaining, storing and using insurance data from private legal entities, public institutions and organizations, public professional organizations and their superior organizations and...

The Central Bank of the Republic of Turkey (“CBRT”) stated that the Guidelines on Associating Business Models Offered in the Payments Area with Payment Service Types (“Guidelines”) aim to associate business models that are frequently encountered in the field of payments with the payment services listed in the Law No. 6493 on “Payment and Securities...

The decision of the Personal Data Protection Board (“Board”) dated 07.07.2022 and numbered 2022/667, regarding processing of the data subject’s ‘hand geometry’ information to access the service building of an enterprise by the data controller company (“Data Controller”) without explicit consent (“Decision”) has been published. In summary, the data subject submitted a complaint to the Personal...

The Regulation on the Consumer Arbitration Committees (“Regulation”) has been published in the Official Gazette dated 21/09/2022 and numbered 31960. The Regulation regulates the procedures and principles regarding the establishment and functioning of consumer arbitration committees and covers the activities and processes of consumer arbitration committees within this scope. With the Regulation, the Regulation on...

The decision of the Personal Data Protection Board (“Board”) dated 17.03.2022 and numbered 2022/243 (“Decision”) regarding processing of personal data by sending the invoice to the data subject, upon the use of the e-mail address of the data subject by a person with the same name when placing an order on the internet, has been...

The decision of the Personal Data Protection Board (“Board”) dated 02.11.2021 and numbered 2021/1104, regarding the allegation that the unlawful processing of personal data by a bank through sending SMS to the mobile phone number of the data subject (“Decision”) has been published. In the complaint submitted to the Personal Data Protection Authority (“Authority”), the data...

The Regulation Amending the Regulation on Distance Contracts (“Regulation”) has been published in the Official Gazette dated 23/08/2022 and numbered 31932. With the Regulation: The term, intermediary service provider was added to the Distance Contracts Regulation, and the definitions of intermediary service provider and platform were included to the Regulation. A provision has been added...

The Draft Guideline on Processing Genetic Data (“Draft Guideline”) has been published on the official website of the Personal Data Protection Authority (“Authority”) on 24.08.2022. Opinions and evaluations regarding the Draft Guideline can be submitted to the Authority in writing and/or by e-mail to the e-mail address of genetikveri@kvkk.gov.tr ​​until 24.09.2022. The concept of genetic...

The Guideline Regarding Good Practices on Protection of Personal Data in the Banking Sector (“Guideline”) has been published on 05.08.2022 by the Personal Data Protection Authority (“Authority”). The purpose of the Guideline is to guide the data controller banks to carry out their personal data processing activities in accordance with the Personal Data Protection Law...