Personal Data Protection | Practice Areas

The Turkish Personal Data Protection Law No. 6698 was published in the Official Gazette dated 7 April 2016 (No. 29677) and entered into force. The purpose of the Law is to regulate the conditions for processing personal data, to protect the fundamental rights and freedoms of individuals in such processing, and to set out the obligations of natural and legal persons who process personal data and the procedures and principles they must comply with.

Data protection compliance projects aim to align all activities of an organization — from the collection of personal data to its destruction — with the Law, secondary regulation and international rules. Within the compliance projects we conduct at B&S PARTNERS, we provide:

Training to the relevant business units on personal data protection legislation in order to build organizational awareness,
Identification of the data processing activities and gap analysis,
Preparation of the personal data processing inventory,
Preparation of the personal data retention and destruction policy,
Registration with the Turkish Data Controllers’ Registry,
Discharge of the duty to inform in compliance with the legislation, and the drafting of explicit consent texts,
Determination of administrative and technical measures regarding data security,
Drafting undertakings for cross-border data transfers and following up the related approval processes,
Drafting confidentiality agreements with data processors regarding the processing activities,
Structuring internal control and audit processes.

To ensure full compliance with the Law, we work in cooperation with our specialist solution partners on technical matters that require particular expertise.

We also provide advisory services on the legal and technical resolution of issues encountered by data controllers under the Law and related legislation, the response to data subject applications, the representation and protection of data controllers’ rights before the Data Protection Authority in complaints filed by data subjects or in ex officio investigations initiated by the Authority, and in cases where data subjects pursue judicial or administrative remedies.

For more information about our services, please contact us at info@hukukbs.com.