Summary
Turkey's Personal Data Protection Law No. 6698 was amended in March 2024, with changes effective from June 2024, aligning Turkish cross-border data transfer rules with the EU's GDPR. The By-Law on the Transfer of Personal Data Abroad and Turkish standard contracts and binding corporate rules were published in July 2024. Turkish Standard Contractual Clauses (SCCs) require KVKK notification and approval, and cannot be used for multiple recipients, necessitating a clear understanding of data flow. Intra-group data transfers also require KVKK approval, and any changes to Turkish SCCs must be notified within five business days. A guideline from the KVKK is expected to provide further insights on the procedural steps and transfers.
You can view the full article here: https://lnkd.in/dp-suKz7