Publications

The Türkiye Emissions Trading System Regulation, in force as of August 27, 2026, sets out the operation of the ETS and emission reporting obligations.

Under the CMB’s principle decision dated August 31, 2026, BIST 30 and state-controlled companies are carved out of the new off-exchange share sale restrictions.

The CMB’s Principal Decision dated August 28, 2026 introduces 2% and 4% caps on off-market share sales by major shareholders in Turkish listed companies.

The CMB’s Principal Decision dated August 27, 2026 sets new criteria for prioritizing the review of initial public offering applications of non-public companies.

Pursuant to the CMB’s Bulletin No. 2026/51 dated August 13, 2026, the English disclosure requirement is being extended to all listed companies in Türkiye.

The EU AI Act applies not only to companies developing AI systems but, under certain circumstances, to Turkish companies deploying or offering them in the EU.

The CMB’s amendments to the Investor Compensation Center Regulation were published in Official Gazette No. 33311 of 16 July 2026 and entered into force that day.

The Regulation amending the rules on commercial advertising was published on 1 July 2026, and the new provisions enter into force on 1 August 2026.

On 21 July 2026, the Turkish Personal Data Protection Authority published an announcement on the use of third-party contact data for marketing purposes.

The National Green Finance Strategy and Action Plan (2026-2029), drafted under the coordination of the Ministry of Treasury and Finance, has been published pursuant to Presidential Circular No. 2026/8.

The Regulation Amending the Regulation on Commercial Advertising and Unfair Commer-cial Practices, prepared by the Turkish Ministry of Trade, was published in the Official Gazette dated 1 July 2026 and numbered 33297.

The Turkish Personal Data Protection Board's Principle Decision No. 2026/1095 dated 20.05.2026 on unlawful access to accident victims' personal data and data controller obligations.

The decision of the Turkish Constitutional Court, dated 27 January 2026 and numbered 2020/32193, has been published and is considered likely to reshape the approach of the Personal Data Protection Board to administrative fines.

Following the plenary vote held on 16 June 2026, the European Parliament approved, by a large majority, the legislative proposal introduced by the European Commission as part of its digital regulatory package to amend the European Union Artificial Intelligence Act

The Law on Amendments to Certain Laws No. 7582, entered into force upon its publication on June 4, 2026. The Law paves the way for the implementation of significant amendments in conditional capital increases for companies holding a techno-entrepreneurship badge (teknogirişim rozeti) that receive investment through convertible debts.

The Personal Data Protection Board (“Board”) has issued a principle decision (“Principle Decision”), published in the Official Gazette dated 2 June 2026 and numbered 33268, providing an assessment under the Data Protection Law No. 6698 (“DPL”) regarding the use of biometric data for employee attendance tracking.

At the Cybersecurity Council meeting held on 5 May 2026, Türkiye’s cybersecurity policies were addressed within the framework of current risks, global developments, and forward-looking trends. It was once again emphasized that cybersecurity constitutes an integral component of national security, and it was noted that increasing geopolitical tensions have rendered cyber threats more complex and multidimensional.

The Law on Amendments to the Social Services Law and Certain Other Laws, published in the Official Gazette dated 1 May 2026 and numbered 33240, has introduced significant amendments to the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications.

The decision of the Constitutional Court, dated 25 December 2025 and numbered E.2025/141, K.2025/274, published in the Official Gazette dated 18 March 2026 and numbered 33200, focuses on whether certain provisions of the Criminal Procedure Code No. 5271 (“CPC”) concerning the processing and destruction of genetic data provide adequate safeguards in terms of the right to the protection of personal data.

The Principle Decision dated 18 February 2026 and numbered 2026/347 of the Personal Data Protection Board, published in the Official Gazette dated 24 March 2026 and numbered 33203, sets out the Board’s assessments regarding privacy notices and explicit consent texts that are improperly drafted by data controllers in practice, and includes examples of both compliant and non-compliant practices.

The Personal Data Protection Authority announced, through a public notice published on its official website on 12 March 2026, that it has issued the Agentic AI Guideline.

The Communiqué Amending the Communiqué on Mergers and Acquisitions Requiring the Approval of the Competition Board, prepared by the Competition Board, entered into force on February 11, 2026. The Amending Communiqué introduces changes to the definitions of “undertakings concerned (ilgili teşebbüs)” and “transaction parties (işlem tarafı)”, as well as to the turnover thresholds for mergers and acquisitions subject to approval of the Competition Board.

The Regulation on Participation in Venture Capital Funds, jointly issued by the Ministry of Industry and Technology and the Ministry of Treasury and Finance, establishes new rules and resource scopes for venture capital investments and entered into force on November 28, 2025.

The Regulation governs the procedures and principles for identifying technology-based and innovative start-ups, and for granting the techno-entrepreneurship badge (“Badge”) to start-ups that meet the requirements set forth in the Regulation.