Publications

The Regulation Amending the Regulation on Commercial Advertising and Unfair Commer-cial Practices, prepared by the Turkish Ministry of Trade, was published in the Official Gazette dated 1 July 2026 and numbered 33297.

The Turkish Personal Data Protection Board's Principle Decision No. 2026/1095 dated 20.05.2026 on unlawful access to accident victims' personal data and data controller obligations.

The decision of the Turkish Constitutional Court, dated 27 January 2026 and numbered 2020/32193, has been published and is considered likely to reshape the approach of the Personal Data Protection Board to administrative fines.

Following the plenary vote held on 16 June 2026, the European Parliament approved, by a large majority, the legislative proposal introduced by the European Commission as part of its digital regulatory package to amend the European Union Artificial Intelligence Act

The Personal Data Protection Board (“Board”) has issued a principle decision (“Principle Decision”), published in the Official Gazette dated 2 June 2026 and numbered 33268, providing an assessment under the Data Protection Law No. 6698 (“DPL”) regarding the use of biometric data for employee attendance tracking.

At the Cybersecurity Council meeting held on 5 May 2026, Türkiye’s cybersecurity policies were addressed within the framework of current risks, global developments, and forward-looking trends. It was once again emphasized that cybersecurity constitutes an integral component of national security, and it was noted that increasing geopolitical tensions have rendered cyber threats more complex and multidimensional.

The Law on Amendments to the Social Services Law and Certain Other Laws, published in the Official Gazette dated 1 May 2026 and numbered 33240, has introduced significant amendments to the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications.

The decision of the Constitutional Court, dated 25 December 2025 and numbered E.2025/141, K.2025/274, published in the Official Gazette dated 18 March 2026 and numbered 33200, focuses on whether certain provisions of the Criminal Procedure Code No. 5271 (“CPC”) concerning the processing and destruction of genetic data provide adequate safeguards in terms of the right to the protection of personal data.

The Principle Decision dated 18 February 2026 and numbered 2026/347 of the Personal Data Protection Board, published in the Official Gazette dated 24 March 2026 and numbered 33203, sets out the Board’s assessments regarding privacy notices and explicit consent texts that are improperly drafted by data controllers in practice, and includes examples of both compliant and non-compliant practices.

The Personal Data Protection Authority announced, through a public notice published on its official website on 12 March 2026, that it has issued the Agentic AI Guideline.