- Home
- News & Insights
Search by
Latest
Türkiye’s New Age Verification Regime for Social Media Is Now in Force
Türkiye has introduced a new regulatory framework for social media platforms, bringing significant changes to how children can access and use social media services. The “Regulation on the Provision of Separate Services Tailored to Children and Age Verification by Social Media Providers” (the “Regulation”), published in the Official Gazette dated 10 October 2026, entered into force on 1 November 2026. The Regulation applies to both domestic and foreign social media providers accessible from Türkiye ("Providers") and introduces mandatory age verification, a ban on providing services to children under 15, and stricter safeguards for users aged 15 to 17. What Are the Key Changes? 1. Mandatory
Quick Read: Technology Law Updates in Türkiye – September 2026
Important developments in artificial intelligence and data protection took place in Türkiye in September 2026. The government’s Medium-Term Programme for 2027–2029 outlined plans to align Turkish data protection legislation with the GDPR and establish a national AI legislative framework. Meanwhile, the Turkish Personal Data Protection Authority (the “DPA”) published guidance on personal data protection obligations in legal practice, including the use of generative AI. A series of data breach notifications also highlighted the cybersecurity risks associated with third-party service providers and the potential impact of a single security incident on multiple organisations. In this edition of Quick Read
Quick Read – Technology Law Updates in Türkiye
Several notable developments took place across Türkiye’s data protection and artificial intelligence landscape in August 2026. The Turkish Personal Data Protection Authority (“DPA”) published 47 decision summaries, providing further insight into its current enforcement priorities. The DPA also extended the compliance deadline for certain loyalty program requirements and clarified the scope of restrictions on using biometric data at the workplace. In addition, the Türkiye Artificial Intelligence Action Plan (2026–2030) was published by Presidential Circular, setting out Türkiye’s strategic priorities for AI over the coming years. In this edition of Quick Read, we highlight the most notable
Quick Read: Technology Law Updates in Türkiye – July 2026
A number of important regulatory and policy developments were introduced across Türkiye's data protection, cybersecurity, and digital governance framework in July 2026. The Turkish DPA issued two Principle Decisions and further public guidance addressing the personal data of accident victims and data used for third-party marketing. Significant legislative amendments also introduced a framework for reassessing previous medical diagnoses and strengthened the rules governing the retention and subsequent use of genetic examination results. Beyond data protection, the Cybersecurity Presidency was granted broader powers relating to internet infrastructure and services, while new advertising rules introduced transparency
Quick Read: Technology Law Updates in Türkiye – June 2026
June was another active month for technology regulation in Türkiye, with a particular focus on workplace privacy. The Turkish DPA published important guidance on employee CCTV monitoring and biometric attendance systems, signalling increased scrutiny of employers' monitoring practices. At the same time, significant Constitutional Court judgements clarified the legal framework for publicly disclosed personal data and e-commerce platform liability, while the government unveiled its 2026–2030 AI Vision and Action Plan and introduced new identity verification and subscription rules for the electronic communications sector. In this edition of Quick Read, we highlight the most notable recent developments in data protection
Turkish DPA’s Principle Decision on Personal Data of Accident Victims: Key Implications for the Insurance Sector
In its Principle Decision published in the Official Gazette on 1 July 2026, the Turkish Personal Data Protection Authority (“Turkish DPA”) addresses the unlawful access to and the use of personal data relating to accident victims, particularly those involved in road traffic accidents. Although the Decision was prompted by complaints regarding compensation consultancy firms, its implications extend beyond those entities. In its Decision, the Turkish DPA reiterates the data security obligations of insurance companies, insurance adjusters, and other stakeholders involved in claims handling. Background The Turkish DPA notes that it has received numerous complaints from individuals who were contacted by telephone
Quick Read: Technology Law Updates in Türkiye – May 2026
May saw several significant developments in Türkiye across the areas of data protection, artificial intelligence, cybersecurity, and digital regulation. Notable updates included the Turkish DPA's approval of Binding Corporate Rules for international data transfers, new guidance concerning reality television programs, constitutional developments affecting digital searches, and further public and private sector initiatives on AI governance. In this edition of Quick Read, we highlight the most notable recent developments in data protection, cybersecurity, and digital regulation in Türkiye. Developments in Data Protection 1. DPA approves binding corporate rules for cross-border data transfers The DPA approved
Quick Read: Technology Law Updates in Türkiye – April 2026
April 2026 brought significant developments across different areas of technology law and digital regulation in Türkiye. Key updates included the Competition Authority’s sector inquiry into AI, new compliance obligations introduced for social network providers and gaming platforms under the Internet Law, the publication of the Nuclear Facilities Cybersecurity Regulation, and the release of the Turkish DPA’s 2025 Activity Report. In this edition of Quick Read, we highlight the most notable recent developments in data protection, cybersecurity and digital regulation in Türkiye. Developments in AI Turkish Competition Authority Launches AI Sector Inquiry On 7 April 2026, the Turkish Competition Authority
Cybersecurity Board Holds Its First Meeting
The Turkish Cybersecurity Board (the “Board”), established under the Cybersecurity Law, held its first meeting on 5 May 2026. Following the meeting, the Board published an official statement outlining the Board’s initial priorities and strategic cybersecurity agenda. The meeting reflects Türkiye’s intention to adopt a more centralised and strategic cybersecurity governance framework, with a particular focus on critical infrastructure protection, cyber resilience, and data sovereignty. Key Outcomes of the Meeting Designation of Critical Infrastructure Sectors: One of the most significant outcomes of the meeting was the designation of the following sectors: Critical
Specialised Courts Appointed in Türkiye for Disputes Arising from the Regulatory and Supervisory Authorities
On 20 April 2026, Türkiye’s First Chamber of the Council of Judges and Prosecutors (Hakimler ve Savcılar Kurulu) issued Decision No. 890 (the “Decision”) designating specialised courts for disputes arising from decisions of certain regulatory and supervisory authorities, such as the Personal Data Protection Authority and the Competition Authority, as listed in Chart (III) of Law No. 5018 on Public Financial Management and Control ("Chart No. III"). The Decision, published in the Official Gazette on 22 April 2026, emphasises the aim of resolving disputes in a more efficient and timely manner, particularly those of a technical and complex nature that require specialised knowledge. Designated Court: Ankara Administrative
Quick Read: Technology Law Updates in Türkiye – March 2026
March 2026 was a particularly active month for technology law in Türkiye, with a strong focus on artificial intelligence developments. The Turkish Personal Data Protection Authority (the “DPA”) issued two guidance documents on AI, while the Grand National Assembly of Türkiye published its long-awaited AI Research Commission Report. In parallel, the DPA released several principle decisions addressing key data protection issues, reinforcing its regulatory expectations. AI in Focus: Key Developments in Türkiye 1. AI Takes Centre Stage: Parliamentary Report Published The Turkish Parliament’s AI Research Commission Report (the “Report”) sets out key policy recommendations for the development of the
Quick Read: Technology Law Updates in Türkiye – February 2026
February 2026 was a particularly active month for technology law developments in Türkiye, with the Turkish Personal Data Protection Authority (the “DPA”) issuing a principle decision affecting retail practices, publishing new cybersecurity warnings, and initiating AI-related investigations, alongside broader regulatory developments signalling heightened scrutiny on the protection of children’s personal data, as well as the launch of a public consultation on Türkiye’s Artificial Intelligence Action Plan. Retail Practices in Focus: DPA Tightens Rules on Loyalty Card Use On 28 February 2026, the DPA issued a Principle Decision addressing the use of loyalty card details during shopping transactions. The