Personal Data Protection Authority Publishes Public Notice on the Method of Notifying Responses to Data Subject Applications

10/2/2026

The Personal Data Protection Authority (“Authority”) stated in its public notice dated 01 October 2026 that responses given by data controllers to data subjects’ applications solely by telephone, face-to-face meetings or similar methods do not comply with Article 13 of the Personal Data Protection Law No. 6698 (“Law”) and the procedures set out in Article 6 of the Communiqué on the Procedures and Principles of Application to the Data Controller (“Communiqué”).

Accordingly, to ensure that data subject applications are handled in accordance with the legislation and that the application process can be documented and audited where necessary, the Authority has stated in its public notice that data controllers must:

Conclude data subjects’ applications in accordance with the procedures and principles set out in the Law and the Communiqué;

Notify the data subject of the final response to their application in writing or by electronic means;/li>
Take into account that telephone conversations, face-to-face briefings or similar verbal communication methods will not be accepted as the response required under the legislation; and
Clearly state the extent to which the requests in the application have been met, and provide clear and comprehensible reasons for any rejected requests.

The Authority’s announcement is available here.

Aslı Kınsız, Managing Associate
Sevim Özkan, Associate
Yiğit Ali Keleş, Trainee Lawyer

Other News

Amendment to the Regulation on Remote Working Concerning Hybrid Working

The Regulation Amending the Regulation on Remote Working, published in the Official Gazette dated 25 September 2026 and numbered 33381, added a new paragraph to Article 9 of the Regulation on Remote Working, published in the Official Gazette dated 10 March 2021 and numbered 31419 (the “Regulation”). The amendment provides that an employee may perform their work partly at the workplace and partly remotely.

News| Legal Updates

Amendments to the Procedures and Principles Concerning the R&D and P&D Activities of Electricity and Natural Gas Distribution Companies

The “Procedures and Principles Amending the Procedures and Principles on Supporting the Research, Development and Innovation Activities of Electricity and Natural Gas Distribution Companies” (“New Framework”), adopted by the Decision dated 3 September 2026 and numbered 14846 (“Board Decision”) of the Energy Market Regulatory Board (“Board”), the decision-making body of the Energy Market Regulatory Authority (“EMRA”) was published in the Official Gazette dated 5 September 2026 and numbered 33361. The provision concerning the application schedule will enter into force on 1 January 2027, while the remainder of the New Framework will enter into force on 5 September 2026.

News| Legal Updates

Principle Resolutions Requiring CMB Approval For Certain Share Sales In Publicly Traded Companies Have Been Published

New principles governing share sales to be carried out by certain shareholders of publicly traded companies and the exemptions applicable thereto have been introduced by the Capital Markets Board’s (“CMB”) resolutions dated 28 August 2026 and numbered 52/1589 and dated 31 August 2026 and numbered 53/1590 (the “Principle Resolutions”).

News| Legal Updates

Turkish Emissions Trading System Regulation Published

The Turkish Emissions Trading System Regulation (the “Regulation”), published in the Official Gazette dated 27 August 2026 and numbered 33353, sets out the procedures and principles governing the monitoring, reporting and verification of greenhouse gas emissions and the implementation of the Turkish Emissions Trading System (“ETS”). The Regulation entered into force on the date of its publication and repealed the Regulation on the Monitoring of Greenhouse Gas Emissions.

News| Legal Updates

Turkish DPA Publishes a Public Announcement on the Principle Decision on the Processing of Biometric Data for Attendance

The Turkish Personal Data Protection Board (the “Board”) published a Public Announcement (the “Public Announcement”) on 27 August 2026 concerning its Principle Decision dated 29 April 2026 and numbered 2026/921 on the Processing of Biometric Data for Attendance (the “Principle Decision”).

News| Legal Updates

Scope of the Obligation to Publish Material Event Disclosures in English Has Been Expanded.

By virtue of the Capital Markets Board of Türkiye’s (“CMB”) Decision dated 13.08.2026 and numbered 49/1489 (the “Board Decision”), all publicly held companies whose shares are traded on a stock exchange are now required to publish their material event disclosures simultaneously in English and Turkish.

News| Legal Updates

Compliance Period Granted to Data Controllers Operating Loyalty Card Programs Extended

By way of background, the Personal Data Protection Board (“Board”) had published a Principal Decision dated 11 February 2026 and numbered 2026/266 on the “Use of a Loyalty Card Holder’s Mobile Phone Number or Loyalty Card Number by a Third Party During a Purchase” (“Principal Decision”).

News| Legal Updates

Turkish Personal Data Protection Authority Publishes Public Announcement on the Use of Personal Data Obtained from Third Parties for Advertising and Marketing Purposes

The Turkish Personal Data Protection Authority ("Authority") has published a public announcement dated 21 July 2026 (the "Announcement"), setting out its assessments regarding the use of contact information obtained from third parties for advertising and marketing purposes. The Announcement highlights key issues with the aim of increasing awareness of data controllers' obligations and preventing violations of data subjects' rights.

News| Legal Updates

Removal of the Temporary Exception to Iran Sanctions: Revocation of OFAC General License X and General License X1 Governing the Wind-Down Period

The Office of Foreign Assets Control (OFAC), within the U.S. Department of the Treasury, revoked General License X dated June 21, 2026, effective July 7, 2026, and issued General License X1 in its place. General License X1 provides a limited transition period for the purpose of "winding down and concluding" sanctioned transactions related to the production, delivery, and sale of Iranian-origin crude oil, petrochemicals, and petroleum products.

News| Legal Updates

Amendments to the Regulation on Personal Health Data

The Regulation on the Amendment to the Regulation on Personal Health Data (the “Amending Regulation”) has been published in the Official Gazette dated 4 July 2026 and numbered 33300, and entered into force on the same date. The Amending Regulation introduces amendments to the Regulation on Personal Health Data (the “Regulation”) concerning the correction and reassessment of personal health data. The details of these amendments are set out below:

News| Legal Updates

Amendments to the Regulation on Commercial Advertising and Unfair Commercial Practices

The Regulation Amending the Regulation on Commercial Advertising and Unfair Commercial Practices (the “Amending Regulation”), prepared by the Ministry of Trade (the “Ministry”), was published in the Official Gazette dated 1 July 2026 and numbered 33297. The Amending Regulation will enter into force on 1 August 2026.

News| Legal Updates

Temporary Relief in Iran Sanctions: OFAC General License X

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has issued General License X, which authorizes, until August 21, 2026, certain transactions that are otherwise prohibited under sanctions regulations relating to the production, delivery, and sale of Iranian-origin crude oil, petrochemical products, and petroleum products.

News| Legal Updates