Turkey: Data Protection

Turkey's Personal Data Protection Authority has issued a principle decision prohibiting the use of biometric data for employee attendance tracking, fundamentally reshaping workplace data practices. The decision challenges the widespread reliance on fingerprint scanners and facial recognition systems, declaring such methods disproportionate and contrary to data protection principles.

Kişisel Verileri Koruma Kurumu ("Kurum"), 8 Haziran 2026 tarihinde güvenlik kamerası sistemlerinin hukuka uygun biçimde kullanımına ilişkin iki ayrı kamuoyu duyurusu yayımladı. Duyurulardan biri apartman ve site yönetimlerini, diğeri ise işverenleri kapsamaktadır.

The Personal Data Protection Authority ("the Authority") published two separate public announcements on 8 June 2026 regarding the lawful use of CCTV systems. One of the announcements covers apartment and residential complex management bodies, whilst the other covers employers.

Turkey's Personal Data Protection Board has issued a comprehensive ruling on the use of biometric identification systems for employee attendance tracking, establishing strict limitations on when and how such data may be processed.

Turkey's Personal Data Protection Board has issued a landmark decision prohibiting the use of biometric data systems for employee attendance tracking, citing violations of proportionality and necessity principles. The ruling establishes that even with explicit consent, biometric methods like fingerprint or facial recognition exceed what is legally permissible for simple timekeeping purposes, requiring employers to adopt less intrusive alternatives.

Avrupa Birliği'nin Yapay Zekâ Kanunu yürürlüğe girerken, Türkiye'deki şirketler bu yeni düzenlemelere nasıl uyum sağlamalı ve hangi hukuki hazırlıkları yapmalıdır?

Iran-linked hacktivist group Handala compromised a Microsoft Intune Global Administrator account at medical device company Stryker through an adversary-in-the middle phishing attack, then used the platform’s built-in wipe command to factory-reset between 80,000 and 200,000 devices across 79 countries overnight.

Bir pazarlama yöneticisi müşteri listesini segmentlere ayırmak için dosyayı ChatGPT’ye yüklüyor. Bir İK uzmanı aday CV’lerini özetletiyor. Bir finans ekibi üyesi çeyrek sunumunun taslağını üretken yapay zekâya yazdırıyor. Hepsi iyi niyetli, hepsi verimlilik adına yapılıyor, ama -çoğunlukla- şirketin haberi olmadan.

Turkey has designated specialised administrative courts in Ankara to handle disputes arising from key regulatory and supervisory authorities, including the Competition Authority, Capital Markets Board...