NEW REGULATION ON PROCESSING OF PERSONAL DATA IN ELECTRONIC COMMMUNICATIONS SECTOR PUBLISHED 24 December 2020
REGULATION ON OF PERSONAL DATA IN ELECTRONIC COMMUNICATIONS SECTOR (“The Regulation”) was published in the Official Gazette dated 4 December 2020 and numbered 31324. The Regulation regulates the procedures and principles for the processing of personal data and protection of privacy in the electronic communications sector, and aims to ensure the protection of privacy and fundamental rights and freedoms of individuals. |
What did the regulation bring with it? |
The Regulation regulates the procedures and principles that the operators operating in the electronic communications sector will comply with in terms of the data they obtain within the scope of providing electronic communication services to legal and natural person subscribers. |
With this Regulation, principles have been introduced in parallel with the Personal Data Protection Law No. 6698 (“DPL”), which must be followed in the processing of personal data. In addition to these principles that are in line with the law, a separate situation has been brought at this point. It is essential that traffic and location data be not transferred outside Turkey for national security reasons. |
With the regulation, the obligation of the Operators to ensure the security of the personal data of their subscribers or users has been brought. In this context, Operators are obliged to take all necessary measures in accordance with the national and international standards regarding the protection of these data, provided that they keep the minimum measures specified in the Regulation in any case. |
The Information Technologies and Communication Authority ("Authority") may request information and documents from the operators and request changes in measures. Another obligation imposed on operators here is the obligation of the operators to keep their records regarding access to personal data and other related systems for two years. |
Operators will also notify the Information Technologies Authority in addition to the Personal Data Protection Authority, subscribers or users in case of any personal data breach. |
In cases requiring explicit consent, some additional conditions have been introduced to the conditions specified in the DPL. It is also clearly regulated in the Regulation that express consent can be requested from the subscriber/ user in exchange for additional benefits such as gift minutes, SMS and data. |
The regulation states that the explicit consent of the subscriber/ user must be obtained in written or electronic form and that the records regarding this will be kept for the minimum subscription period. In addition, operators will remind relevant subscribers/ users in the third quarter of each year for processing purposes based on explicit consent. Otherwise, personal data processing activity based on explicit consent will be stopped until notification is made. |
The Regulation also stipulates that the explicit consent given by the subscriber will be automatically withdrawn if the subscription is terminated as of the expiration date, unless otherwise requested by the subscriber. |
In cases where traffic and location data are transferred to third parties, it is stipulated to also obtain explicit consent by including the data specified within the scope of subparagraph e of paragraph 1 of Article 8 of the Regulation. |
In cases where traffic and location data can be processed, the operators are obliged to inform the subscribers/ users about the types, processing purposes and periods of these data and the scope of the information obligation specified in the DPL has been expanded specifically for these data. |
It has been stated that if the operators violate their obligations specified in this Regulation, sanctions in the form of administrative fines and cancellation of their authorization will be applied by the Authority in accordance with the Administrative Sanctions Regulation. |
The Regulation will enter into force six months after its publication in the Official Gazette, in other words, on June 4, 2021. |
As a result, with this Regulation published, additional obligations have been imposed on the operators providing electronic communication services within the scope of personal data, and it is planned to secure the personal data of subscribers / users with these obligations. In this context, complying with the provisions of this Regulation while processing personal data of the operators in this sector will prevent them from facing any administrative sanctions. |
Other News
-
19.4.2024
The Constitutional Court Decision Annulled The Regulation Envisaging Liability For Litigation Expenses Within The Scope Of Mediation In Civil Disputes
In accordance with paragraph 11 of Article 18/A of Law No. 6325 on Mediation in Civil Disputes1 ("the Code"), a party shall be held liable for the entire cost of the litigation, nothwithstanding justification at the conclusion of the proceedings, and shall not be granted power of attorney fee if he or she fails to appear for the initial session of mandatory mediation without providing an explanation.The aforementioned regulation is outlined as follows:
-
8.4.2024
E-Application" Period In Capital Markets Board Applications
With its announcement dated 5 February 2024, the Capital Markets Board ("Board") announced to the public that capital market institutions, organisations and partnerships will be able to make their applications more quickly and effectively through the e-Application System.
-
5.4.2024
The Amounts In The Pre-Conditions To Be Complied With Before The Initial Public Offering Of Shares In Several Sectors Were Decreased
The Capital Markets Board ("Board" or "CMB") decreased the financial thresholds for financial statements, especially considering the sectoral differences of the companies that submitting to the Board for initial public offering and the 12th Development Plan ("Plan") prepared by the Presidency of the Strategy and Budget Directorate.
-
15.3.2024
New Regulations Introduced With The 8th Judicial Package
The Law No. 7499 on the Amendment of the Code of Criminal Procedure and Certain Laws ("Law"), which contains amendments and new regulations known as the "8th Judicial Package", was published in the Official Gazette dated 12 March 2024 and numbered 32487. In this article, we will discuss the amendments to the Criminal Procedure Code No. 5271 (" CPC"), Turkish Criminal Code No. 5237 ("TCC"), Turkish Civil Code No. 4721 ("TCC"), Enforcement and Bankruptcy Code No. 2004 ("EBC") and Law No. 6384 on the Duties and Working Procedures and Principles of the Compensation Commission.
-
12.3.2024
Changes In The PDPL Was Published In THE Official Gazette
Law No. 7499 on Amendments to the Code of Criminal Procedure and Some Laws ("Law No. 7499") including critical amendments to the Law No. 6698 on the Personal Data Protection Law ("PDPL") was published in the Official Gazette on March 12, 2024.
-
9.2.2024
Amendments Were Made To The Regulations Based On The Occupational Health And Safety Law
In the Official Gazette dated 4 February 2024 and numbered 32450, amendments were made to some regulations issued based on the Occupational Health and Safety Law No. 6331:
-
1.2.2024
Turkish Competition Board Mergers And Acquisitions Outlook Report For 2023 Has Been Published
On January 5th, 2024, the Turkish Competition Authority has published the Report prepared by the Competition Board on Mergers, Acquisitions And Privatisation Transactions in 2023 ("Report").
-
31.1.2024
Important Principle Decision From The Advertising Board Regarding Discount Sale Advertisements
At the first meeting of the year held on January 9, 2024, the Advertising Board made an important principle decision regarding discount sale advertisements by amending the "Guideline on Advertisements Containing Price Information and Discount Sale Advertisements and Commercial Practices" in order to prevent consumer victimization through misleading advertisements and practices that lead to unfair competition in the retail trade sector.
-
17.1.2024
The Authority to Decide on Trademark Cancellation Passed to the Turkish Patent And Trademark Office!
In Article 192/1 (a) of the Industrial Property Law ("IPL") published in the Official Gazette dated 10 January 2017 and numbered 29944, the enforcement of Article 26 of the Law titled "Cancellation Cases and Cancellation Request" was postponed until seven years later, and with the Provisional Article 4 of the IPL, it was stipulated that the authority to decide on the cancellation of trademarks would be directly exercised by the Intellectual and Industrial Rights Civil Courts until 10 January 2024.
-
16.1.2024
Egemenoğlu Hukuk Bürosu / Internship Application
We are pleased to announce the opening of internship applications at Egemenoğlu Hukuk Bürosu. Legal Internship Application Deadline: March 15 Summer Internship Application Deadline: March 29 Prospective candidates are requested to submit their CVs either through our website www.egemenoglu.av.tr or by sending them to info@egemenoglu.av.tr.
-
12.1.2024
Turkish Sustainability Reporting Standards (TSRS) And Scope Of Application Of TSRSs Were Puslished In The Official Gazette
In the Official Gazette dated 29.12.2023 and numbered 32414, the Public Oversight, Accounting and Auditing Standards Authority (POA) announced the Turkish Sustainability Reporting Standards and determined the principles to be followed in sustainability reports.
-
11.1.2024
Important Regulations Which Are Effective As Of 2024 And/ Or Has Been Made Subject To Time Extension
Laws No. 5746 and No. 6550 extended the regulation on higher depreciation (showing expenses related to depreciation) and calculation rates and periods for new machines acquired for use in R&D, innovation and design activities.
-
19.12.2023
The Principles and Rules to be Applied in Retail Trade have been reorganize
With the "Regulation Amending the Regulation on Principles and Rules to be Applied in Retail Trade" prepared by the Ministry of Commerce and published in the official gazette on 14.12.2023, significant changes were made in the principles and rules of retail trade.
-
18.11.2023
Warning From The Authority On Sending Verification Codes To Customers Via Sms During Shopping
The Personal Data Protection Authority ("Authority") published a Public Announcement ("Announcement") on the Processing of Personal Data by Sending a Verification Code via SMS to the Data Subjects during Shopping in Stores.
-
14.11.2023
Communiqué Amending the Communiqué on the Procedures and Principles Regarding the Application of Article 376 of the Turkish Commercial Code No. 6102 has been published
In order to regulate the procedures and principles to be followed in cases of loss of capital or insolvency of joint stock companies, limited liability companies and limited partnership companies with capital divided into shares within the scope of Article 376 of the Turkish Commercial Code No. 6102 (Law), the Communiqué on the Procedures and Principles Regarding the Application of Article 376 of the Turkish Commercial Code No. 6102 (Communiqué) was first published in the Official Gazette dated 15/09/2018 and numbered 30536, and with the Provisional Article 1 of this Communiqué until 01/01/2023, Within the scope of Article 376 of the Law, it was stated that foreign exchange losses arising from foreign currency denominated liabilities that have not yet been fulfilled may not be taken into account in the calculations regarding capital loss or insolvency.