NEW REGULATION ON PROCESSING OF PERSONAL DATA IN ELECTRONIC COMMMUNICATIONS SECTOR PUBLISHED 24 December 2020
|
REGULATION ON OF PERSONAL DATA IN ELECTRONIC COMMUNICATIONS SECTOR (“The Regulation”) was published in the Official Gazette dated 4 December 2020 and numbered 31324. The Regulation regulates the procedures and principles for the processing of personal data and protection of privacy in the electronic communications sector, and aims to ensure the protection of privacy and fundamental rights and freedoms of individuals. |
|
What did the regulation bring with it? |
|
The Regulation regulates the procedures and principles that the operators operating in the electronic communications sector will comply with in terms of the data they obtain within the scope of providing electronic communication services to legal and natural person subscribers. |
|
With this Regulation, principles have been introduced in parallel with the Personal Data Protection Law No. 6698 (“DPL”), which must be followed in the processing of personal data. In addition to these principles that are in line with the law, a separate situation has been brought at this point. It is essential that traffic and location data be not transferred outside Turkey for national security reasons. |
|
With the regulation, the obligation of the Operators to ensure the security of the personal data of their subscribers or users has been brought. In this context, Operators are obliged to take all necessary measures in accordance with the national and international standards regarding the protection of these data, provided that they keep the minimum measures specified in the Regulation in any case. |
|
The Information Technologies and Communication Authority ("Authority") may request information and documents from the operators and request changes in measures. Another obligation imposed on operators here is the obligation of the operators to keep their records regarding access to personal data and other related systems for two years. |
|
Operators will also notify the Information Technologies Authority in addition to the Personal Data Protection Authority, subscribers or users in case of any personal data breach. |
|
In cases requiring explicit consent, some additional conditions have been introduced to the conditions specified in the DPL. It is also clearly regulated in the Regulation that express consent can be requested from the subscriber/ user in exchange for additional benefits such as gift minutes, SMS and data. |
|
The regulation states that the explicit consent of the subscriber/ user must be obtained in written or electronic form and that the records regarding this will be kept for the minimum subscription period. In addition, operators will remind relevant subscribers/ users in the third quarter of each year for processing purposes based on explicit consent. Otherwise, personal data processing activity based on explicit consent will be stopped until notification is made. |
|
The Regulation also stipulates that the explicit consent given by the subscriber will be automatically withdrawn if the subscription is terminated as of the expiration date, unless otherwise requested by the subscriber. |
|
In cases where traffic and location data are transferred to third parties, it is stipulated to also obtain explicit consent by including the data specified within the scope of subparagraph e of paragraph 1 of Article 8 of the Regulation. |
|
In cases where traffic and location data can be processed, the operators are obliged to inform the subscribers/ users about the types, processing purposes and periods of these data and the scope of the information obligation specified in the DPL has been expanded specifically for these data. |
|
It has been stated that if the operators violate their obligations specified in this Regulation, sanctions in the form of administrative fines and cancellation of their authorization will be applied by the Authority in accordance with the Administrative Sanctions Regulation. |
|
The Regulation will enter into force six months after its publication in the Official Gazette, in other words, on June 4, 2021. |
|
As a result, with this Regulation published, additional obligations have been imposed on the operators providing electronic communication services within the scope of personal data, and it is planned to secure the personal data of subscribers / users with these obligations. In this context, complying with the provisions of this Regulation while processing personal data of the operators in this sector will prevent them from facing any administrative sanctions. |
Other News
-
16.6.2025
The Court Of Cassation Abandoned Its Long-Standing Precedent Regarding Construction Conracts In Return For Land Shares, Known As "Advance Deed"
Construction contracts in return for land shares are a common practice in the construction sector in Turkey.
-
11.6.2025
Amendments To The Regulation On Distance Contracts: Return Shipping Fees And Right Of Withdrawal For Electronics
With the Regulation Amending the Regulation on Distance Contracts ("Amending Regulation") published in the Official Gazette dated May 24, 2025 and numbered 32909, important amendments were made regarding distance sales. The key changes introduced by the Amending Regulation are as follows:
-
30.5.2025
Alimony Against Inflation: Adjustmen of Alimony and the Issue of Payment in Foreign Currency
Alimony for supplementary welfare allowance and child support awarded by court judgment as a result of divorce cases is generally fixed at a certain amount and either remains the same over the years or is increased only within limited rates determined by the court. Similarly, the provisional alimony determined during the litigation process can become insufficient over time due to the prolonged duration of the proceedings and high inflation; this significantly hampers the effectiveness of alimony enforcement.
-
23.5.2025
Right To Compassionate Leave: Duration, Implementation And Assessment
Legal Basis and Definition of Compassionate Leave: In situations where an employee is unable to perform their work obligation due to certain personal circumstances in which, pursuant to the principle of good faith, the employer cannot reasonably expect the employee to work, the employee must be deemed to be on justified leave. Compassionate leave was introduced by Law No. 6645 in 2015 and is regulated under Additional Article 2 of the Turkish Labour Law No. 4857.
-
20.5.2025
The Right to Be Forgotten in the Context of Search Engines
IWith the rapid advancement of technology, personal data is increasingly recorded in digital environments and can be stored for long periods of time. This situation causes individuals' past negative experiences or changing opinions over time to remain constantly accessible. In particular, search engines make personal data widely accessible by indexing results that appear when searching individuals by their first and last names. Within this context, the "Right to Be Forgotten" stands out as the right of individuals to request the deletion of their personal data or the restriction of access to it in digital environments.
-
16.5.2025
The Penalty Clause in Turkish Law, Reduction of the Penalty Clause, and Practial Interpretations
One of the fundamental concepts of contract law, "penalty clauses" function as an important security for the creditor in the event that the debtor fails to properly perform their obligation. As an extension of the principle of freedom of contract, the parties may agree in advance to the payment of a specific amount in case the obligation is not performed at all or not performed correctly, thereby encouraging performance and easing the burden of proof for any damages that may arise.
-
13.5.2025
A Review on US Customs Tariffs and Its Impact on M&A Transactions
US President Donald Trump recently announced a "declaration of economic independence". Accordingly, a reciprocal tariff on all countries came into force. The tariff rate for Turkey was set at 10%, i.e. the minimum rate.
-
12.2.2025
An EMRA Decision: Capital Increase Obligation for Electricity Market Companies in Share Transfers to Foreign Investors
1. Current Regulation The Energy Market Regulatory Authority ("EMRA" or the "Authority") regulates the transfer of shares in the capital of companies operating in the electricity market under Article 57 of the Electricity Market Licence Regulation ("Regulation").
-
29.1.2025
Turkish Competition Board Mergers And Acquisitions Outlook Report For 2024 Has Been Published
On January 7th, 2025, the Turkish Competition Authority has published the Report prepared by the Competition Board on Mergers, Acquisitions And Privatisation Transactions in 2024 ("Report").
-
22.11.2024
The Procedure of Sale by Auction and The Legal Aspect of New Regulations Brought by the 9th Judicial Package
By new regulations brought by the 9th Judicial Package, a new legal frame for the sale of seized goods electronically is instructed according to Enforcement and Bankruptcy Law Article 111/b. Transactions about the sales of seized goods are made via a sale portal integrated with the National Judicial Network Information System (UYAP) by auction. However, because of the legal gaps of the law, an application about the sale transactions cannot be displayed. The amendments introduced by legislators to the law regarding electronic sales in the 8th and 9th Judicial Packages, as well as the newly established regulations, are considered an important step toward making foreclosure processes faster and ensuring that sales transactions are conducted in a safer and more transparent environment.
-
15.11.2024
Law Numbered 7531 On Amendments To Certain Laws Was Published
Law1 No. 7531 on the Amendment of Certain Laws ("Law"), also known as the 9th Judicial Package, was published in the Official Gazette dated 14.11.2024 and numbered 32722 and contains significant amendments to 17 different laws.
-
13.11.2024
E-Government Era Begins In Lease Agreements!
The Ministry of Treasury and Finance ("Ministry") announced in the 2023-2025 period of its 2022 Action Plan for Combating the Informal Economy ("Action Plan") that lease agreements could be concluded through the e-Government portal to support the decision-making processes of the parties involved and conduct risk analysis studies. The first phase of this activity was launched on November 4, 2024, through the e-Government portal, and the second phase is expected to be implemented by the end of the year.
-
11.11.2024
A New Era in Digital Markets: The Competition Authori's The Competition Authority's 2024-2028 Strategic Plan Published
The Competition Authority ("the Authority") has published its 2024-2028 Strategic Plan ("the Strategic Plan") with the aim of adapting to the rapidly evolving dynamics of digital markets and maintaining a competitive economic order. Developed in light of recent shifts in the global competitive environment, the Strategic Plan focuses on new regulations in digital markets and emerging technologies. The Authority aims to ensure fair and competitive markets through this plan, with a clear focus on enhancing consumer welfare.
-
31.10.2024
Public Announcement on Standard Contract Notification Module Published
Public Announcement on Standard Contract Notification Module published on 24.10.2024 on the official website of Personal Data Protection Authority ("Authority"). By the decision dated 17.10.2024, the Personal Data Protection Board ("Board") created "Standard Contract Notification Module" ("Module") in order to carry out standard contract notification processes in a faster and more efficient manner and decided that the notifications could also be carried out online via the Module.
-
28.10.2024
Warning To Research Companies: Inform First, Then Obtain Consent
After the number of complaints to the Personal Data Protection Authority ("Authority"), the Authority published a Public Announcement on "Personal Data Processing Activities of Research Companies by Using "Random-Digit Dialing as a Method of Telephone Sampling" for the purpose of Statistical Research" ("Public Announcement").
