TRENDE
Client Portal Contact
FAQ · Practice & Disputes

Is my company required to comply with KVKK?

Yes. Almost every business that processes employee, customer, or supplier data is subject to KVKK (Türkiye's Personal Data Protection Law) obligations in its capacity as data controller. Privacy notices, security measures, data retention and destruction, and, where required, registration with VERBİS (the Turkish data controllers' registry) are mandatory. Non-compliance leads to serious administrative fines.

Updated · July 20261 min readCategory · Practice & Disputes
Short answer

Yes. Almost every business that processes employee, customer, or supplier data is subject to KVKK (Türkiye's Personal Data Protection Law) obligations in its capacity as data controller. Privacy notices, security measures, data retention and destruction, and, where required, registration with VERBİS (the Turkish data controllers' registry) are mandatory. Non-compliance leads to serious administrative fines.

Yes. Almost every business that processes employee, customer, or supplier data is subject to KVKK (Türkiye’s Personal Data Protection Law) obligations in its capacity as data controller. Privacy notices, security measures, data retention and destruction, and, where required, registration with VERBİS (the Turkish data controllers’ registry) are mandatory. Non-compliance leads to serious administrative fines.

Shall we apply this matter to your situation?

Tell us your specific situation in a few sentences; we'll assess it with the right team.

Get in touch →
This content is for general information purposes only and does not constitute legal advice. For an assessment specific to your situation, please get in touch with our team.
CategoriesPractice & Disputes
★

Related questions

The choice should be based on the value of the dispute, the need for confidentiality, speed, the counterparty's position, enforceability, and the dispute resolution clause in the contract.

Read the full answer →

Yes. A brief legal review before signing can prevent costly risks in the liability, termination, penalty clause, payment, and dispute provisions.

Read the full answer →

The LkSG is Germany's supply chain due diligence act, while the CSDDD is the EU-level framework, applying from 26.07.2029 and, since Omnibus I, covering a narrower set of companies than the LkSG; Turkish suppliers are most often affected through contracts and customer requirements.

Read the full answer →
★

Related Areas of Work

Consider this question together with the relevant services, practice areas, focus areas, sectors and desks.

Practice Areas

The legal disciplines this question sits within.

See all
Practice & Disputes

The right start means a predictable process.

From the first meeting to completion of the work; let's plan every step transparently.

Get in touch →All questions →