Protection of Personal Data

Law No. 6698 on the Protection of Personal Data ("KVKK"), published in Official Gazette No. 29677 of 7 April 2016, put the processing and protection of personal data on a statutory footing and placed substantial duties on companies that process the data of employees, customers, suppliers and other third parties. Significant sanctions are provided for against company officers as well.

In the process of compliance with these legal obligations, Onur Law Office provides comprehensive consultancy services to companies within the framework of the "Personal Data Protection Law Compliance Process Project", in line with the requests of its clients.

For Turkish companies with foreign capital, companies with subsidiaries in European Union Member States, and companies with exports, imports, joint ventures and projects with the European Union, compliance with the General Data Protection Regulation ("GDPR"), which became applicable on 25 May 2018, is observed separately.

The main services Onur Law Office provides within the framework of the "Personal Data Protection Law Compliance Process Project" are: training company officers on the protection of personal data; carrying out a situation analysis of personal data and drawing up the company's personal data map; preparing the company's personal data inventory and its risk map; identifying deficiencies and the actions required on the basis of that analysis, and developing recommendations within the framework of Turkish and European Union (KVKK–GDPR) legislation and practice; establishing a system for the protection of personal data, formulating company policies, preparing the necessary legal documents and making the required additions to contracts; implementing and monitoring that system; and providing regular consultancy under the KVKK and other relevant legislation once the Compliance Process Project is complete.