On 24 March 2016, the Turkish Grand National Assembly (the "TGNA") adopted the law on protection of personal data (the "Data Protection Law"). The Data Protection Law is Turkey's first targeted privacy and data protection legislation intended to uphold protection during the processing of personal data in line with the DPD. It was then sent to the President for approval and was published in the Official Gazette on 7 April 2016; the Data Protection Law is now in force with the exception of certain provisions which will only become effective after transition periods.

The Data Protection Law introduces and imposes new obligations on data processors and data controllers operating in Turkey and for the first time establishes a personal data protection authority in Turkey.

Organisations should ensure that their data processing activities in Turkey comply with the Data Protection Law, particularly in the absence of any previous such legislation in Turkey.

The Data Protection Law can be accessed here (Turkish).