On 24 March 2016, the Turkish Parliament adopted the first legislation specifically focused on privacy and data protection. This marks the end of a nine year preparation process following Turkey´s signature and recent ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (‘Convention 108’ of the Council of Europe). The goal of the new law is to be in line with the EU Data Protection Directive. The law provides for the establishment of a Data Protection Authority, consisting of around 200 employees, with the authority to impose fines of up to €300,000 and sentence up to four years imprisonment in the event of non-compliance.

Data Guidance News Release