The Personal Data Protection Law, which has been in force since March 24, 2016, has been amended and published in the Official Gazette dated March 12, 2024. The proposed amendments are expected to enter into force on June 1, 2024. Under the PDPL reform, the transfer of personal data abroad based on explicit consent is allowed to continue until September 1, 2024.

• The Law on Amendments to the Code of Criminal Procedure and Certain Laws, which includes changes to the Personal Data Protection Law No. 6698 and was submitted to the Grand National Assembly of Turkey (TBMM) on February 16, 2024, was adopted by the General Assembly of TBMM on March 2, 2024. The relevant amendment concluded with decisions on proposals to amend Article 6, which regulates the processing of special categories of personal data; Article 9, which governs the transfer of personal data abroad; and Article 18, which addresses misdemeanors.
• With the amendments, data controllers must promptly revise their inventories and compliance documents related to data processing activities.
• Adhering to the previous regulations will result in data controllers not being fully compliant with the legislation, thereby increasing the risk of administrative fines.