Abstract

One of the biggest government data breaches in history took place in 2016 when the personal data of 50 million Turkish citizens was posted online in a single file. This politically motivated hack exposed two-thirds of the Turkish population to the risk of identity fraud, by publishing their names, addresses, dates of birth and national identity numbers. Turkey keeps much of its legal system in line with the EU and recently passed a law similar to the General Data Protection Regulation (GDPR). Turkey's data protection laws allow for administrative fines of up to 3% of a company's net annual sales to be levied if personal data is stolen, or disclosed without consent. In our increasingly online world, even companies without any physical presence in Turkey may be subject to Turkish data protection law and may have to register there if their activities have an effect in Turkey. Eren Can Ersoy of Kılınç Law & Consulting takes us through the regulations and how to ensure compliance.

Full Text
Published version (Free)

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call