Turkey’s Personal data Security Laws No. 6698 otherwise Kisisel Verileri Koruma Kanunu (KVKK) arrived to push on the , only months till the Eu passed their pioneering General Study Security Regulation (GDPR). The latest KVKK ‘s the basic law from inside the Poultry you to controls personal research cover and you can contours the fresh legal debt you to agencies and folks speaking about private information need certainly to comply with. Before the enactment of one’s KVKK, Poultry didn’t have a specific laws toward defense out of information that is personal. Study protection and coverage outside of a few formal groups was controlled due to just one provision about Turkish Constitution and some conditions of one’s Turkish Penal Password. The Turkish Analysis Security Expert (TDPA) is actually dependent given that a financially and you may administratively independent supervisory authority inside the very early 2017. The role is always to enforce the new provisions of your KVKK and boost social feel from the personal information safeguards. The new KVKK try meant to give Turkish laws and regulations relative to seeking arrangement-hyvitykset brand new EU’s Directive /EC, and that at the time governed study safety regarding Western european bloc. Yet not, new Directive is actually repealed in support of the fresh new GDPR just after the new KVKK within the Poultry came into push. Therefore, there are distinguished differences when considering this new KVKK and you may GDPR, not merely while the Turkish analysis safeguards laws is founded on the new GDPR’s ancestor and in addition given that studies cover law out-of Poultry includes its very own number of book standards. Why don’t we look closer!
Who this new KVKK apply at?
The new KVKK applies to any studies controllers and you will study processors you to definitely assemble analysis otherwise procedure research obtained regarding Poultry. Including organizations discovered inside Poultry, but also any foreign pure otherwise courtroom persons that are operating the non-public information off Turkish studies subjects.
Just what information is safe underneath the KVKK?
Private information is understood to be one guidance in accordance with a thought or recognizable natural individual. Turkey’s data safety regulations also includes stricter terms to own unique kinds from personal information, such as delicate information that is personal per battle, ethnic resource, political viewpoints, philosophical beliefs, religion, sect or any other values, gowns, subscription out of relationships, fundamentals, or trading unions, health data, suggestions linked to sexual lifetime, previous unlawful beliefs and you will security features, and biometric and you will hereditary investigation.
Subscription so you’re able to VERBIS
- Study controllers that have below 50 teams and you will a yearly equilibrium layer below TL twenty five mil (approximately $step 3.5 billion), as long as their chief craft does not require the new control away from unique categories of research;
- Studies controllers whom process analysis just by the low-digital form;
- Individualized brokers and you may mediators;
- Societal notaries, specialized social accounting firms, and you may attorneys;
- Connections, fundamentals, and syndicates;
- Political functions.
Inability to join up which have VERBIS can result in administrative penalties and fees out-of up to up to $ and/or restrict of your own controller’s analysis control points.
Cross-border transmits
Whenever you are these conditions are similar to that from brand new GDPR, new KVKK as well as allows the personal Data Cover Expert to help you ban the latest get across-edging transfer of information in the event direct consent of investigation subject is received whether it considers the hobbies of Chicken and/or analysis subject could be definitely harmed.
Analysis Violation Notifications and you may Impulse Arrangements
. Analysis controllers is obligated to alert the brand new TDPA regarding the a document violation within 72 times to become alert to it using the Studies Breach Alerts Function provided by new TDPA. Justifications for any delays should become sent on means. Influenced research sufferers have to be informed of breach too, however, a particular time period for this is not given.
Within the same choice, the new TDPA and additionally caused it to be a need for research controllers in order to get ready a data Breach Reaction Bundle that have to term a message individual end up being called in case there is a document breach. This person may be the top section out-of get in touch with to your TDPA and get accountable for the review of one’s consequences out of any breaches that can can be found.
Charges
Data controllers whom fail to adhere to the needs of new KVKK face administrative penalties and fees all the way to up to TL step 1.5 billion (about $230,000), according to the law of gravity of one’s admission. Crimes regarding the personal information, meanwhile, is actually ruled less than Posts 135-140 from Turkish Penal Password Zero. 5237.
The value of the newest penalties and fees was increased each year predicated on this new lso are-testing beliefs penned throughout the Certified Gazette with Taxation Proceeding Legislation Communiques. All quantity that appear in this article correspond to the brand new 2019 re-comparison.
