The Turkish Personal Data Protection Board (“Board”) adopted a decision regarding Amazon Turkey at the beginning of this year, on the 27th of February (“Amazon Turkey Decision”). Amazon Turkey Decision has touched upon several issues regarding Turkish Data Protection Law but this article focuses only on the sections regarding transfer of personal data to third countries. […]
Your responsibilities to your customers as a data processor
The Turkish Data Protection Law defines a data controller as “the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system”. According to the guidelines that the Turkish Data Protection Board has published on its website, “data processors […]
Data Processing Agreement (DPA) Under Turkish Data Protection Law
Data controllers who wish to entrust their data processing activity to a third party must appoint such third party as the data processor on behalf of them with a contract. The said contract under which a data controller authorizes a third party to process personal data on their behalf and in accordance with their instructions […]





