{"id":2946,"date":"2020-06-22T09:58:31","date_gmt":"2020-06-22T06:58:31","guid":{"rendered":"https:\/\/harveyarasan.com\/?post_type=portfolio&#038;p=2946"},"modified":"2026-09-19T17:50:14","modified_gmt":"2026-09-19T14:50:14","slug":"turkey-data-protection-law-gdpr","status":"publish","type":"portfolio","link":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/","title":{"rendered":"Turkish Data Protection Law (KVKK) and GDPR Advisory"},"content":{"rendered":"\r\n<p class=\"p3 wp-block-paragraph\">Data protection compliance in T\u00fcrkiye requires more than a set of privacy notices and internal policies. Companies must understand what personal data they process, why they process it, where it is stored, who can access it and whether it is transferred outside T\u00fcrkiye.<\/p>\r\n<p class=\"p3\">HARVEY ARASAN advises Turkish and international companies on compliance with Turkish Personal Data Protection Law No. 6698, commonly known as the KVKK. We also advise on the EU General Data Protection Regulation (GDPR) where it applies to a company\u2019s activities.<\/p>\r\n<p class=\"p3\">Our objective is to establish a data protection framework that reflects the company\u2019s actual operations. We prepare clear documentation, allocate internal responsibilities and work with legal, technology, human resources and operational teams to ensure that the framework can be implemented in practice.<\/p>\r\n<h3><span class=\"s1\"><b>KVKK Compliance Projects<\/b><\/span><\/h3>\r\n<p class=\"p3\">We begin a KVKK compliance project by identifying the company\u2019s personal data processing activities and data flows. We review the organisation, business model, workforce, technology infrastructure, service providers and international operations before determining the applicable requirements.<\/p>\r\n<p class=\"p4\">Our compliance projects may include:<\/p>\r\n<ul>\r\n<li>Mapping personal data processing activities and data flows<\/li>\r\n<li>Identifying data controllers, processors and sub-processors<\/li>\r\n<li>Determining data categories, data subject groups and processing purposes<\/li>\r\n<li>Establishing the appropriate legal basis for each processing activity<\/li>\r\n<li>Preparing or updating the personal data processing inventory<\/li>\r\n<li>Assessing the obligation to register with the Data Controllers\u2019 Registry, known as VERBIS<\/li>\r\n<li>Determining retention periods and disposal procedures<\/li>\r\n<li>Reviewing domestic and international data transfers<\/li>\r\n<li>Identifying deficiencies in contracts, policies and operational practices<\/li>\r\n<li>Preparing a company-specific compliance action plan<\/li>\r\n<\/ul>\r\n<p class=\"p3\">A personal data processing inventory should not be treated solely as a regulatory formality. A properly structured inventory allows the company to understand and manage its processing activities even when employees, service providers and internal systems change.<\/p>\r\n<h3><span class=\"s1\"><b>Privacy Notices, Policies and Internal Documentation<\/b><\/span><\/h3>\r\n<p class=\"p3\">Data protection documentation must accurately reflect the company\u2019s actual processing activities. Generic templates or documents copied from another organisation may not address the company\u2019s data flows, technologies or legal obligations.<\/p>\r\n<p class=\"p4\">Depending on the company\u2019s activities, we prepare and review:<\/p>\r\n<ul>\r\n<li>Employee and candidate privacy notices<\/li>\r\n<li>Customer, user and supplier privacy notices<\/li>\r\n<li>Explicit consent forms<\/li>\r\n<li>Website and mobile application privacy policies<\/li>\r\n<li>Cookie policies and consent mechanisms<\/li>\r\n<li>Personal data retention and disposal policies<\/li>\r\n<li>Data protection and security procedures<\/li>\r\n<li>Data subject request procedures<\/li>\r\n<li>Data breach response plans<\/li>\r\n<li>Employee confidentiality undertakings<\/li>\r\n<li>Access management and authorisation procedures<\/li>\r\n<li>Policies concerning CCTV, electronic communications and company devices<\/li>\r\n<\/ul>\r\n<p class=\"p3\">We focus on consistency between the documents and the company\u2019s actual practices. We also use clear language so that the relevant employees and business teams can understand and apply the procedures.<\/p>\r\n<h3><span class=\"s1\"><b>Controller, Processor and Vendor Agreements<\/b><\/span><\/h3>\r\n<p class=\"p3\">Cloud services, human resources platforms, CRM systems, call centres, consultants and other external service providers may create multiple personal data processing and transfer relationships.<\/p>\r\n<p class=\"p3\">The roles of the parties must be determined by reference to their actual activities and decision-making powers. Merely describing a party as a controller or processor in a contract does not necessarily determine its legal status.<\/p>\r\n<p class=\"p4\">Our services in this area include:<\/p>\r\n<ul>\r\n<li>Drafting and reviewing data processing agreements<\/li>\r\n<li>Determining controller, processor and sub-processor roles<\/li>\r\n<li>Preparing provisions governing the appointment of sub-processors<\/li>\r\n<li>Reviewing security, audit, notification and liability provisions<\/li>\r\n<li>Aligning data protection provisions with the underlying commercial agreement<\/li>\r\n<li>Preparing intra-group data transfer arrangements<\/li>\r\n<li>Reviewing vendor and technology procurement contracts from a data protection perspective<\/li>\r\n<\/ul>\r\n<p class=\"p3\">We assess the data processing terms together with the scope of the service, contractual liability, indemnities, technical infrastructure and use of subcontractors.<\/p>\r\n<p class=\"p3\">Further information is available in our article on <a href=\"https:\/\/harveyarasan.com\/en\/data-processing-agreement-under-turkish-law\/\">Data Processing Agreements under Turkish Data Protection Law<\/a>.<\/p>\r\n<h3><span class=\"s1\"><b>International Transfers of Personal Data<\/b><\/span><\/h3>\r\n<p class=\"p3\">The use of international cloud providers, data hosting outside T\u00fcrkiye or remote access by teams located abroad may constitute an international transfer of personal data under Turkish law.<\/p>\r\n<p class=\"p3\">We first identify where the data is stored, the countries from which it can be accessed and the legal roles of the parties involved. We then determine which international transfer mechanism may be used.<\/p>\r\n<p class=\"p4\">Our services include:<\/p>\r\n<ul>\r\n<li>Preparing data transfer maps<\/li>\r\n<li>Identifying the data exporter and data recipient<\/li>\r\n<li>Determining whether each party acts as a controller or processor<\/li>\r\n<li>Assessing the available appropriate safeguard mechanisms<\/li>\r\n<li>Preparing the applicable KVKK standard contract and its annexes<\/li>\r\n<li>Managing the required notification process before the Turkish Data Protection Authority<\/li>\r\n<li>Reviewing sub-processors and onward transfers<\/li>\r\n<li>Assessing whether binding corporate rules may be appropriate<\/li>\r\n<li>Preparing intra-group data transfer agreements<\/li>\r\n<li>Coordinating the Turkish transfer structure with GDPR transfer requirements<\/li>\r\n<\/ul>\r\n<p class=\"p3\">The location of the server is not the only relevant factor. Access from another country for maintenance, customer support, troubleshooting or other operational purposes must also be considered.<\/p>\r\n<h3><span class=\"s1\"><b>Data Protection for SaaS, Technology and AI Products<\/b><\/span><\/h3>\r\n<p class=\"p3\">Technology companies frequently process personal data through cloud infrastructure, distributed teams, APIs, artificial intelligence tools and third-party service providers. These structures require both legal and technical data flows to be understood.<\/p>\r\n<p class=\"p4\">We advise SaaS providers, technology companies and digital platforms on:<\/p>\r\n<ul>\r\n<li>Mapping the processing activities carried out through the product<\/li>\r\n<li>Determining controller, processor and sub-processor roles<\/li>\r\n<li>Drafting customer-facing data processing agreements<\/li>\r\n<li>Preparing sub-processor lists and change notification procedures<\/li>\r\n<li>Reviewing international hosting, maintenance and support access<\/li>\r\n<li>Drafting privacy policies, cookie policies and user-facing notices<\/li>\r\n<li>Applying privacy by design principles during product development<\/li>\r\n<li>Assessing the use of personal data in AI systems, training datasets and user inputs<\/li>\r\n<li>Structuring data retention, deletion and export procedures<\/li>\r\n<li>Reviewing end-user terms and customer contracts for data protection consistency<\/li>\r\n<\/ul>\r\n<p class=\"p3\">For a foreign technology company entering the Turkish market, translating existing GDPR documentation into Turkish is rarely sufficient. The product\u2019s processing structure must be assessed separately, and the documents must address requirements specific to the KVKK.<\/p>\r\n<p class=\"p3\">Our article on <a href=\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\">the responsibilities of data processors towards their customers<\/a> provides further information on processor obligations under Turkish law.<\/p>\r\n<h3><span class=\"s1\"><b>GDPR and Multi-Jurisdictional Compliance<\/b><\/span><\/h3>\r\n<p class=\"p3\">The GDPR may apply to a Turkish company because of its establishment, customers, users, employees or monitoring activities in the European Economic Area. International groups may also need to coordinate their Turkish compliance programme with their wider GDPR framework.<\/p>\r\n<p class=\"p4\">Where relevant, we advise on:<\/p>\r\n<ul>\r\n<li>Assessing whether the GDPR applies to particular activities<\/li>\r\n<li>Coordinating KVKK and GDPR documentation<\/li>\r\n<li>Identifying inconsistencies between Turkish and European processing structures<\/li>\r\n<li>Reviewing controller and processor arrangements<\/li>\r\n<li>Assessing international data transfers under both regimes<\/li>\r\n<li>Preparing group-level privacy documentation<\/li>\r\n<li>Coordinating with foreign counsel and data protection teams<\/li>\r\n<li>Adapting international policies to Turkish operations<\/li>\r\n<\/ul>\r\n<p class=\"p3\">We do not treat the KVKK as a Turkish translation of the GDPR. Although the two regimes share important concepts, their statutory requirements, regulatory procedures and international transfer mechanisms must be assessed separately.<\/p>\r\n<h3><span class=\"s1\"><b>Managing Data Subject Requests<\/b><\/span><\/h3>\r\n<p class=\"p3\">Companies must respond to requests from employees, customers, users and other data subjects within the applicable statutory periods.<\/p>\r\n<p class=\"p4\">We assist companies with:<\/p>\r\n<ul>\r\n<li>Establishing data subject request procedures<\/li>\r\n<li>Assessing access, correction, deletion and objection requests<\/li>\r\n<li>Collecting the required information from internal departments<\/li>\r\n<li>Preparing legally compliant responses<\/li>\r\n<li>Coordinating the implementation of deletion or correction requests<\/li>\r\n<li>Assessing the risk of a subsequent complaint to the Turkish Data Protection Board<\/li>\r\n<\/ul>\r\n<p class=\"p3\">A clear internal procedure helps ensure that requests are directed to the correct teams and handled consistently.<\/p>\r\n<h3><span class=\"s1\"><b>Data Breach Response<\/b><\/span><\/h3>\r\n<p class=\"p3\">Unauthorised access, disclosure to an incorrect recipient, loss of a device, cyberattacks or a vulnerability affecting a service provider may result in a personal data breach.<\/p>\r\n<p class=\"p4\">When a potential breach occurs, we assist with:<\/p>\r\n<ul>\r\n<li>Determining whether the incident constitutes a personal data breach<\/li>\r\n<li>Identifying the affected data and categories of data subjects<\/li>\r\n<li>Coordinating the legal, technology and information security teams<\/li>\r\n<li>Preparing notifications to the Turkish Data Protection Board<\/li>\r\n<li>Preparing communications to affected data subjects<\/li>\r\n<li>Reviewing contractual obligations towards customers and service providers<\/li>\r\n<li>Assessing liability under data processing and commercial agreements<\/li>\r\n<li>Determining the legal and organisational measures required following the incident<\/li>\r\n<\/ul>\r\n<p class=\"p3\">Preparing a response plan and allocating responsibilities before an incident occurs allows the company to act more quickly and consistently.<\/p>\r\n<h3><span class=\"s1\"><b>Training and Ongoing Data Protection Advice<\/b><\/span><\/h3>\r\n<p class=\"p3\">Data protection compliance is an ongoing process. A company\u2019s data processing structure changes as it introduces new products, hires employees, appoints service providers or adopts new technologies.<\/p>\r\n<p class=\"p4\">We provide:<\/p>\r\n<ul>\r\n<li>Employee awareness training<\/li>\r\n<li>Training for management and legal teams<\/li>\r\n<li>Tailored workshops for human resources, sales, marketing and technology teams<\/li>\r\n<li>Data protection assessments for new products and projects<\/li>\r\n<li>Updates on legislative and regulatory developments<\/li>\r\n<li>Ongoing advice on operational data protection questions<\/li>\r\n<li>Periodic reviews of existing documentation and practices<\/li>\r\n<\/ul>\r\n<p class=\"p3\">We tailor training sessions to the company\u2019s actual activities. This helps employees understand how data protection requirements affect their daily responsibilities.<\/p>\r\n<h3><span class=\"s1\"><b>Investigations and Data Protection Disputes<\/b><\/span><\/h3>\r\n<p class=\"p3\">We represent companies in investigations conducted by the Turkish Data Protection Board and in disputes arising from the processing of personal data.<\/p>\r\n<p class=\"p4\">Our services include:<\/p>\r\n<ul>\r\n<li>Reviewing requests for information and documents from the Authority<\/li>\r\n<li>Preparing written explanations and legal defences<\/li>\r\n<li>Managing proceedings arising from data subject complaints<\/li>\r\n<li>Assessing Board decisions and administrative sanctions<\/li>\r\n<li>Challenging administrative fines through the applicable legal procedures<\/li>\r\n<li>Handling claims for pecuniary and non-pecuniary damages<\/li>\r\n<li>Representing companies in disputes involving employees, customers and service providers<\/li>\r\n<\/ul>\r\n<p class=\"p3\">Our assessment considers the company\u2019s documentation, technical records, contracts and actual practices. This is particularly important where the written policies and operational processes do not fully correspond.<\/p>\r\n<h3><span class=\"s1\"><b>Our Approach<\/b><\/span><\/h3>\r\n<p class=\"p3\">Our first step is to understand the company\u2019s business model and processing activities. We build the compliance framework around the company\u2019s departments, systems, products and service-provider relationships.<\/p>\r\n<p class=\"p4\">Our work focuses on:<\/p>\r\n<ul>\r\n<li>Ensuring consistency between legal documents and operational practices<\/li>\r\n<li>Making internal responsibilities clear<\/li>\r\n<li>Preparing documentation that employees can understand and use<\/li>\r\n<li>Coordinating legal, technology and information security teams<\/li>\r\n<li>Identifying risks before launching new products or services<\/li>\r\n<li>Keeping the compliance framework capable of being updated as the business changes<\/li>\r\n<\/ul>\r\n<h3><span class=\"s1\"><b>When Should a Company Seek Data Protection Advice?<\/b><\/span><\/h3>\r\n<p class=\"p4\">A legal review is particularly advisable where:<\/p>\r\n<ul>\r\n<li>The company is carrying out its first comprehensive KVKK compliance project<\/li>\r\n<li>Existing documentation has not been updated for a significant period<\/li>\r\n<li>A new software product, mobile application or SaaS service will be launched<\/li>\r\n<li>International hosting or service providers will be used<\/li>\r\n<li>A foreign company is entering the Turkish market<\/li>\r\n<li>Artificial intelligence systems or new data analysis tools will be introduced<\/li>\r\n<li>The company is preparing for an investment or M&amp;A transaction<\/li>\r\n<li>A data breach or data subject complaint has occurred<\/li>\r\n<li>The company has received a request from the Turkish Data Protection Authority<\/li>\r\n<\/ul>\r\n<p class=\"p3\">To discuss your company\u2019s data processing structure and the appropriate scope of legal support, please contact our team.<\/p>\r\n<p class=\"p1\"><a href=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/07\/Personal-Data-Protection-Guide.pdf\"><b>Read Our Personal Data Protection Guide.<\/b><\/a><\/p>\r\n\r\n\r\n<section class=\"gb-block-post-grid featuredpost aligncenter\"><div class=\"gb-post-grid-items is-grid columns-2\"><article id=\"post-5055\" class=\"gb-post-grid-item post-5055 post type-post status-publish format-standard has-post-thumbnail category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/en-turkish-data-protection-law-kvkk-guide\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"1408\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-scaled.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-scaled.jpg 2560w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-1024x563.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-768x422.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-2048x1127.jpg 2048w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2026\/09\/Personal-Data-Protection-Guide-800x440.jpg 800w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/en-turkish-data-protection-law-kvkk-guide\/\" rel=\"bookmark\">Turkish Data Protection Law (KVKK): A Practical Guide for Businesses<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>Companies operating in T\u00fcrkiye must comply with Turkish Personal Data Protection Law No. 6698, commonly known as the KVKK. This&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-4816\" class=\"gb-post-grid-item post-4816 post type-post status-publish format-standard has-post-thumbnail category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/public-event-footage-and-privacy-a-look-from-turkey\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/10\/HA_PublicEvent-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/public-event-footage-and-privacy-a-look-from-turkey\/\" rel=\"bookmark\">Public Event Footage and Privacy: A Look from Turkey<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>In the summer of 2025, data protection became a hot topic at public events. Concerts, festivals, and sports games sparked&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-4799\" class=\"gb-post-grid-item post-4799 post type-post status-publish format-standard has-post-thumbnail category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/turkish-constitutional-court-confirms-right-to-protection-of-personal-data-and-imposes-positive-obligations-on-the-state\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2025\/08\/HA_KVKKAnayasaKarar-Kapak-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/turkish-constitutional-court-confirms-right-to-protection-of-personal-data-and-imposes-positive-obligations-on-the-state\/\" rel=\"bookmark\">Turkish Constitutional Court Confirms Right to Protection of Personal Data and Imposes Positive Obligations on the State<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>In a recent ruling, Turkey\u2019s Constitutional Court clarified the scope of constitutional protection for personal data. On 20 March 2025,&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-3698\" class=\"gb-post-grid-item post-3698 post type-post status-publish format-standard has-post-thumbnail category-default category-data-protection-information-security tag-cybersecurity entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/new-cybersecurity-management-obligations-and-liabilities-under-nis2-directive\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_CyberSecurity-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/new-cybersecurity-management-obligations-and-liabilities-under-nis2-directive\/\" rel=\"bookmark\">New Cybersecurity Management Obligations and Liabilities under NIS2 Directive<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>The Directive (EU) 2022\/2555 on measures for a common level of cybersecurity across the Union (the &#8220;NIS2 Directive&#8221;) was published&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-3693\" class=\"gb-post-grid-item post-3693 post type-post status-publish format-standard has-post-thumbnail category-default category-ma-corporate-and-commercial-law category-data-protection-information-security category-startup-law category-startups entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/artificial-intelligence-based-services-and-security-of-company-data\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_AIBasedServices-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/artificial-intelligence-based-services-and-security-of-company-data\/\" rel=\"bookmark\">Artificial Intelligence-Based Services and Security of Company Data<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>While we talk about the many benefits of AI technology, we should not ignore the data protection and privacy concerns&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-3678\" class=\"gb-post-grid-item post-3678 post type-post status-publish format-standard has-post-thumbnail category-default category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/new-adequacy-decision-for-eu-us-data-privacy-framework\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2023\/08\/HA_NewAdequacyDecisionEU-USDataPrivacy-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/new-adequacy-decision-for-eu-us-data-privacy-framework\/\" rel=\"bookmark\">New Adequacy Decision for EU-US Data Privacy Framework<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>The European Commission has adopted an adequacy decision for the European Union \u2013 United States (EU-US Data Privacy Framework (DPF).&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-3019\" class=\"gb-post-grid-item post-3019 post type-post status-publish format-standard has-post-thumbnail category-default category-doing-business-in-turkey category-e-commerce-law category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/amazon-turkey-decision-and-its-implications-on-data-transfers-to-third-countries\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/08\/HA_AmazonTurkey-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/amazon-turkey-decision-and-its-implications-on-data-transfers-to-third-countries\/\" rel=\"bookmark\">Amazon Turkey Decision and its implications on data transfers to third countries<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>The Turkish Personal Data Protection Board (\u201cBoard\u201d) adopted a decision regarding Amazon Turkey at the beginning of this year, on&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-3024\" class=\"gb-post-grid-item post-3024 post type-post status-publish format-standard has-post-thumbnail category-default category-data-protection-information-security entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/06\/HA_ResponsibilitiesDataProcessor-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/your-responsabilities-to-your-customers-as-a-data-processor\/\" rel=\"bookmark\">Your  responsibilities  to your customers as a data processor<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>The Turkish Data Protection Law defines a data controller as \u201cthe natural or legal person who determines the purposes and&hellip;<\/p>\n<\/div><\/div><\/article>\n<article id=\"post-2869\" class=\"gb-post-grid-item post-2869 post type-post status-publish format-standard has-post-thumbnail category-default category-e-commerce-law category-data-protection-information-security tag-gdpr-en tag-kvkk-en entry\"><div class=\"gb-block-post-grid-image\"><a href=\"https:\/\/harveyarasan.com\/en\/data-processing-agreement-under-turkish-law\/\" rel=\"bookmark\" aria-hidden=\"true\" tabindex=\"-1\"><img loading=\"lazy\" decoding=\"async\" width=\"1668\" height=\"918\" src=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA.jpg\" class=\"attachment-full size-full\" alt=\"\" srcset=\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA.jpg 1668w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA-300x165.jpg 300w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA-1024x564.jpg 1024w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA-768x423.jpg 768w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA-1536x845.jpg 1536w, https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/HA_DPA-800x440.jpg 800w\" sizes=\"auto, (max-width: 1668px) 100vw, 1668px\" \/><\/a><\/div><div class=\"gb-block-post-grid-text\"><header class=\"gb-block-post-grid-header\"><h3 class=\"gb-block-post-grid-title\"><a href=\"https:\/\/harveyarasan.com\/en\/data-processing-agreement-under-turkish-law\/\" rel=\"bookmark\">Data Processing Agreement (DPA) Under Turkish Data Protection Law<\/a><\/h3><div class=\"gb-block-post-grid-byline\"><\/div><\/header><div class=\"gb-block-post-grid-excerpt\"><p>Data controllers who wish to entrust their data processing activity to a third party must appoint such third party as&hellip;<\/p>\n<\/div><\/div><\/article>\n<\/div><\/section>","protected":false},"excerpt":{"rendered":"<p>Data protection compliance in T\u00fcrkiye requires more than a set of privacy notices and internal policies. Companies must understand what personal data they process, why they process it, where it is stored, who can access it and whether it is transferred outside T\u00fcrkiye. HARVEY ARASAN advises Turkish and international companies on compliance with Turkish Personal [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2795,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"portfolio-type":[126],"class_list":["post-2946","portfolio","type-portfolio","status-publish","has-post-thumbnail","portfolio-type-services","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v23.8 (Yoast SEO v23.8) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Turkish Data Protection Law (KVKK) &amp; GDPR | Harvey Arasan<\/title>\n<meta name=\"description\" content=\"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Turkish Data Protection Law (KVKK) and GDPR Advisory\" \/>\n<meta property=\"og:description\" content=\"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-19T14:50:14+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash-1024x684.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"684\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/\",\"url\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/\",\"name\":\"Turkish Data Protection Law (KVKK) & GDPR | Harvey Arasan\",\"isPartOf\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg\",\"datePublished\":\"2020-06-22T06:58:31+00:00\",\"dateModified\":\"2026-09-19T14:50:14+00:00\",\"description\":\"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.\",\"breadcrumb\":{\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage\",\"url\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg\",\"contentUrl\":\"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg\",\"width\":4000,\"height\":2672},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Ana sayfa\",\"item\":\"https:\/\/harveyarasan.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Portfolio Items\",\"item\":\"https:\/\/harveyarasan.com\/en\/services\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Turkish Data Protection Law (KVKK) and GDPR Advisory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/harveyarasan.com\/en\/#website\",\"url\":\"https:\/\/harveyarasan.com\/en\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/harveyarasan.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Turkish Data Protection Law (KVKK) & GDPR | Harvey Arasan","description":"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/","og_locale":"en_US","og_type":"article","og_title":"Turkish Data Protection Law (KVKK) and GDPR Advisory","og_description":"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.","og_url":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/","article_modified_time":"2026-09-19T14:50:14+00:00","og_image":[{"width":1024,"height":684,"url":"http:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash-1024x684.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/","url":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/","name":"Turkish Data Protection Law (KVKK) & GDPR | Harvey Arasan","isPartOf":{"@id":"https:\/\/harveyarasan.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg","datePublished":"2020-06-22T06:58:31+00:00","dateModified":"2026-09-19T14:50:14+00:00","description":"Harvey Arasan advises international and Turkish companies on KVKK compliance, GDPR, data processing agreements, international transfers and data breaches.","breadcrumb":{"@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#primaryimage","url":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg","contentUrl":"https:\/\/harveyarasan.com\/wp-content\/uploads\/2020\/04\/curtis-macnewton-vVIwtmqsIuk-unsplash.jpg","width":4000,"height":2672},{"@type":"BreadcrumbList","@id":"https:\/\/harveyarasan.com\/en\/services\/turkey-data-protection-law-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Ana sayfa","item":"https:\/\/harveyarasan.com\/en\/"},{"@type":"ListItem","position":2,"name":"Portfolio Items","item":"https:\/\/harveyarasan.com\/en\/services\/"},{"@type":"ListItem","position":3,"name":"Turkish Data Protection Law (KVKK) and GDPR Advisory"}]},{"@type":"WebSite","@id":"https:\/\/harveyarasan.com\/en\/#website","url":"https:\/\/harveyarasan.com\/en\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/harveyarasan.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/portfolio\/2946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/portfolio"}],"about":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/types\/portfolio"}],"author":[{"embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":9,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/portfolio\/2946\/revisions"}],"predecessor-version":[{"id":5054,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/portfolio\/2946\/revisions\/5054"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/media\/2795"}],"wp:attachment":[{"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/media?parent=2946"}],"wp:term":[{"taxonomy":"portfolio-type","embeddable":true,"href":"https:\/\/harveyarasan.com\/en\/wp-json\/wp\/v2\/portfolio-type?post=2946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}