Technology, AI and Data Protection Law

The matters we handle within the framework of the Personal Data Protection Law No. 6698, the Law No. 5651 on the Regulation of Publications on the Internet and the cybercrime provisions of the Turkish Penal Code No. 5237:

• Compliance work under the Turkish data protection law and the GDPR, data inventories and policy drafting
• Privacy notices, explicit consent processes and cookie policies
• Controller–processor agreements and data controllers' registry obligations
• Transfers of personal data abroad and the legal mechanisms available for such transfers
• Employee data, personnel files and workplace camera recordings
• Health data, biometric data and special categories of personal data
• Data breach notification, breach management and actions for annulment of Board decisions
• Compensation claims arising from unlawful processing of personal data
• Unauthorised access to information systems, unlawful acquisition of data and bank card offences
• Offences of insult, threat and blackmail committed via the internet
• Content removal, access blocking and right-to-be-forgotten applications
• Compromised social media accounts and digital evidence procedures
• Software development, maintenance, cloud computing and service level agreements
• Liability, data use and transparency obligations in artificial intelligence applications
• E-commerce, electronic signature and electronic contract disputes
• Cybersecurity obligations and incident management following a cyberattack
• Liability of digital platforms and platform–user relationships
• Gaming and e-sports law; disputes over digital content and virtual items
• Direct marketing, commercial electronic messages and related obligations
• Liability in algorithmic decision-making and solely automated processing
• Legal assessment of crypto assets and blockchain-based applications