Areas of Practise

PROTECTION OF PERSONAL DATA AND COMPLIANCE

Being aware of the fact that the protection of personal data is an area that changes rapidly in line with the changing and developing needs of the day, our office, and our expert team within, closely keep abreast of Turkey’s Personal Data Protection Board’s decisions, opinions, communiqués, upcoming regulatory changes in the Law on the Protection of Personal Data No. 6698, data breach notifications, and other any kind of developments in this area and inform our clients thereof. In addition, having the vision of "being one step beyond the day", our office not only follows national developments but also daily follows all kinds of developments in the world, especially in the European Union countries, anticipates the possible reflections of these developments in national legislation and leads clients to meet the needs of the day.

With our expert team in this field, we support our clients in terms of ensuring compliance of data controllers by rendering the services of the finest quality such as creating personal data privacy awareness by providing education, examining personal data processing activities of the data controller, and therefrom creating the personal data inventory, meticulously analyzing the compliance of the personal data processing processes of the data controller with the legislation in line with this inventory,  we provide services to the finest detail on how to ensure full compliance by preparing the legal risk analysis report of the data controller, preparing the legal risk analysis report of the data controller and drafting all necessary policies/procedures, and case-specific documents to be used for fulfilling the data controller’s obligations to inform data subjects and obtain the explicit consent of them. In addition, we do not just point out how to ensure compliance but also share documents containing written instructions and lists on how to use the prepared documents, organize meetings to ensure that the documents are put into practice in a correct way, and show how data security can be ensured by training the data controller on the technical and administrative measures to be taken.

In addition to the compliance service, we provide all necessary guidance for data controllers whose compliance has been provided, for any new process that will occur after compliance, we prepare the necessary documents, organize periodic education, and offer all the services required for the continuation.

Brief Notes