Personal Data Protection

Recent and rapidly progressing developments in technology pose new dangers to “personal data,” referring to any information relating to an identified or identifiable natural person. This has led to increased awareness of concepts such as data protection, privacy, and the right to be forgotten.

The Personal Data Protection Law (“KVKK”), inspired by the European Union’s EU 95/46/EC Directive (“Directive”), came into effect in Turkey on April 7, 2016, making data protection a prominent issue in Turkey.

KVKK is the first law in Turkey specifically regulating the protection of personal data.

Bozoğlu İzgi’s Personal Data Protection Team, often referred to as “KVKK Lawyer,” focuses on providing comprehensive services on the subject by closely following both Turkish and European regulations.

The team provides legal support to clients to ensure compliance with KVKK and secondary regulations, ensuring the lawful and secure processing and storage of personal data and taking necessary precautions for data protection. The services offered include:


  • Conducting training to ensure that client company employees share a common understanding of data protection concepts,

  • Identifying personal data flow channels and providing recommendations for measures to be taken under KVKK,

  • Identifying the types of personal data being processed, their processing purposes, and retention periods, and providing recommendations for necessary changes or adjustments under KVKK,

  • Preparing consent texts and clarification texts for use in the relevant areas where personal data is processed within the client company,

  • Preparing personal data storage and destruction policies and data inventories in cooperation with relevant departments,

  • Ensuring registration of clients who are data controllers in the Data Controllers’ Registry Information System (“VERBİS”),

  • Continuing consultancy services to ensure ongoing compliance with KVKK and secondary legislation.

Bozoğlu İzgi has extensive experience in Data Protection Compliance Projects, particularly in multinational pharmaceutical companies, cosmetics companies, and insurance companies where data protection is of utmost importance.

Thanks to its extensive experience in data protection, particularly in data transfer abroad, digital data security, and IT system compliance with both European and Turkish legislation, Bozoğlu İzgi represents and supports clients in all processes related to full compliance with personal data protection regulations, ensuring the continuation of compliance, and resolving any issues or disputes that may arise.

Bozoğlu İzgi Attorney Partnership