Data Protection

Law No. 6698 on the Protection of Personal Data imposes numerous obligations on companies acting as data controllers, such as information notices, explicit consent, data security, VERBİS registration and breach notification; breaches of these obligations can result in administrative fines imposed by the Personal Data Protection Board. Our office advises corporate clients on establishing KVKK compliance programmes, preparing data processing inventories and policies, responding to data subject requests, defending complaints and investigations before the Board and bringing actions against administrative fines before the criminal judgeships of peace and the administrative courts. Experience in administrative sanctions law and administrative litigation is applied directly in defences against KVKK sanctions.