Protection of Personal Data
With the enactment of Personal Data Protection Law No. 6698 in 2016, a new legal order was established regarding the processing, storage, and protection of personal data, creating significant and comprehensive obligations for companies. These obligations encompass various steps, including preparing data inventories, fulfilling the obligation to inform, obtaining explicit consent when necessary, ensuring data security, responding to data subject applications, complying with Board decisions, and registering with the Data Controllers Registry (VERBİS).
IŞIK KAYA Law Firm has guided numerous companies in their KVKK compliance processes and provided comprehensive legal consultancy services since the Law came into force.
The main services we offer within this framework are:
-
Determining or creating a KVKK-focused organizational structure within the company; holding meetings with relevant units to analyze requirements and deficiencies, and planning compliance actions.
-
Organizing employee training regarding obligations under the KVKK; providing periodic additional training for new personnel,
-
Preparing and regularly updating data inventories regarding existing or to be processed personal data across all departments,
-
Establishing a corporate data management system in accordance with the data inventory; preparing and periodically updating compliance documents such as disclosure texts, data processing policies, privacy policies, cookie policies, explicit consent texts, and commercial message permissions,
-
Examining the contracts to which the company is or will be a party in terms of KVKK compliance; negotiating and revising the contracts when necessary,
-
Complete the registration process with the Data Controllers Registry (VERBIS),
-
Providing active legal support regarding the response to applications and requests from third parties within the scope of KVKK and GDPR,
-
Regularly communicating the decisions and announcements published by the Personal Data Protection Authority to company officials; updating company policies in line with legislative changes and ensuring that necessary actions are taken.