KVKK is the abbreviation of Personal Data Protection Law. The protection of personal data is the processing, storage and transfer of personal information to certain principles within the framework of the law. Thus, the information of individuals is secured and their constitutional rights are protected.

KVKK entered into force on 7 April 2016. The purpose of the law is to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data, and to determine the obligations of natural and legal persons who process personal data and the procedures and principles to be followed.

Within the scope of KVKK, personal data means any information relating to an identified or identifiable natural person. For example, information such as name, surname, TR ID number, e-mail address, telephone number are personal data.

Along with the KVKK, the Personal Data Protection Authority was also established. The duties of the institution include enforcing and supervising the law, preventing violations, examining complaints, imposing administrative sanctions and raising awareness.

In order to comply with the KVKK, natural and legal persons need to take some measures. Among them;

     Creating a personal data inventory,
     To determine the personal data processing purposes and legal reasons,
     To prepare personal data retention and destruction policy,
     To take technical and administrative measures for personal data security,
     To identify third parties or organizations that share personal data,
     Fulfilling the lighting obligation,
     To enable data owners to exercise their rights,
     To register with the data controllers registry,

steps such as.

Administrative fines are imposed on real and legal persons who violate the KVKK. These fines range from 9 thousand 828 TL to 1 million 966 thousand 525 TL for 2021. In addition, if the violation of KVKK constitutes a crime, sanctions can be applied within the scope of criminal law.