What the Regulation on the Organisation of the Personal Data Protection Authority Brings

7 May 2018Murat Volkan DülgerCommentary

Introduction

This work was written in Turkish. The summary on this page is a translation; the citation gives the original title in parentheses.

At a time when successive pieces of legislation are being enacted and decisions and communiqués published in order to regulate the field of personal data protection in full, there has been a further recent development on the subject: the “Regulation on the Organisation of the Personal Data Protection Authority”, which sets out the organisational structure of the Personal Data Protection Authority, the duties, powers and responsibilities of its service units, and its working procedures and principles, was published in the Official Gazette of 26 April 2018, No. 30403.

That the Authority’s organisational structure and service units would be governed by a regulation was, like the regulations published earlier, essentially an expected development. This is because paragraph 5 of Article 25 of Law No. 6698 on the Protection of Personal Data (KVKK), the article headed “Formation and duties of the Presidency”, stated that the service units and their working procedures and principles would be determined by regulation. A further step envisaged by the KVKK has thus been taken.