Personal Data Protection (KVKK)

Law No. 6698 imposes a compliance duty on every company that processes personal data. The Board imposes administrative fines on businesses that fail to give notice, take data security measures or register with VERBIS in time.

Our compliance programme

1. Data inventory and mapping of processing activities
2. Privacy notices, explicit consent and cookie management
3. VERBIS registration and retention and destruction policy
4. Checklist of technical and administrative measures
5. Standard contracts and notification procedures for cross-border transfers

When a breach occurs

The Board must be notified within 72 hours of learning of a breach. Preparing your incident response plan in advance makes that deadline manageable.