Personal Data Protection Authority Publishes Documents On Data Transfer From Türkiye To Abroad

The Personal Data Protection Authority (“The Authority") has announced that the Personal Data Protection Board (“The Board") has decided that "standard contracts" and "binding corporate rules" are appropriate security methods that data controllers and data processors may use when transferring personal data abroad. Article 9 of the Law on the Protection of Personal Data No. 6698 ("Law"), entitled "Transfer of Personal Data Abroad", establishes "standard contracts" and "binding corporate rules" as appropriate security methods that data controllers and data processors may use when transferring personal data abroad. With the decision of the Personal Data Protection Board ("The Board") dated 4/6/2024 and numbered 2024/959, standard contract texts to be used in the transfer of personal data abroad, BCR application forms and supporting guidelines on the basic issues to be included in BCRs have been published on the official website.

You can access relevant documents here.

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr