KVKK Compliance Overview
KVKK (Law on the Protection of Personal Data) is Turkey’s national data protection law. It closely aligns with GDPR and governs how personal data must be collected, processed, and stored.
Effective Date: April 7, 2016
Scope: Applies to all organizations operating in Turkey or processing data of Turkish citizens
Penalties: Administrative fines range from â‚ş50,000 to â‚ş2,000,000
Key KVKK Compliance Requirements
Explicit Consent for Data Processing
You must collect and store explicit consent from users before processing their personal data.
Obligation to Inform (Notice Requirement)
Users must be clearly informed about:
What data is collected
How it is processed
With whom it is shared
User Rights
Users must be allowed to:
Access their data
Request corrections
Request deletion of their data
Cookie Policy Transparency
Websites must clearly explain:
What types of cookies are used
Why they are used
Consent Management for Cookies
Users must be given the option to accept or reject cookies before they are activated.
Efilli helps you meet all of these requirements with customizable banners, automatic consent logging, user-friendly preference centers, and transparent cookie categorization.
Last updated