The text of the Law No. 6698 was adopted by the General Assembly of the Grand National Assembly of Turkey on March 24, 2016 and enacted and entered into force after being published in the Official Gazette dated April 7, 2016 and numbered 29677.
KVKK is the Law on the Protection of Personal Data. At the same time, KVKK institution came into our lives in order to operate this law and maintain the processes. After this date, audits started and serious steps were taken to protect personal data. The KVKK law, which has been waiting as a draft for a long time, was published in the Official Gazette on 7 April 2016 and entered into force. In this way, the obligations of companies that process personal data and the rules to be followed in order to protect the fundamental rights and freedoms of individuals, from the processing of personal data to the privacy of private life, have been determined.
Violation of the Personal Data Protection Law can bring with it extremely severe sanctions. Persons found to be violating the law may be sentenced to a prison sentence of 1 to 3 years or an administrative fine of 5,000 to 1,000,000 TL. In addition, persons who obtain personal data through violations are sentenced to imprisonment between 2 and 4 years.
Violating the Personal Data Protection Law brings with it a serious loss of prestige for both individuals and companies. According to the researches, it has been determined that while the companies that are found to have violated personal data experience a serious loss of reputation and reliability in the eyes of their users, many customers have stopped working with these companies. Sharing users' private information with different people or organizations is considered a major scandal worldwide and is newsworthy. For this reason, all real and legal persons should show great sensitivity about personal data. If you want to make your company compliant with the KVKK, you may need to establish infrastructures and change your system in compliance with this law.