The Law on the Amendment of the Code of Criminal Procedure and Certain Laws, known as the "Eighth Judicial Package", which provides for significant amendments to the Personal Data Protection Law ("PDPL"), was published in the Official Gazette dated March 12, 2024. Thus, the amendments aiming to harmonize the LPPD with the European Union General Data Protection Regulation were passed into law.
Accordingly, as we stated in the article we shared when the relevant bill was submitted to the Turkish Grand National Assembly, the main amendments to the LPPD are briefly as follows:
The “conditions for the processing of special categories of personal data” regulated in Article 6 of the LPPD have been expanded in line with the needs.
A new system has been envisaged in terms of the “transfer of personal data abroad” regulated under Article 9 of the LPPD.
The relevant data controller or data processor is obliged to notify the Personal Data Protection Authority within five business days of the standard agreements regarding the transfer of personal data abroad.
Administrative courts have been assigned as the sole judicial authority for lawsuits to be filed against administrative fines imposed by the Personal Data Protection Board.
You can access our previous article containing detailed information on these amendments, which will enter into force on 01.06.2024, from this link.