Two Communiques of the Board of the Protection of Personal Data have been published 12 March 2018

The Board of the Protection of Personal Data (“the Board”) was given the duties and authorities by the Law on the Protection of Personal Data (“the Law”) to do the necessary regulations for the issues falling within the scope of work of the Board via Article 22/e and to regulate the duties, authorities and responsibilities of data controller and his representative via Article 22/g. Two communiques which the Board issued basing on these authorities have been published in the Official Gazette dated 10.03.2018 and numbered 30356.

With this regard, the procedures and principles which should be considered by the data controller and his representative during the fulfillment of the obligation to enlighten the concerned person while collecting data under the Article 10 of the Law, have been regulated by the Communique on the Procedures and Principles to be followed in the Fulfillment of the Enlightening Obligation.

The Communique on the Procedures and Principles on the Application to Data Controller regulates the procedures and principles of the applications of the concerned person to the data controller under the Article 13 of the Law and the response of the data controller against such applications.

Since the time period of 2 years as of the enforcement date of the Law, which is given for the synchronization of the data processing transactions with the Law, will lapse on 07 April 2018, it is very important for data controllers and institutions to receive legal consultancy on the accuracy of their activities to the Law.