On November 6, 2019, our Managing Partner Erdem Mümtaz Hacıpaşaoğlu delivered a Personal Data Protection Law (KVKK) awareness training at Velimeşe Organized Industrial Zone — addressing the operational realities of compliance for manufacturing and industrial member companies adjusting to the law’s obligations.
The central thesis of the training was clear: KVKK is not just a topic for tech companies and digital businesses — industrial and manufacturing firms also process personal data in HR, customer, vendor and visitor flows, and the legal obligation lands on them in exactly the same way it lands on a digital-first company.
The industrial-zone reality
Mümtaz walked the audience through where personal data actually shows up in a manufacturing operation: HR and payroll, contractor and vendor management, visitor logs and physical security, CCTV footage, customer-facing sales operations, and the supplier-side data flows that often haven’t been inventoried at all. The point was to convert KVKK from an abstract legal topic into a concrete operational map.
The compliance discipline
Closing the training, Mümtaz returned to a recurring point: KVKK compliance is an operational discipline, not a documentation project — the binder on the shelf doesn’t pass an inspection, but the manufacturing operation that has actually inventoried its data, set its retention policy and trained its operators does.
