Notification Comes Earlier Than You Think: Turkey’s New Merger-Control Thresholds and the Tech Exception
Turkey’s new merger-control thresholds (2026/2): the TRY 1/3/9 billion limits and the TRY 250 million rule for tech undertakings.
Insights and updates
From emerging regulation to deal mechanics, we write about the questions founders and investors actually ask: practical analysis you can put to work.
Turkey’s new merger-control thresholds (2026/2): the TRY 1/3/9 billion limits and the TRY 250 million rule for tech undertakings.
Generative AI at work and KVKK: the controller’s responsibility, the right to object to automated decisions, and human-in-the-loop.
The 72-hour rule for data breaches: notifying the Board, informing data subjects, and a response plan that works in the crisis.
Handling data-subject (DSAR) requests: the 30-day deadline, identity verification, grounds for refusal and the complaint route to the Board.
Data-protection due diligence in funding and M&A: the KVKK red flags that quietly slow or kill a round, and how to clear them first.
How to run a KVKK compliance audit: data inventory, gap analysis, risk scoring and the audit report, step by step.