Insights and updates
From emerging regulation to deal mechanics, we write about the questions founders and investors actually ask: practical analysis you can put to work.
The 2027-2029 Medium-Term Programme sets the third quarter of 2027 for aligning the KVKK with the GDPR. From someone who has balanced the two laws for years: compliance programmes will be rebuilt, and the transition will hurt.
The Board’s new announcement does not ban biometrics, it splits them by purpose: attendance is out, security access conditional, templates no defence.
Two KVKK decisions on the interbank data sharing exception and statutory retention periods, plus a full index of all 47 decision summaries.
Five KVKK decisions with no administrative fine: rapid response, limited impact and the limits of the “human error” defence.
Five KVKK decisions on audio recording in CCTV systems, biometric data, cookie consent granularity, masking and data accuracy.
Five KVKK decisions on special authority in a power of attorney, the burden of proving notification, masked disclosure and identifying the correct addressee.
