We advise technology companies (software, SaaS, gaming, e-commerce, media, and AI) on the legal questions that come with building and operating digital products: platform terms, content and copyright, regulatory exposure, and internet-related disputes.
Because we work daily with venture-backed companies, our advice reflects how technology businesses actually ship product. We review data flows and product architecture alongside the contracts, and we draft terms that hold up to both regulator scrutiny and investor due diligence.
Our IT law work includes, among others:
- Regulatory advisory and analysis of current and upcoming legislation
- Website, platform, and SaaS agreements
- Intellectual property on the internet
- Structuring innovative business models
- Legal risk assessment for digital products
- Internet-related disputes and content takedowns
Typical matters
Much of our IT law work is about building the documents that sit around a product: terms of use, privacy policy, subscription and cancellation flows, purchase terms that comply with app-store rules, and API or integration agreements. We write these with the product team, looking at the actual user journey, because a clause that is correct on paper but cannot be applied on screen is of little use.
The second group of matters is platform liability. For platforms that host user content, publish listings or bring third-party sellers together, we handle hosting-provider obligations, content removal and access-blocking requests, notice-and-takedown procedures and the management of user disputes. In-game and in-app purchases, virtual items and mechanics with an element of chance, and the in-product disclosure of AI-assisted features are among the questions that reach us more and more often.
Related practice areas
This practice works alongside SaaS & IT Contracts, E-commerce Law, Data Protection and AI & Algorithm Law.
The internet law map in Türkiye
- Law No. 5651. The internet law assigns duties by role: content providers are responsible for their own content, hosting providers must remove unlawful content once notified, access providers implement blocking decisions, and social network providers carry their own regime in Additional Article 4.
- Children and social networks. From 1 November 2026 a social network provider may not serve children under fifteen and must verify age, offer a differentiated service to users aged fifteen and over and provide parental controls; on the wording of Law No. 7578 these duties apply regardless of size (Türkiye Bans Social Media for Under-15s).
- Game platforms. From 1 November 2026, platforms must not offer unrated games, must provide parental controls over purchases, and foreign platforms with more than 100,000 daily accesses from Türkiye must appoint a representative (Türkiye Writes Gaming into Law No. 5651).
- The regulator. Law No. 7590 (31 July 2026) moved supervision of the gaming and social network provisions, and authority over domain names, from the ICTA to the Cybersecurity Presidency (From the ICTA to the Cybersecurity Presidency).
Questions clients ask us
Which role does our platform have under Law No. 5651?
It depends on what the product does, and one product can hold several roles. Publishing your own content makes you a content provider; hosting users’ content makes you a hosting provider for it; enabling users to create, view or share content for social interaction can make you a social network provider. Each role has different removal, response and representation duties, so the classification comes first.
Are we a “social network provider” for the under-15 rule?
If users can create, view or share content for social interaction, very possibly. Public feeds, profiles, comments, forums and community spaces fit the definition comfortably; dating and edtech products with peer interaction are likely in scope; games with chat or user content may be caught both here and under the gaming regime. Purely private one-to-one messaging can argue the communication exclusion, but that is an argument rather than a safe harbour.
What changes for game platforms from 1 November 2026?
Platforms must remove or classify unrated games at the highest age category, offer parental controls with approval for purchases and paid memberships, answer the Cybersecurity Presidency’s information requests within the period it sets, and, if foreign with more than 100,000 daily accesses from Türkiye, appoint a representative. Sanctions start with a notice and escalate to fines of TRY 1 to 10 million, then TRY 10 to 30 million, and bandwidth throttling. A studio selling only through a third-party storefront is not the direct addressee.
What must a hosting provider do when notified of unlawful content?
A hosting provider is not required to monitor what users upload, but once notified of unlawful content in line with the Law it must remove it, and it must comply with removal and access-blocking decisions. A documented notice-and-takedown procedure, with a record of what was received and when it was acted on, is the practical defence.
Which authority do we deal with now?
For the gaming and social network provisions of Law No. 5651 and for domain names, the Cybersecurity Presidency since Law No. 7590 took effect on 31 July 2026; electronic communications licensing remains with the ICTA. Data protection questions go to the KVKK Authority, and e-commerce questions to the Ministry of Trade (E-commerce Law & ETBİS).
Reading
Sources. Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications. Statute links open the official consolidated Turkish texts on mevzuat.gov.tr.
Other Practice Areas
Our team
Click a name for the profile.
