On 3–4 April 2021, Vircon Legal co-founder Erdem Mümtaz Hacıpaşaoğlu spoke at the Lawyers’ Summit livestream organised by Türkiye HOB, alongside Emel Nişlioğlu, Çağdaş Çelik, Türkan Tüfek, Cem Congar, Ece Oğuz, Deniz Semerci Bellikan, Yasemin Bal and Ayşe Aktan Yazıcı.
The law office as a data controller
Lawyers discuss data protection as something clients must comply with, and less often as something that applies to the practice itself. A law office processes some of the most sensitive data there is, under professional secrecy that is stricter than the statutory baseline but does not replace it. Case files in cloud storage, client lists in a CRM and archives kept indefinitely are all processing activities that need a lawful basis, a retention limit and a documented security posture.
Technology sharpens the question rather than answering it. Generative AI tools are useful for drafting but sending client material to a third-party service is a disclosure and a transfer, and prompt injection makes untrusted documents an attack surface. Pseudonymisation reduces exposure, and cyber liability cover addresses what remains. See the KVKK compliance guide and Privacy & Cybersecurity.
Author
-
View all postsMümtaz is the Managing Partner of Vircon Legal, which he founded in 2016. He advises founders, investors and operators on financing rounds, M&A, cross-border incorporations and regulated verticals such as crypto-asset infrastructure, fintech and games, bringing a former startup founder's perspective to every engagement.
If this is on your desk
Templates and checklists are free in the Founder Academy; for a specific situation, book a 30-minute intro call.
Founder AcademyBook an intro callMore from Vircon Insights
AI Summit for Lawyers: Lokomotif AI at Vadi İstanbul
November 19, 2025Lokomotif AI: AI Summit for HR Professionals
October 14, 2025AI Summit for HR Professionals: Komünite (March 2025)
March 11, 2025OKX Türkiye Live Broadcast: Travel Rule in Turkey
February 27, 2025Boğaziçi E-Founder Summit: Legal Architecture for the Next Generation of Founders
February 15, 2025Generative AI Summit for HR Professionals: Komünite
January 13, 2025Related Practice Areas
Privacy & Cybersecurity
KVKK and GDPR compliance, breach response, cybersecurity governance.
View service →Startup Law
Incorporation, founder agreements, ESOP, term sheets, regulatory matters.
View service →ICOs, Crypto & Blockchain
Crypto-asset regulation, token offerings, exchange and custody licensing.
View service →