From emerging regulation to deal mechanics, we write about the questions founders and investors actually ask — practical analysis you can put to work.
TTK Art. 380 voids company funding, loans or security given to enable acquisition of its own shares — the structural constraint on Turkish LBOs. What it catches, and the three lawful deal patterns around it.
Age assurance spans self-declaration, estimation and verification — with proportionality as the rule. The four legal drivers (GDPR/KVKK consent, DSA, AI Act Article 5, consumer law) and the two design mistakes.
Tacit collusion is coordination without agreement — and pricing algorithms make its conditions easy to satisfy. How enforcers respond (hub-and-spoke, attribution, AI detection) and the four-part compliance posture.
Article 5 bans eight AI practices outright — applicable since 2 February 2025 and untouched by the omnibus postponement. The list, the grey zones, and the fine ceiling that sits above all others.
Pseudonymization replaces identifiers with keys held separately — a security measure, not an exit from data protection law. How it differs from anonymization and why AI training pipelines rely on it.
Profiling is automated processing of personal data to evaluate aspects of a person — performance, creditworthiness, behaviour. How GDPR Art. 22 and KVKK Art. 11 constrain it and where AI products trip.
The European AI Office, within the Commission, supervises general-purpose AI models EU-wide: codes of practice, systemic-risk oversight and coordinated enforcement under the AI Act.
MiCA (EU 2023/1114) is the EU single rulebook for crypto-assets: whitepapers for issuers, reserve rules for ART/EMT stablecoins, and CASP authorisation with EU-wide passporting — fully applicable since 30 December 2024.
ETBİS is Türkiye’s Electronic Commerce Information System run by the Ministry of Trade — service providers selling via their own website or app must register before starting e-commerce activity and report sales data periodically.
VERBİS is Türkiye’s public Data Controllers’ Registry Information System under KVKK Article 16 — data controllers meeting the thresholds must register and declare their processing inventory before processing personal data.
