On November 6, 2019, our Managing Partner Erdem Mümtaz Hacıpaşaoğlu delivered a Personal Data Protection Law (KVKK) awareness training at Velimeşe Organized Industrial Zone: addressing the operational realities of compliance for manufacturing and industrial member companies adjusting to the law’s obligations.
The central thesis of the training was clear: KVKK is not just a topic for tech companies and digital businesses: industrial and manufacturing firms also process personal data in HR, customer, vendor and visitor flows, and the legal obligation lands on them in exactly the same way it lands on a digital-first company.
The industrial-zone reality
Mümtaz walked the audience through where personal data actually shows up in a manufacturing operation: HR and payroll, contractor and vendor management, visitor logs and physical security, CCTV footage, customer-facing sales operations, and the supplier-side data flows that often haven’t been inventoried at all. The point was to convert KVKK from an abstract legal topic into a concrete operational map.
The compliance discipline
Closing the training, Mümtaz returned to a recurring point: KVKK compliance is an operational discipline, not a documentation project: the binder on the shelf doesn’t pass an inspection, but the manufacturing operation that has actually inventoried its data, set its retention policy and trained its operators does.
Sources. Law No. 6698 on the Protection of Personal Data (KVKK). Statute links open the official consolidated Turkish texts on mevzuat.gov.tr.
