New Era in Personal Data Protection: Published in the Official Gazette

The Personal Data Protection Authority (KVKK) has made a principle decision regarding the sharing of personal data by public legal entities on the internet. This decision emphasizes that personal data that is not necessary for the purpose of the data sharing should not be included in internet sharing. Additionally, it is stated that personal data sharing should be accessible for the duration necessary for the purpose of processing, and after that, necessary actions should be taken. The KVKK's decision aims to regulate the sharing of personal data by public institutions on the internet, thereby protecting personal data. The decision also stresses that data controllers must take necessary administrative and technical measures as per Article 12 of Law No. 6698, and these obligations should be considered not only for internet sharing but also for personal data sharing in other media, such as electronic environments and bulletin boards.