Decision on Loyalty Cards Postponed: Deadline Extended to 2027

The Personal Data Protection Board (KVKK) has extended the deadline for compliance with the regulation on the use of loyalty card members' phone numbers or card numbers by third parties. The compliance period, which was set to expire on August 28, has been extended to February 28, 2027. The Board's decision was published in the Official Gazette on August 13, 2026. Loyalty card memberships are a system where brands offer their customers special discounts, points, and campaigns. These memberships can be used with a physical card or by providing the customer's registered phone number at the checkout. The KVKK had previously decided that data controllers should take necessary technical and administrative measures in this regard.