Source: https://www.kisiselverilerinkorunmasi.org/kanunu-ingilizce-ceviri/
Timestamp: 2018-03-20 13:30:14
Document Index: 551911581

Matched Legal Cases: ['art. 1', 'art. 4', 'art. 10', 'art. 13', 'art. 17', 'art. 18', 'art. 28']

Turkish Personal Data Protection Law no. 6698 • Kişisel Verilerin Korunması Mevzuatı • KVKP
Enacted on 24/3/2016 | Published in the Official Gazette dated 7/4/2016 no. 29677
Turkish Personal Dat ...
Editör: Yusuf Mansur Özer
Katkı Sağlayanlar: -
Mevzuat Metninin Edinilme Tarihi: 24 Aralık 2017
Faydalanılan Kaynaklar Judiciary of Turkey çevirisi
Görüş ve önerilerinizi bize iletmek için tıklayınız.
Purpose, Scope, and Definitions (art. 1-3)
Processing of Personal Data (art. 4-9)
Rights and Obligations (art. 10-12)
Application, Complaint, and Data Controllers' Registry (art. 13-16)
Crimes and Misdemeanors (art. 17-18)
Personal Data Protection Authority and Organisation (art. 18-27)
Miscellaneous Provisions (art. 28-33)
ARTICLE 1 – (1) The purpose of this Law is to protect the fundamental rights and freedoms of persons, privacy of personal life in particular, while personal data are processed, and to set forth obligations of natural and legal persons who process personal data and procedures and principles to comply with for the same.
ARTICLE 2 – (1) The provisions of this Law shall apply to natural persons whose personal data are processed and natural or legal persons who process such data wholly or partly by automatic means or otherwise than by automatic means which form part of a filing system.
ARTICLE 3 – (1) In practice of this Law, the terms used herein shall have the following meanings:
ARTICLE 4 – (1) Personal data shall only be processed in accordance with the procedures and principles set forth by this Law or other laws.
ARTICLE 5 – (1) Personal data shall not be processed without obtaining the explicit consent of the data subject.
ARTICLE 6 – (1) Data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dressing, membership of association, foundation or trade-union, health, sexual life, criminal conviction and security measures, and biometrics and genetics are special categories of personal data.
ARTICLE 7 – (1) Personal data that is processed in accordance with this Law or relevant other laws shall be deleted, destroyed or anonymised either ex officio or upon request by the data subject in case the reasons necessitating their processing cease to exist.
ARTICLE 8 – (1) Personal data shall not be transferred without obtaining the explicit consent of the data subject.
ARTICLE 9 – (1) Personal data shall not be transferred abroad without obtaining the explicit consent of the data subject.
ARTICLE 10 – (1) Data controller or the person it authorized is obligated to inform the data subjects while collecting the personal data with regard to
ARTICLE 11 – (1) Everyone, in connection with herself/himself, has the right to;
ARTICLE 12 – (1) Data controller shall take all necessary technical and organizational measures for providing an appropriate level of security in order to
ARTICLE 13 – (1) The data subject shall convey her/his requests relating to the enforcement of this Law to the data controller in writing or by other means designated by the Board.
ARTICLE 14 – (1) In case the application is rejected, replied insufficiently, or not replied in due time; the data subject may file a complaint with the Board within 30 days following the date he/she learns the reply of the data controller and in any event, within 60 days following the date of application.
ARTICLE 15 – (1) The Board shall conduct necessary inspection within the scope of its remit either ex officio in case it learns the allegation of a violation or upon complaint.
ARTICLE 16 – (1) Under the supervision of the Board, Data Controllers Registry shall be kept by the Presidency in a publicly available manner.
ARTICLE 17 – (1) With respect to crimes relating to personal data, provisions of articles 135 to 140 of Turkish Criminal Code dated 26/9/2004 and numbered 5237 shall apply.
CHAPTER VI1The translation of this chapter is done by the Judiciary of Turkey on 31 March 2017, and the translation is retrieved from its website.
ARTICLE 19 – (1) Personal Data Protection Authority which has administrative and financial autonomy and public legal personality has been established in order to perform the duties stipulated by this Law.
ARTICLE 21 - (1) The Board shall independently perform and use its duties and powers provided in this Law and the other laws under its own responsibility. No body, authority, institution or person can give orders or instructions, recommendations or suggestions on the matters which fall within the scope of its authority.
ARTICLE 23 - (1) The President shall set the meeting dates and agenda of the Board. The President can summon the Board for an extraordinary meeting in necessary cases.
ARTICLE 24 - (1) The President shall be the highest official in the Authority in his/her capacity as the President of the Board and Authority and shall arrange, carry out the services of the Authority in accordance with the legislation, the objectives and policies of the Authority, its strategic plan, performance criteria and service quality standards and shall ensure coordination between the service units.
ARTICLE 25 - (1) The Presidency shall be composed of Deputy President and service units. The Presidency shall perform the duties enumerated under the fourth paragraph through the service units organized as departments. The number of departments cannot be more than seven.
ARTICLE 26 - (1) Specialists on Personal Data Protection and Assistant Specialists on Personal Data Protection can be employed in the Authority. The degrees of those who are appointed as Specialists on Personal Data Protection within the framework of the additional article 41 of the Law No. 657 shall be increased for one time only.
ARTICLE 27 - (1) The personnel of the Authority shall be subjected to the Law No. 657, apart from the issues regulated by this Law.
ARTICLE 28 – (1) Provisions of this Law shall not be applied in the following cases:
Madde 30 - (1) (10/12/2003 tarihli ve 5018 sayılı Kanun ile ilgili olup yerine işlenmiştir.)
ARTICLE 31 – (1) Regulations related to the application of this Law shall be brought into force by the Authority.
TEMPORARY ARTICLE 1 – (1) Within six months following publication of this Law, the members of the Board shall be elected in accordance with the procedure set forth under article 21 and the Presidency organisation shall be constituted.
(3) Personal data that is processed before the date of publication of this Law shall be rendered compliant within two years following the date of publication of this Law. Personal data that is determined to be contrary to the provisions of this Law shall be immediately deleted, destroyed, or anonymised. However, the consents that are lawfully obtained before the date of publication of this Law shall be deemed lawful in terms of this Law8 , provided that no declaration of intention to the contrary is made within one year.
ARTICLE 32 – (1) This Law’s
a) 8th, 9th, 11th, 13th, 14th, 15th, 16th, 17th, 18th articles shall enter into force after six months following the date of publication,
ARTICLE 33 – (1) Provisions of this Law shall be enforced by the Council of Ministers.