Personal Data Protection Board has amended the following secondary legislation of Turkish Law on Personal Data Protection. These amendments have been published in the Official Gazette dated 28 April 2019 and numbered 30758 and became effective upon publication. The summary of these amendments are as follows:
- Regulation Amending the Regulation on Data Controllers’ Registry: The definitions of the “contact person”, “personal data processing inventory” and “data controller’s representative” concepts in the related Regulation have been amended.
- Regulation Amending the Regulation on Erasure, Destruction or Anonymization of Personal Data: New elements have been introduced to the items that should be included in the Personal Data processing inventory. The Authority also shared a guidance manual and a sample Personal Data processing inventory in excel format.
- Communiqué Amending the Communiqué on the Procedures and Principles relating to Fulfilling of the Obligation to Inform: The definitions of the “data recording system” and “data controller’s representative” concepts in the related Communiqué have been amended.
Should you need any further information, please contact us.
