As a result of a joint study conducted by the Personal Data Protection Authority and the Turkish Payment and Electronic Money Institutions Association, the Guidelines on Best Practices for the Protection of Personal Data in the Payment and Electronic Money Sector were published on April 11, 2025.
This comprehensive 98-page guide covers a wide range of topics including the processing and transfer of personal data in relation to services such as money transfers, POS services, digital wallets and prepaid instruments, and mobile payment services, as well as handling data subject complaints and personal data breaches.
The guide also addresses sector-specific processes and obligations such as information systems and data sharing responsibilities, AML/KYC measures and requirements, and audit procedures.
Full (Turkish) text of the Guidelines is available at: https://kvkk.gov.tr/Icerik/8286/Odeme-ve-Elektronik-Para-Sektorunde-Kisisel-Verilerin-Korunmasina-Iliskin-Iyi-Uygulamalar-Rehberi
You may always contact us for detailed information and professional support regarding the compliance process.
This Legal Alert has been prepared for general information purposes only on current legal issues, and the evaluations contained in this Legal Alert do not constitute legal advice or a legal opinion. It is not possible to impose any liability on SRP-Legal Law Office due to the content of this Legal Alert. It is recommended to obtain the opinion of a legal advisor regarding your questions and enquires within the scope of this Legal Alert.
