Personal Data Protection Act

Personal Data Protection Act

After the Law No. 6698 on the Protection of Personal Data (PPD) entered into force on April 7, 2016, many secondary legislation was put into effect based on the blood. With guidelines issued by the Personal Data Protection Board and decisions taken, implementation has begun to take shape quickly. In accordance with Law No. 6698, all data liabilities are obliged to take necessary administrative and technical measures in order to process personal data in accordance with the law and to provide protection and access to this data in accordance with law.

The fact that personal data sharing schemes (social media, search engines, etc.) are indispensable parts of everyday life, the rapid development of technology and the emergence of malicious software for data theft constantly threatens the security of information. For this reason, technical measures for compliance with PPD may require complex solutions and a holistic approach. In order to adapt to PPD, investing in a certain point in the system, purchasing a software or package, performing leak tests or keeping the system up to date is not a sufficient security solution by itself. Personal data security can only be achieved by producing solutions specific to each business, taking into account all organizational structure and risks.

There are a number of technical and administrative measures that must be taken by data accountants to ensure that personal data is processed illegally and that personal data are not accessed illegally and that personal data is protected. It is important to establish institutional policies and procedures (Access, Information Security, Use, Storage and Destruction etc.) to ensure these measures. The responsibility for data should be established to determine the maximum time required for the purpose for which the personal data is processed and to establish policies and procedures for deletion, destruction and anonymization. However, how to manage security breaches should be clearly defined.

We believe that the entire adaptation process should be carried out in a single project, with an active involvement of legal and technical consultants, in an integrated and fully integrated manner, although the work for the adoption of administrative and technical measures seems to operate independently of each other. In this way, it will be possible to produce boutique, holistic, working and sustainable solutions for the organizational structure of the business, which can be taken at different stages in different stages.