Turkey: Cybersecurity

On 27 July 2026, the Ministry of Trade announced comprehensive amendments to the Regulation on Commercial Advertising and Unfair Commercial Practices, entering into force on 1 August 2026. The updated framework introduces strict rules on targeted advertising, requiring advertisers to inform consumers about the criteria used to display targeted ads and how to modify them.

On 7 July 2026, the European Commission presented an EU Action Plan on Cybersecurity and Artificial Intelligence to address cybersecurity risks arising from advanced AI models while promoting their use for cyber defence.

Turkey's Law No. 7590 fundamentally reshapes the country's digital regulatory architecture by transferring critical internet governance powers from the Information and Communication Technologies Authority to the newly empowered Cybersecurity Directorate. This institutional restructuring affects content removal, access blocking, domain name management, and lawful interception infrastructure, creating a centralized digital governance model. Businesses operating in electronic communications, hosting, social ne

On 5 May 2026, the Cybersecurity Board convened under the chairmanship of President Recep Tayyip Erdoğan and addressed key matters relating to Türkiye's cybersecurity framework. During the meeting, the Board assessed current and emerging cyber risks, international developments, the protection of critical infrastructures, the security of digital systems, data sovereignty and the strengthening of domestic technological capabilities.

Data centers are critical physical infrastructure facilities that constitute the backbone of the digital economy. A wide range of services, extending from cloud computing and artificial intelligence to big data analytics and financial technologies, are delivered through these facilities.

Veri merkezleri, dijital ekonominin omurgasını oluşturan kritik fiziksel altyapı tesisleridir. Bulut bilişimden yapay zekâya, büyük veri analitiğinden finansal teknolojilere uzanan geniş bir yelpazedeki hizmetler bu tesisler üzerinden sağlanmaktadır.

Siber güvenlik, 21. yüzyılın en karmaşık kamu politikası alanlarından biri hâline gelmiştir.

The Action Plan has been developed in line with the Presidential Circular No. 2026/2, dated 3 February 2026 (the "Circular"), which calls for a holistic approach to addressing the impacts of digital transformation on children, and serves as a strategic roadmap for translating the priorities set out in the Circular into concrete action.

In January 2026, the Turkish Personal Data Protection Authority (the "DPA") issued several public announcements and published six data breach notifications.