What changed: KVKK published the Practice Guide on the Protection of Personal Data in Lawyers' Professional Activities, prepared with input from the Union of Turkish Bar Associations. It covers the status of lawyers, substitute lawyers, and lawyers' employees under Law No. 6698, the legal bases for lawyers' data processing, processing conditions, domestic and international data transfers, the use of generative AI tools, general principles, data controller obligations, and data security.
Who is affected
The guide applies directly to lawyers, substitute lawyers, and lawyers' employees; the source does not mention other business types.
What it means for your business
For a law practice that processes personal data, this means comparing its data processing, domestic/international transfer, and generative AI usage practices against the guide's explanations.
What to do
If your law practice processes personal data, review the guide and compare your data processing, transfer, and data security practices against it. Consult your accountant or legal adviser before acting on this.
When it takes effect
The source does not give a separate effective date; the guide was published on September 22, 2026.
