In Turkey, several legislative and regulatory provisions govern data privacy, to include the Turkish Constitution of 1982; the Law on the Protection of Personal Data (6698); the Criminal Code (5237); and more. The Turkish Data Protection Authority (DPA) is responsible for enforcing the personal data protection legislation. What can the DPA do and what cannot it not do for data protection?