Turkey’s Data Protection Law applies to data controllers who process and transfer personal data under their control. When data controllers utilize the services of third-party data processors for those processes, the law holds them jointly liable for taking all of the technical and administrative measures required to ensure the safeguarding of personal data and to prevent any unlawful access or processing.
