Turkey’s Data Protection Authority (DPA) recently discussed the commitment letters for cross-border personal data transfers and touched upon the procedures and principles to be followed for applications. The Law on the Protection of Personal Data sets forth certain rules on cross-border transfer of personal data. Preparing a commitment letter between the transferor and the transferee and obtaining the DPA’s approval is one of those mechanisms. Two template forms are published on the DPA’s website: for transfers from the data controller to data controller and for transfers from the data controller to data processor.
