In Turkey, sensitive and non-sensitive personal data can be transferred abroad if the explicit consent of the data subject is obtained. Furthermore, other legal grounds will also apply to the transfer of personal data to the foreign country. However, the destination country must have “sufficient protection” to conclude the transfer abroad based on legal grounds (except for having obtained explicit consent). A list of jurisdictions that provide sufficient protection will be determined by the Board.
