Makes high-risk automated decisions, in Turkey

Law No. 6698, Art. 11(1)(g) · Read the law's page

• An app must let a person in Turkey object to a result against them that arises from analysis of their data solely through automated systems.

Law No. 7545 (12 March 2025), Art. 7 · Read the law's page

• This binds any entity that uses information systems to provide services, collect data, or process data within the Cybersecurity Law's own broad scope, with no revenue or user threshold gating this particular duty; a separate, narrower certification and export-approval duty binds only cybersecurity product and service vendors and is not raised here.
• Report a detected vulnerability or cyber incident in the area of service provided to the Cybersecurity Directorate without delay; the Law's own text sets no numeric reporting clock.
• Provide the Cybersecurity Directorate promptly with any data, information, document, hardware, software, or other contribution it requests in connection with its duties.
• Where cybersecurity products, systems, or services are procured for use in a public institution or in critical infrastructure, source them only from a provider the Directorate has certified or authorized.

TBMM Bill No. 2/2234 (2024)

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Register high-risk AI systems as required.
• Be transparent about the operation of high-risk AI systems.
• Provide explanations of how high-risk AI systems make decisions (explainability).

TBMM Bill No. 2/3358 (November 2025)

• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.
• Display the statement 'Generated by Artificial Intelligence' on all AI-generated (deepfake) content.