Communiqué on the Procedures and Principles of Applying to the Data Controller (Resmî Gazete 10 March 2018, No. 30356)
In force since .
A data subject rights rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app that is a data controller must conclude a person's request under Article 11 of Law No. 6698 as soon as possible and within thirty days at the latest, free of charge as the rule.
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The Communiqué sets how requests are made, answered and charged for; it names no log of processing events and no retention period.
- Kind
- None
- As of
What this law does
Article 5(1) lets a data subject send a request under Law No. 6698 Art. 11 in writing, by registered electronic mail, secure electronic signature, mobile signature, an e-mail address the data subject earlier gave the controller, or an application the controller developed for the purpose. Article 6(2) requires the controller to accept the application or to reject it with reasons.
Article 6(5) requires the controller to conclude the request as soon as possible and within thirty days at the latest, free of charge as the rule. Article 7(1) bars a fee for a written reply of up to ten pages. Article 4(2) makes the right of application conditional on the application being made in Turkish.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .