TurkeyRegulation on the Procedures and Principles of Transferring Personal Data Abroad (Resmî Gazete 10 July 2024, No. 32598)
Regulation on the Procedures and Principles of Transferring Personal Data Abroad (Resmî Gazete , No. 32598) Arts. 5, 6, 12 and 14
In force since .
A cross border transfer rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app that relies on the Board's standard contract to transfer personal data of a person in Turkey abroad must notify the signed contract to the Authority within five business days after all signatures are complete.
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The Regulation requires notice of a standard contract to the Authority and an approval application for binding corporate rules; it names no log of transfers and no retention period.
- Kind
- None
- As of
What this law does
Article 6(1) allows a controller or processor to transfer personal data abroad where a lawful basis in Law No. 6698 Art. 5 or 6 exists and either an adequacy decision covers the destination or the parties provide one of the appropriate safeguards listed in Article 10. Article 5(2) applies the same conditions to onward transfers and to transfers to international organizations. Article 14(3) requires the parties to use the Board's standard contract text without any change.
Article 14(5) requires the standard contract to be notified to the Authority within five business days after all signatures are complete. Article 12(1) requires an application to the Board for approval of binding corporate rules to transfer personal data abroad on the basis of those rules.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .