The KVKK covers matters such as processing conditions, the obligation to inform, explicit consent, data security measures, cross-border transfers and data subject rights. Breaches of the law can be sanctioned with administrative fines by the Personal Data Protection Board.
Related terms
Data controllerThe natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.VERBİSThe Data Controllers' Registry Information System maintained by the Personal Data Protection Authority.Explicit consentConsent relating to a specific matter, based on information and given freely.Compliance auditAn examination of whether an organisation's activities are carried out in accordance with the relevant laws, regulations, contracts or internal rules.Compliance officerThe authorised person responsible for running the compliance programme for the prevention of money laundering and terrorist financing at an obliged entity.Compliance programmeThe full set of policies, procedures, controls, training and monitoring activities an organisation puts in place to ensure compliance with laws and internal policies.
Last updated: October 22, 2026 · This definition is for general information only.