Topic: Compliance

As Turkey’s economy continues to respond to the challenges posed by the COVID-19 global pandemic, domestic and international companies are seeking a safe return to full operations in the country.

On July 14, 2020, US President Donald Trump issued Executive Order 13936 (the “Order”), which authorizes the imposition of sanctions on additional persons determined to be involved in China’s new national security law (the “National Security Law”) and revokes Hong Kong’s preferential trade treatment.

A digital services tax entered into force in Turkey on March 1, 2020. Pursuant to the Law No. 7194 on Digital Services Tax and Amendment to Certain Laws and Law Decree No. 375 (the “Law”) promulgated in December 2019.

Amendments to the Regulation on Commercial Communications and Commercial Electronic Messages (the “Regulation”) were published in the Official Gazette on January 4, 2020.

Personal data relating to race, ethnic origin, political opinion, philosophical belief, religion, religious sect or other belief, clothing and appearance, membership in associations, foundations or trade-unions, data concerning health, sexual life, criminal convictions and security measures, biometric and genetic data are defined as sensitive data in Turkish data protection legislation.

Olgu Kama, Partner with İnal Kama Attorney Partnership, Norton Rose Fulbright’s affiliated practice in Istanbul, and Vice Chair of Transparency International Turkey, recently moderated a panel entitled “Judiciary in the Fight against Corruption” which was organized by Transparency International Turkey.

With the globally increasing awareness of ESG (Environmental, Social and Governance) topics and the responsible investment movement, businesses and governments are being urged to consider the interests of all stakeholders.

The Communique on the E-Commerce Trust Badge, which has been in force since June 2017, now bears fruit: The first batch of online businesses start placing the trust badge on their websites in January 2020.

According to Regulation on Data Controller Registry (the “Regulation”), data controllers who are required to register with VERBİS (the data controllers’ registry system) must keep a data inventory, and upload the required information on VERBİS based on this inventory

Under Turkish data protection rules, data controllers (including foreign data controllers) must notify the data subjects and the Data Protection Authority (the “DPA”) as soon as possible if personal data has been obtained by others through unlawful means.