Skip links
veri

Standard Contract Notification Module Announced by the Turkish Personal Data Protection Authority

On October 25, 2024, the Personal Data Protection Authority (“Authority”) announced the establishment of a “Standard Contract Notification Module.” This module enables the submission of standard contracts prepared for cross-border data transfers to the Authority.

The most recent amendments to Article 9 of the Law No. 6698 on the Protection of Personal Data (“Law”) have recognized standard contracts as one of the methods to ensure the legality of cross-border data transfers. These contracts, serving as an adequate safeguard mechanism for data controllers and processors, must be submitted to the Authority within 5 (five) business days of their execution. Additionally, the Regulation on the Principles and Procedures for the Transfer of Personal Data Abroad (“Regulation”), which came into force on July 10, 2024, allows these contracts to be submitted physically, via registered electronic mail, or through other methods determined by the Personal Data Protection Board (“Board”).

The Board highlighted that the development and activation of this module aim to accelerate and facilitate the notification obligations of data controllers and processors, enhancing overall efficiency.

A user guide for the module has been published to assist data controllers and processors in submitting their standard contracts more practically through the system.

  1. You may find he announcement here.
  2. You may find the Standard Contract Notification Module here.
  3. You may the Standard Contract Notification Guide here.

Av. Kübra Keskin Ökmen