Turkey KVKK Regulation Consolidates SAR Procedure
Naz Degirmenci (Associate Attorney) and Zeynep Ünlü (Senior Managing Counsel) at BTS & Partners, discuss how Turkey's supplementary regulation to the Data Protection Law specifies the types of information that must be included by a data subject. They also discuss the content to be provided by a data controller when responding to a subject access request (SAR), and the time limit for the data controller to respond to an SAR. In addition, they note how the Regulation provides that SARs be submitted in Turkish, and how fees can be charged.
Degirmenci and Ünlü recommend that organizations appoint a contact person regarding data protection issues that internal governance procedures be prepared with regard to the handling of SARs as well as retention policies.