Record STMT-WA1EB72Advisory

Recommendations on the Protection of Personal Data in the Field of Artificial Intelligence

RECOMMENDATIONS ON THE PROTECTION OF PERSONAL DATA IN THE FIELD OF ARTIFICIAL INTELLIGENCE

Guidelines State lawSouthern Europe · TRadopted

This document provides recommendations on the protection of personal data in the field of artificial intelligence under the Personal Data Protection Law No. 6698. It outlines general principles, technical and administrative measures, and specific guidance for developers, manufacturers, service providers, and decision makers. The aim is to ensure that AI applications respect fundamental rights, human dignity, and privacy.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Kişisel Verileri Koruma KurumuRegulator · TR

Lead issuer

Legal forceAdvisory

Under whose authorityState law

Judged fromfull text

Who it governs

AI developers and providersRegulatorsCompaniesAI deployers and users

This is for developers, manufacturers, service providers, and decision makers operating in the AI field to ensure their practices comply with personal data protection laws.

Sectors

Cross-sector

What the document contains

What's covered

The document covers recommendations for processing personal data within AI applications, defining stakeholder roles such as developers and data controllers, and outlining mandatory data protection principles like privacy by design and risk assessments.

What's missing

It does not provide detailed legal enforcement mechanisms, specific administrative fines, or technical implementation standards beyond general administrative and design recommendations.

Key takeaways

AI activities relying on personal data processing must comply with the Personal Data Protection Law No. 6698.
Privacy impact assessments should be conducted when high risks to personal data protection are foreseen in AI projects.
Developers and service providers must adopt data protection by design and provide users with mechanisms to stop data processing or erase data.
Decision makers are encouraged to establish risk assessment procedures, accountability frameworks, and human intervention mechanisms in AI applications.

Principles it states

LawfulnessFairnessProportionalityAccountabilityTransparencyBeing accurate and up-to-dateSpecified and limited use of personal dataData security approach

Outline

· ABSTRACT
· INTRODUCTION
  - Purpose and Basis
  - Scope
  - Definitions
· RECOMMENDATIONS
  - General Recommendations
  - Recommendations for Developers, Manufacturers and Service Providers
  - Recommendations for Decision Makers
· SOURCES

IssuedNot recorded

Length1,908 words · 24 pages

FormatNot recorded

Scopenational

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Accountability

4/5

Clear responsibility for AI outcomes

Algorithms, that ensure accountability for all stakeholders in terms of compliance with personal data protection law starting from the design of products and services throughout their entire life cycle, should be adopted.

Recommendations for Developers, Manufacturers and Service Providers

screening score · 2026-10-23

Fairness

4/5

Non-discrimination and equitable treatment

In all phases of data processing activity, including data collection; fundamental rights and freedoms should be considered, and the risk of discrimination or other negative effects and prejudices that may affect data subjects should be prevented.

Recommendations for Developers, Manufacturers and Service Providers

screening score · 2026-10-23

Human Dignity

4/5

Respect for the inherent worth of persons

The right to protection of human dignity should be respected by safeguarding human rights and fundamental freedoms.

General Recommendations

screening score · 2026-10-23

Human Oversight

4/5

Humans remain in control of consequential decisions

The role of human intervention in decision-making processes should be ensured. The freedom of individuals not to rely on the results of the suggestions provided by AI applications should be protected.

Recommendations for Decision Makers

screening score · 2026-10-23

Privacy

4/5

Protection of personal data and private life

In the design phase, an approach, based on data privacy, should be adopted in line with national and international regulation and/or documents.

Recommendations for Developers, Manufacturers and Service Providers

screening score · 2026-10-23

Transparency

4/5

Openness about how AI systems work and are used

Individuals that interact with an AI application should be informed about the reasons for the personal data processing activity, details of the methods used in the processing of personal data and the possible consequences

Recommendations for Developers, Manufacturers and Service Providers

screening score · 2026-10-23

Enforcement

1/5

Consequences and compliance mechanisms with real force

Those failing to comply with this ban will be prosecuted in accordance with Law No. 5846 on Intellectual and Artistic Works.

Notice

screening score · 2026-10-23

Impact Assessment

4/5

Required assessment of an AI system's risks/impacts before or during use

In case a high risk is foreseen in terms of protecting personal data in AI works based on personal data processing, privacy impact assessment should be conducted

General Recommendations

screening score · 2026-10-23

Topics

artificial_intelligence data_protection privacy personal_data_protection_law compliance