Back to the database
Record STMT-WCBC696Advisory

Recommendations on the Protection of Personal Data in the Field of Artificial Intelligence

YAPAY ZEKÂ ALANINDA KİŞİSEL VERİLERİN KORUNMASINA DAİR TAVSİYELER

Guidelines Institutional policyWestern Asia · TRadopted

This document provides recommendations for the protection of personal data within the scope of Law No. 6698 for developers, manufacturers, service providers, and decision-makers operating in the field of artificial intelligence. Issued by the Personal Data Protection Authority of Turkey, it covers general principles, specific guidelines for developers and decision-makers, and emphasizes privacy by design and human rights protection.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

Kişisel Verileri Koruma KurumuRegulator · TR
Lead issuer
Legal forceAdvisory
Under whose authorityInstitutional policy
Judged fromfull text

Who it governs

AI developers and providersRegulatorsCompaniesAI deployers and users

AI developers, manufacturers, service providers, and decision-makers should read this to ensure compliance with personal data protection regulations in Turkey.

Sectors
Cross-sector

What the document contains

What's covered

The document covers recommendations for personal data protection in AI systems, categorizing guidance into general principles, developer/producer/service provider responsibilities, and decision-maker obligations under Turkish Law No. 6698.

What's missing

It does not provide binding statutory amendments, specific enforcement fines, or technical algorithm source code implementations.

Key takeaways
  • AI applications and data processing must respect fundamental human rights and freedoms.
  • Systems must be developed and managed based on data protection by design from the very beginning.
  • Developers and service providers must minimize personal data usage and continuously monitor model accuracy.
  • Decision-makers should establish risk assessment procedures and ensure human oversight in automated decision-making.
  • Data subjects must be granted rights to object, access information, and stop data processing activities.
Principles it states
Lawfulness, fairness, and transparencyPurpose limitation and data minimizationAccuracy and up-to-dateness of personal dataStorage limitation and securityAccountability
Outline
· GİRİŞ
  - Amaç ve Dayanak
  - Kapsam
  - Tanımlar
· Tavsiyeler
  - Genel Tavsiyeler
  - Geliştiriciler, Üreticiler ve Servis Sağlayıcılar İçin Tavsiyeler
  - Karar Alıcılar İçin Tavsiyeler
· Kaynaklar
IssuedApril 2025
Length1,760 words · 21 pages
FormatNot recorded
Scopenational

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Human Oversight

4/5

Humans remain in control of consequential decisions

Karar alma süreçlerinde insan müdahalesinin rolü tesis edilmelidir. Bireylerin, yapay zekâ uygulamaları ile sunulan önerilerin sonucuna güvenmeme özgürlüğü korunmalıdır.

Karar Alıcılar İçin Tavsiyeler

screening score · 2026-10-23

Enforcement

1/5

Consequences and compliance mechanisms with real force

Davranış kuralları ve sertifikasyon mekanizmaları gibi uygun önlemler alınmalıdır.

Karar Alıcılar İçin Tavsiyeler

screening score · 2026-10-23

Impact Assessment

4/5

Required assessment of an AI system's risks/impacts before or during use

Kişisel veri işleme temelli yapay zekâ çalışmalarında, kişisel verilerin korunması açısından yüksek risk öngörülüyorsa, mahremiyet etki değerlendirmesi uygulanmalı

Genel Tavsiyeler

screening score · 2026-10-23

Topics

data_protection privacy_by_design artificial_intelligence risk_assessment accountability