Turkish Standard Contractual Clauses (SCCs)

Turkish standard contractual clauses (scc)

As part of the major reform of Turkish data protection law in 2024, the Turkish Data Protection Authority (Kişisel Verileri Koruma Kurumu – KVKK) introduced its own Standard Contractual Clauses (“Turkish SCCs”) for international data transfers for the first time. Published on 10 July 2024 together with the new Regulation on Cross-Border Transfers of Personal Data, these clauses represent a significant step towards alignment of the Turkish data transfer regime with the GDPR and European data protection standards. 

At the same time, the Turkish SCCs introduce substantial practical and legal challenges for organizations operating internationally. Unlike many European contracting practices, the Turkish framework includes specific formal execution and notification requirements. The Turkish Data Protection Authority has expressly clarified that valid execution of the clauses is mandatory and that ordinary electronic signatures may not suffice. Additional requirements apply regarding Turkish-language versions, execution formalities, and notification obligations towards the Authority within five business days.

This raises important practical questions for multinational organizations, particularly those without a local presence in Türkiye:

• When must Turkish SCCs be used?
• Which organizations and transfer scenarios are affected?
• How do they differ from the EU SCCs?
• And how can companies practically deal with the local formalities and operational requirements?

These are precisely the topics this international EFDPO webinar will address.

Together with representatives from the Turkish Data Protection Authority and leading experts from the Turkish Data Protection Association Veri Koruma Dernegi, industry, international legal practice, and academia, participants will receive practical guidance on the new Turkish transfer regime, its implementation in practice, and key compliance considerations for global organizations.

The webinar is aimed at Data Protection Officers, privacy professionals, legal and compliance teams, and all organizations involved in international data transfers between Türkiye and other jurisdictions.

Panelists include:

• Hande Kistak (Siemens)
• Jurdagul Koca (Turkish Data Protection Authority)
• Burak Ozdagistanli (Solicitor, Ostangistanli Law Firm)
• Ozan Karaduman (Partner, Karaduman Law Firm)
• Prof. Dr. Hüseyin Can Aksoy (Associate Professor, Bilkent University, Faculty of Law).

Moderator:
Dr. Christoph Bausewein, Assistant General Counsel, CrowdStrike (on behalf of EFDPO)