With the Industrial Registry Communiqué (SGM 2026/4) published in the Official Gazette dated April 1, 2026, significant amendments have been introduced regarding the processes of application, registration, modification, validity, cancellation, and the annual operating statement related to the industrial registry.

Pursuant to the "Regulation on the Procedures and Principles of Occupational Health and Safety Training for Employees", published in the Official Gazette dated April 2, 2026, and numbered 33212, new standards and technical requirements for occupational health and safety (OHS) training to be provided to employees have entered into force.

Pursuant to the announcement made by the Social Security Institution (SSI) on March 31, 2026:

Taking into account the access delays experienced due to the updates carried out on the infrastructure of the Financial Automation System (MOSIP), the payment deadline for premium liabilities originally due on March 31, 2026 has been extended until April 7, 2026 at 23:59.

With its Principle Decision dated February 18, 2026 and numbered 2026/348, the Turkish Personal Data Protection Board ("Board") has made significant assessments regarding a practice frequently encountered in apartment and residential site managements. The relevant Principle Decision was published in the Official Gazette dated March 31, 2026 and numbered 33210.

In the Decision, it is stated that the processing of personal data through posting lists containing personal data such as name-surname, apartment number, amount of debt, and delay information related to dues, advances, and similar receivables in common areas such as elevators, building entrances, and corridors does not constitute a disclosure limited to a specific and identifiable group of recipients, but may instead lead to disclosure to an indefinite number of third parties. In this context, it has been emphasized that such practice cannot rely on any of the legal grounds for processing set forth under Article 5 of The Law numbered 6698 on the Protection of Personal Data and that making personal data accessible to unauthorized persons constitutes a breach of the obligation to implement adequate technical and administrative measures for data security under Article 12 of the Law.