The Turkish Personal Data Protection Board's Principle Decision No. 2026/1301, dated July 1, 2026, addresses the online publication of personal data by public legal entities acting as data controllers within the framework of the fundamental principles and legal bases for processing set out in the Personal Data Protection Law No. 6698 ("KVKK"). The Decision was published in the Official Gazette No. 33323 dated July 28, 2026.

The Turkish Personal Data Protection Authority (KVKK), in its public announcement published on July 21, 2026, provided important guidance regarding the use of contact information obtained from third parties for advertising and marketing activities.

During its investigations, the Authority found that companies have been contacting prospective customers using telephone numbers, email addresses, and other contact information obtained from existing customers, business partners, referrals, or other third parties. However, it was observed that the obligations set forth under the Turkish Personal Data Protection Law (Law No. 6698) have not always been fulfilled in these processes.

Pursuant to Provisional Article 15 of the Turkish Commercial Code (Law No. 6102), Joint Stock Companies (Anonim Şirket – A.Ş.) and Limited Liability Companies (Limited Şirket – Ltd. Şti.) whose share capital is below the newly prescribed minimum statutory thresholds are required to increase their share capital to the applicable minimum amounts by December 31, 2026.

Accordingly:

With the Presidential Decree No. 11511, published in the Official Gazette No. 33307 dated July 11, 2026, the jurisdictions to be designated as Safe Harbors under the Domestic and Global Minimum Top-up Tax regime, the jurisdictions applying the Global Minimum Top-up Tax pursuant to the Qualified Income Inclusion Rule (IIR), and the jurisdictions applying a Qualified Domestic Minimum Top-up Tax (QDMTT) have been determined.