KVKK which was enacted on 07 April 2016 make the processing of the personal data mandatory in compliance with the defined policy and principles.

Our goal is to provide support and consultancy services to the organizations in Turkey which are acting as controllers and/or processors in order to successfully implement local or global privacy and data protection compliance programme. Our services are structured with an end-to-end approach including legal infrastructure, processes and technology.

Our activities are realised by carrying out the following steps:

Analysis of the current business environment to determine the requirements for KVKK compliance

• • Review of the business model
  • Review of the existing business processes and evaluation of the structure
  • Identification of the business processes containing personal data
  • Reviewof the studies performed with suppliers and business partners
  • Review of physical and information security measures

Implementation and Guidance for KVKK Compliance

• • Formation of the data inventory
  • Get ready for the entry to the Data Controllers’ Registry system (VERBIS)
  • Defininiton of the roafmap including steps to be taken for KVKK compliance
  • Generation of the risk based assessment report regarding physical and information security measures
  • Preparation of the information and security articles for KVKK compliance of the business agreements
  • Defininiton of KVKK policies and procedures