Bulletin on Cookie Practices Guide published by Turkish Personal Data Protection Board
The Cookie Practices Guide (“Guide”) published on the official website of the Turkish Personal Data Protection Board (“Board”) on 20.06.2022, contains a number of recommendations for the proper fulfillment of the data processing activities of the data controllers who process personal data via cookies in accordance with the Personal Data Protection Law No. 6698 (“Law” or “Law No. 6698”) The guide generally contains parallel regulations with the previously published draft.
First of all, it is recommended to consider the following criteria in the processing of personal data via cookies:
If the personal data processing activity via cookies falls within the scope of Criteria A or B, it seems possible for the data controller to rely on the personal data processing conditions other than express consent in the Law regarding this data processing activity. In other words, when personal data is processed via cookies within the scope of Criteria A and B, the explicit consent of the data subject is not required.
On the other hand, it is pointed out that the explicit consent of the data subject is required for cookies that are not within the scope of the above-mentioned criteria. Examples of such cookies are: Social Plugin Tracking Cookies, Online Behavioral Advertising Cookies.
In the guide, in cases where express consent is required, issues such as how to obtain explicit consent, how to clarify about cookies whether explicit consent is required or not), and the transfer of data abroad through cookies are discussed in detail.
You can access the Guide (in Turkish) from the link below: