Principle Decision No. 2026/921 of the Personal Data Protection Board ("Board") dated April 29, 2026 on the Processing of Biometric Data for Attendance Tracking Purposes ("Principle Decision") was published in the Official Gazette dated June 2, 2026. Following the publication of the Principle Decision, various requests for opinion were submitted to the Personal Data Protection Authority ("Authority") by data controllers operating in different sectors, and these requests gave rise to the need to clarify certain matters.

By way of the public announcement published on August 27, 2026, the Authority resolved these uncertainties and clarified the scope of application of the Principle Decision.

With the Communiqué (Serial No: 2) Amending the Communiqué (Serial No: 1) on the Electronic Submission of Counter-Examination Minutes Attached to Certified Public Accountant (CPA) Certification Reports, published in the Official Gazette dated August 21, 2026, the transition period for electronic submission has been extended.

With this amendment, the date "July 1, 2026" stated in the second paragraph of Article 7 of the Communiqué published in the Official Gazette dated December 24, 2025, No. 33117, has been changed to "January 1, 2027."

With the publication of the Presidential Circular No. 2026/9 dated August 17, 2026, in the Official Gazette No. 33344 dated August 18, 2026, the Türkiye Artificial Intelligence Action Plan (2026–2030) has entered its implementation phase.

In its current form, the Action Plan does not impose any direct and general binding obligations on the private sector. However, the new legal and technical framework envisaged by the Plan is expected to result in concrete compliance implications for companies in the subsequent stages.

The Italian data protection authority Garante Per La Protezione Dei Dati Personali ("Garante") imposed an administrative fine of EUR 460,000 on Piaggio & C. S.p.A. by its decision dated June 18, 2026 and numbered 2026/476. The decision concerns the retention of corporate email accounts allocated to former employees for five years, the retrospective review of such correspondence for use in disciplinary proceedings, and the failure to respond to data subject requests.