Data controllers are obliged to take the necessary technical and administrative measures to ensure data privacy and data security within the scope of both the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR") in Europe. These measures are not specified in a limited number, but they are stipulated to determine the need of data controllers for "necessity." This necessity differs for each activity.

In addition, the life cycle of personal data in the business activities of the organization changes over time. For example, a marketing activity or employee satisfaction activity may occur, which does not currently exist; an existing process may be terminated, the customer portfolio may expand from domestic to abroad, and private companies may be included into suppliers.

As known, with the "Regulation on the Amendment of the Regulation on the Procedures and Principles Regarding the Automatic Enrollment of Employees in the Pension Plan Through Their Employers", which entered into force on 7.12.2018, the points that employers should pay attention to in mandatory individual pension processes were explained.

According to these points, employers may have some obligations regarding automatic private pension plans as of 2021. (There is no need for any additional processing for employers who were previously included in the scope of Mandatory Private Pension Plan - automatic enrollment. These employers will continue their current Mandatory Private Pension Plans.)

You can find below the related explanations of these points below:

Short-term employment allowance, cash wage support / pandemic unpaid leave and termination ban due to Covid-19 reason has been extended until the below dates;

Short-term employment has been extended until 31 December 2020.

As it is known, the periods during which natural and legal persons who process personal data should be registered in the Data Controllers' Registry (Registry) were announced by the Turkish Personal Data Protection Board (Board) in accordance with the Law on the Protection of Personal Data (KVKK) numbered 6698.