Skip to content

Regulation Tracker / Other

Generative AI and the Protection of Personal Data Guide, in 15 Questions (Üretken Yapay Zekâ ve Kişisel Verilerin Korunması Rehberi)

Personal Data Protection Authority [Kişisel Verileri Koruma Kurumu, KVKK]

last revised 2025-11-24last verified 2026-09-041 versioncountry page →

GuidanceIn forceClient consentConfidentialityRecord-keepingCompetence

map categories:Data protection and legal AIClient data in AI toolsVendor due diligence

A 64-page KVKK guide, published November 2025, answering fifteen questions on how Law No. 6698 applies to generative AI. It covers the model lifecycle, controller/processor allocation, the general processing principles, lawful bases, cross-border transfers, transparency, data-subject rights, security, and practical guidance for everyday users and for children's use of AI tools.

Applies to
providers, firms, all
Effective
See version history
Current version
Publication No. 113 · 24 Nov 2025
Last verified
04 Sept 2026
Official text
www.kvkk.gov.tr/SharedFolderServer/CMSFiles/MTY5MjNmNmIwZWY3YTE.pdf

What the document requires

  • Sets out how the general principles of Law No. 6698 apply at each stage of a generative AI model's lifecycle.
  • Addresses how controller and processor roles are allocated across developers, deployers and users of generative AI.
  • Explains the lawful bases available for processing personal data in generative AI systems.
  • Covers the regime for transferring personal data abroad in generative AI contexts.
  • Sets expectations on transparency, exercise of data-subject rights and data security in generative AI systems.

Version history

VersionDateWhat changedSource
Publication No. 113current2025-11-24Supplements KVKK's 2021 Recommendations on the Protection of Personal Data in the Field of Artificial Intelligence.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "Generative AI and the Protection of Personal Data Guide, in 15 Questions (Üretken Yapay Zekâ ve Kişisel Verilerin Korunması Rehberi)" (Personal Data Protection Authority [Kişisel Verileri Koruma Kurumu, KVKK], Publication No. 113, 2025-11-24), safelegalai.com/regulation/other/tr-kvkk-generative-ai-guide (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in Other