Definition
Law No. 6698 on the Protection of Personal Data regulates under which conditions personal data (name, ID number, phone, health information, camera footage, location) may be collected, stored and shared. A business acting as data controller must provide a privacy notice, obtain explicit consent where required, register with VERBİS and take the technical and organisational measures that keep the data secure. Technical measures are concrete: access rights, encryption, backup, logging, network security, retention period of camera recordings. Legal texts are the lawyer's job and technical measures the IT team's; compliance is complete only when both run together. Its European counterpart is the GDPR.
How SMB Teknoloji uses it
We implement the technical side of KVKK: access rights, encryption, backup, logging, network separation and camera retention periods; the legal texts are prepared together with your lawyer.
Related service: Standards Compliance & Certification Readiness