Europe · 2 laws · 11 requirements
Türkiye: the laws your website or app must follow
If your customers are in Türkiye, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.
How a SafeLaunch audit checks each one
- CheckedChecked automatically on every scan
- AI reviewLooked for by the AI analysis, reported only with evidence
- Your answersDecided from your answers to the audit questions
- PreparedPrepared for you in the report's compliance pack
- You confirmA scan can't see this; you need to confirm it
KVKK (Law 6698)
In force; the 2024 amendments replaced the cross-border transfer rules from 1 June 2024.
Who it covers: Anyone processing personal data in Türkiye.
What it requires of a website or app (9)
- A privacy notice at collection: who you are and how to reach you, purposes, legal basis, who receives it, people's rightsCheckedKVKK Art. 10 (duty to inform)
- A lawful basis, often consent, for each use of personal dataAI reviewKVKK Art. 5 (explicit consent or another condition)
- Consent before non-essential cookies and trackingCheckedKVKK Art. 5; KVKK Authority cookie guidance (explicit consent for non-essential cookies)
- People can access, correct and delete their data, and know how to askCheckedKVKK Art. 11 and 13
- Reasonable securityCheckedKVKK Art. 12
- Transfers abroad only with the safeguards the law setsCheckedKVKK Art. 9 (adequacy, standard contracts notified to the Authority within 5 business days, binding corporate rules)
- Breach notification: KVKK Board within 72 hours; people as soon as reasonably possiblePreparedKVKK Art. 12(5); Board Decision 2019/10
- Extra protection, usually explicit consent, for sensitive data (if if you handle sensitive data)Your answersKVKK Art. 6
- Register in VERBİS, the data controllers' registryPreparedKVKK Art. 16
Türkiye Law 6563 (commercial electronic messages)
In force; consents are recorded in the Message Management System (İYS).
Who it covers: Anyone sending commercial emails, texts or calls to people in the country.
What it requires of a website or app (2)
- Prior consent for commercial SMS, emails and calls, separately for each channel, recorded in İYS; you must be able to prove it (if if you send marketing emails or texts)Your answersArt. 6; Regulation on Commercial Communication
- Every message identifies the sender and offers a free way to refuse; refusals are honoured within 3 business days (if if you send marketing emails or texts)Your answersArt. 6–8
Sources:İleti Yönetim Sistemi (İYS)
Licensed professionals in Türkiye
These regulators' advertising and conduct rules apply on top of the laws above, only to sites of that profession.
- lawyersAvukatlık Kanunu art. 55 and TBB Reklam Yasağı Yönetmeliği (lawyer advertising ban)
- doctors and surgeonsSağlık Hizmetlerinde Tanıtım ve Bilgilendirme Yönetmeliği (doctors)
- dentistsSağlık Hizmetlerinde Tanıtım ve Bilgilendirme Yönetmeliği (dentists)
- pharmacists and pharmaciesSağlık Hizmetlerinde Tanıtım ve Bilgilendirme Yönetmeliği (pharmacists)
Check your site against Türkiye's rules
A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.
Check my site freeOne free fix in your inbox each week
A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.
By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.
A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.