Hukuki Makaleler ve Blog

Biometric data is special category data under KVKK requiring explicit consent or legal basis. Categories Physiological (face, fingerprint, iris) and…

ISO 27001:2022 with new Annex A controls is increasingly required in international tenders. 2022 Updates 11 new controls: threat intel,

SOC 2 Type II is a de facto requirement for Turkish SaaS companies selling to US enterprises. Trust Services Security

Deepfake liability arises under Turkish privacy, defamation and IP law; EU adds DSA and AI Act layers. Turkish Framework TMK

EU AI Act risk-based approach affects Turkish AI providers and deployers serving EU markets. Risk Tiers Unacceptable, high, limited, minimal.

DORA (effective Jan 2025) imposes operational resilience and ICT third-party risk management on EU financial entities. ICT Third-Party Risk Critical

NIS2 explicitly requires essential and important entities to manage supply chain cyber risk, affecting Turkish suppliers. Supplier Obligations Risk assessment,

Turkish ransomware victims must navigate KVKK notification (72h), MASAK reporting and law enforcement coordination. First 72 Hours KVKK notification, USOM

Iceland’s geothermal expertise transfers well to Turkish geothermal projects. Geothermal Aydin, Manisa basin opportunities. Software Reykjavik-Istanbul tech bridges. How Alyar

Sammarinese small-mid cap investors find Turkish manufacturing partners. Manufacturing JV with Turkish industrial partners. Tourism Wine Wine tourism opportunities. How