Digitalisation creates new legal risks and regulatory obligations across almost every area of commerce. Failure to manage these risks properly may lead to administrative sanctions and serious reputational harm. Our information technology law practice covers identifying the obligations of data controllers and processors under Law No. 6698 on the Protection of Personal Data (KVKK), preparing privacy notices and explicit-consent forms, compiling data-processing inventories, preparing standard contracts where personal data is transferred abroad, and managing notification and complaint proceedings before the Personal Data Protection Board. We also advise on determining the obligations of service providers and intermediary service providers under Law No. 6563 on the Regulation of Electronic Commerce, preparing distance-sales agreements and ensuring compliance in relation to consent for commercial electronic communications.
We analyse the compliance obligations arising for clients that develop software or hardware products, or place such products on relevant markets, under current legislation such as the European Union Cyber Resilience Act (CRA), and prepare practical compliance roadmaps.
Our services also include preparing software licence agreements, cloud-services and SaaS agreements, data-processing agreements and platform membership and terms-of-use documents. Our objective is to help established companies and start-ups remain compliant and competitive in a rapidly developing technology-law environment.