Guidelines on the Processing of Republic of Türkiye Identity Numbers Published

On 16.01.2024, the Personal Data Protection Authority published Guidelines on the Processing of Republic of Türkiye Identity Numbers (Guidelines). The purpose of the Guidelines are to provide guidance to data controllers by setting out the provisions of the legislation envisaging the processing of Turkish identification numbers (Turkish ID number). The important points in the Guidelines are briefly summarized below:

• The Guidelines emphasize the significance of: (i) considering whether methods that interfere less with the right of data subjects to protection of their personal data are possible, (ii) ensuring that the data processing activity is carried out in accordance with the law, and (iii) taking necessary technical and administrative measures by data controllers when processing Turkish ID numbers.
• The Guidelines include recommendations regarding the processing of Turkish ID numbers in accordance with the Law on Personal Data Protection No. 6698 and secondary legislation.
• In this context, the Guidelines provide examples of situations and legislative provisions that envisage the processing of Turkish ID numbers. Examples provided by the Guidelines include issuance of invoices for the purchase of goods and services, ordering and delivery of cargo, sending commercial electronic messages by tradesmen, registration in the trade registry and certification of registration, legal transactions at notary public offices, filing of lawsuits, and prevention of laundering proceeds of crime.
• Furthermore, the Guidelines also outline examples of cases where documents containing a Turkish ID number or identity information are presented, shown, or notified to the competent authorities for identification and other purposes.