How to search Turkish Data Protection Authority (KVKK) Board decisions
Last updated
Short answer: Decisions of the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), the decision-making body of the Turkish Personal Data Protection Authority (KVKK), are published on the Authority’s website in three separate lists: Board Decision Summaries (Kurul Karar Özetleri), Principle Decisions (İlke Kararları) and Board Decisions (Kurul Kararları). Each list has a “Kararlarda Arama” (search in decisions) box at the top. If your AI assistant is connected to Yargı PRO, you can ask it to search the decision summaries, retrieve their text and research related court decisions in the same session.
Searching on the Authority’s website#
All three lists sit under the “Kurul Kararları” heading in the Mevzuat (Legislation) menu, and each holds different content:
| List | What you find |
|---|---|
| Board Decision Summaries (Kurul Karar Özetleri) | Summaries of decisions given on complaints, ex officio examinations and data breach notifications |
| Principle Decisions (İlke Kararları) | Decisions the Board adopts on widespread violations that guide general practice |
| Board Decisions (Kurul Kararları) | Decisions of a general nature, such as exemptions from registration with VERBİS (the Data Controllers’ Registry) and compliance deadlines |
In the lists, each record appears with a title and a “Devamını Gör” (see more) link; there are ten records per page. Titles usually include the decision’s date and its number in the form “2024/1361”. The search box is a single field; there is no date or decision-type filter. So to get results, it helps to type a short, topic-specific term (in Turkish, such as “çerez” for cookies, “veri ihlal bildirimi” for data breach notification, “güvenlik kamerası” for security camera).
Searching with your AI assistant#
In an AI app connected to Yargı PRO, you can ask in plain language:
- “Find KVKK decision summaries on the use of cookies on websites.”
- “Retrieve KVKK decision summary No. 2022/1358 and summarise the part where the Board states which obligations were breached.”
- “Search administrative court and Danıştay decisions on this issue.”
The KVKK search in Yargı PRO works on the Board’s decision summaries. Results include the title, the decision number and date and the part that matches your search. You can also ask for the full published summary; this text is not a complete copy of the Board’s decision. Results come back as a single ranked list, with no second page. If you do not find what you are looking for, search again with a different term. Do not put a client’s or a person’s name in a search; search by topic.
Decision summaries are published in Turkish. Your AI assistant reads the Turkish text and can translate and summarise it for you.
A real search: cookie decisions#
On 27 October 2026 we searched the KVKK decision summaries with Yargı PRO’s tools for the word “çerez” (cookie). The tool reported 9 results. Four were decision summaries directly about cookies:
| Decision number | Decision date | Subject |
|---|---|---|
| 2024/1361 | 08.08.2024 | Audio and video recording with a security camera, the duty to inform, processing data with cookies on a website, and obtaining explicit consent for marketing as a precondition of the service |
| 2023/1645 | 28.09.2023 | Unlawful processing of personal data by the Turkish distributor of an online game; inconsistencies in its cookie policy |
| 2022/1358 | 23.12.2022 | Failure to provide privacy notice and explicit consent texts on cookies on a website |
| 2022/229 | 10.03.2022 | Unlawful data processing with cookies on the website and mobile apps of a company in the e-commerce sector |
Two of the other results were decision list pages. Three decision summaries were not about cookies; for example, two concerned data breach notifications. These summaries appear to have matched because of the “Çerez Aydınlatma Metni” (cookie notice) link found on every page of the Authority’s website. When you search with a word that appears in the site’s menu, use the titles to filter out irrelevant results.
The titles of the summaries do not name the data controller; the company is described by its line of business (such as “a data controller operating in the e-commerce sector”). If a search by company name returns nothing, search again using the line of business and the subject of the dispute.
What to watch for when reading a decision#
- Legal basis: The Board’s power to examine complaints and act ex officio is set out in Article 15 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu). If the Board finds a violation, it orders the violation to be remedied; the data controller must carry out that decision without delay and within thirty days at the latest from notification.
- Principle decision vs. complaint decision: If the Board finds that a violation is widespread, it adopts and publishes a principle decision. Decision summaries, on the other hand, concern a specific case; assess separately how similar it is to your own case.
- A summary is not the full decision: The published text is a summary of the decision. Use details such as the amount of the fine, the sub-paragraph relied on and the reasoning only to the extent of the wording in the summary.
- Judicial review: Under a provision added to Article 18 of the Law in 2024, administrative fines imposed by the Board are challenged before the administrative court. However, applications that were pending before a criminal judgeship of peace (sulh ceza hâkimliği) on 1 June 2024 continue before that judgeship. In older files, check the date the application was made and the status of the file, not just the decision date. If a complaint is not answered within sixty days, the request is deemed rejected.
Which plan?#
Decisions of 18 authorities, including the KVKK Board, are in Yargı PRO’s Pro plan; records of the Banking Regulation and Supervision Agency (BDDK), the Information and Communication Technologies Authority (BTK), the Competition Board and the Revenue Administration (GİB) are searched with the same tool. The 14-day trial includes Pro access and requires no payment details. Your AI subscription is billed separately. To connect your AI: How to connect Claude, ChatGPT and Gemini to Turkish law sources
Frequently asked questions
Where are KVKK Board decisions published?
On the Personal Data Protection Authority’s website, there are three lists under the Kurul Kararları (Board Decisions) heading in the Mevzuat (Legislation) menu: Board Decision Summaries, Principle Decisions and Board Decisions. Each list has a “Kararlarda Arama” (search in decisions) box.
Do KVKK decision summaries name the company?
In the summaries we examined, the data controller was not named; the company was described by its line of business. If a search by company name returns nothing, search again using the line of business and the subject of the dispute.
Where can a KVKK administrative fine be challenged?
Under a provision added to Article 18 of Law No. 6698 in 2024, administrative fines imposed by the Board are challenged before the administrative court. However, applications that were pending before a criminal judgeship of peace on 1 June 2024 continue before that judgeship; in older files, also check the application date and the status of the file.