Turkey KVKK
compliance
Turkey's KVKK (Law No. 6698) predates GDPR, was aligned closer to it by the 2024 amendments, and works much like it: explicit consent is the workhorse legal basis, and the KVKK Board has issued cookie guidance and fines aimed squarely at websites.
Trusted by 2,000+clients worldwide
KVKK at a glance
In force
Since 2016; cookie guidance from the Personal Data Protection Board since 2022.Law No. 6698
Regulator
The Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), the decision-making body of the KVKK Authority.
Fines
Administrative fines re-indexed each year; the 2026 ceiling is about 17 million lira per violation for data-security and Board-order breaches.Re-indexed each year
Consent standard
Explicit consent: informed, specific, freely given, and obtained before non-essential cookies are set.
This guide is general information for site owners, not legal advice. Check the current text of the law and your own counsel for your situation.
What the law requires on your website
Prior explicit consent
The Board's cookie guidance follows the European model: non-essential cookies need explicit consent before they run.
Clarification text
KVKK's signature duty: inform data subjects about the controller, purposes, recipients and legal basis at collection.
Registry & records
Many controllers must register with VERBIS, and all must be able to demonstrate valid consent.
How Clickio Consent helps
Serve visitors from Turkey a consent flow configured for the KVKK: a localized dialog, granular purposes, equal-weight decline and stored records.
One tag, per-region rules
Clickio detects each visitor's location and serves the consent experience you configure for that region, this law included, without affecting any other market.
Multi-regulation →Localized dialogs
Language auto-detection and full text customization put the dialog in your visitors' language, with granular purpose choices and equal-weight decline.
Customization →Evidence on file
Every choice is stored as a consent record: the demonstrable-consent trail modern laws place on the controller.
Reporting →Frequently asked questions
Does KVKK require a cookie banner?
The Board's guidance and fining decisions require explicit consent before non-essential cookies, which in practice means a consent dialog that blocks trackers until the visitor agrees.
Is KVKK the same as GDPR?
Close but not identical: KVKK's explicit-consent emphasis is stronger in places, and it has its own duties like clarification texts and VERBIS registration. A GDPR-grade dialog localized to Turkish covers the consent mechanics.
Does KVKK apply to companies outside Turkey?
The Board has applied the law to foreign services processing Turkish residents' data: audience, not headquarters, is what matters in practice.
Does the dialog need to be in Turkish?
Informed consent implies a language the visitor understands. Clickio's language auto-detection serves Turkish to Turkish visitors automatically.
How do I keep evidence of consent?
Clickio records every consent decision, giving you the demonstrable-consent trail the Board expects controllers to maintain.
Explore other regulations
Every guide shows how the same Clickio tag serves the right consent experience for that market. Pick the next one that applies to your audience.
Add this market to your consent setup. Start with a 14-day free trial; per-region settings and multi-language dialogs start on Starter.
Per-region settings (own texts, choices and fallback) and multi-language dialogs start on the Starter plan.