An Avalanche AI example wiki
KVKK for AI Agents
How Türkiye's data protection law (KVKK, Law 6698) applies to deploying AI agents — lawful bases, cross-border transfers, and practical deployment patterns. Educational reference, not legal advice.
← Avalanche AI
Agents: read /wikis/kvkk-ai/llms.txt for this wiki's compiled index.
The pages
Compiled, stamped, cross-referenced
This is a working demonstration of the Corporate Brain Method's page contract — every page below carries sources and a freshness claim.
concept
- Etken Yapay Zekâ (Agentic AI) Guidance — KVKK's March 2026 FrameworkKVKK's Agentic AI guidance (12 Mar 2026) — issued alongside ICO, EDPS, and AEPD — sets out human oversight, traceability, and accountability expectations for autonomous, multi-agent systems, plus DPIA updates.
- Deployment Patterns — KVKK-Aware Agent ArchitectureThe practical patterns — what enters the context window, prompt/transcript retention, role assignment, and the on-prem vs cloud LLM decision, plus the Kurul's AI recommendations.
- Breach Notification — the 72-Hour Rule for AI IncidentsArt. 12/5 requires notifying the Kurul within 72 hours of becoming aware of a breach. An agent that leaks, over-shares, or is prompt-injected into disclosing personal data triggers the same clock as any other breach.
- Cross-Border Transfers After the 2024 ReformArticle 9 was rewritten in March 2024 (Law 7499) — adequacy decisions, standard contractual clauses, and binding corporate rules now exist alongside consent. What that means for cloud LLMs.
- Generative AI Guide (15 Soruda) — What KVKK Actually SaidKVKK's first dedicated generative-AI guidance (24 Nov 2025) — how controller/processor roles split across the lifecycle, where cross-border transfer and relevant-person rights bite, and the deepfake/misinformation risk framing.
- Employee Use of Generative AI Tools — a Different Problem Than Deploying OneKVKK guidance on generative AI tools used by staff (ChatGPT-style assistants, not a company-built system) — the shadow-IT compliance problem most KOBİs actually have first.
- KVKK in Brief — for AI BuildersThe core of Law 6698 as it matters to AI systems — roles, principles, lawful bases, and the obligations that follow an agent into production.