Official Sources

Primary texts

• Law 6698 (KVKK), consolidated text — via the official legislation portal mevzuat.gov.tr
• The Authority — kvkk.gov.tr (guidance, Board decisions, public announcements)
• VERBİS — verbis.kvkk.gov.tr
• Cross-border transfer framework (post-2024): the Authority's transfer pages, SCC templates and notification procedure — kvkk.gov.tr → Yurt Dışına Aktarım
• Veri İhlal Bildirim Formu (breach notification, 72-hour rule) — reachable from kvkk.gov.tr; see Breach Notification — the 72-Hour Rule for AI Incidents

AI-specific guidance, chronological

• AI recommendations (2021) — "Yapay Zeka Alanında Kişisel Verilerin Korunmasına Dair Tavsiyeler" — PDF
• Generative AI guide (24.11.2025) — "Üretken Yapay Zekâ ve Kişisel Verilerin Korunması Rehberi (15 Soruda)" — landing page · see Generative AI Guide (15 Soruda) — What KVKK Actually Said
• Workplace generative-AI use guidance — "İş Yerlerinde Üretken Yapay Zekâ Araçlarının Kullanımı" — landing page · see Employee Use of Generative AI Tools — a Different Problem Than Deploying One
• Board decision 2026/347 (18.02.2026) — separate consent/notification texts — kvkk.gov.tr → Kurul Kararları
• Agentic AI guidance (12.03.2026) — "Etken Yapay Zekâ Sistemlerine İlişkin Rehber" (46 pages) — PDF · landing page · see Etken Yapay Zekâ (Agentic AI) Guidance — KVKK's March 2026 Framework

International (for comparison, not KVKK)

• UK ICO — Tech Futures: Agentic AI (8 Jan 2026) — ico.org.uk
• EDPS (EU) — agentic AI named among six emerging-technology trends (Nov 2025) — edps.europa.eu
• AEPD (Spain) — Agentic AI guidance (18 Feb 2026) — aepd.es
• Comparative reading: KVKK Among Four — How Agentic AI Guidance Compares Internationally

Reading order for an AI team new to KVKK: KVKK in Brief — for AI Builders → Employee Use of Generative AI Tools — a Different Problem Than Deploying One (if AI use predates any formal deployment) → Cross-Border Transfers After the 2024 Reform → Generative AI Guide (15 Soruda) — What KVKK Actually Said → Etken Yapay Zekâ (Agentic AI) Guidance — KVKK's March 2026 Framework → Deployment Patterns — KVKK-Aware Agent Architecture → Breach Notification — the 72-Hour Rule for AI Incidents.

---

Educational reference maintained by Avalanche AI — not legal advice.