Recent Development | On 24 March 2021, the Data Protection Authority (DPA) discussed the commitment letters for cross-border personal data transfers and touched upon the procedures and principles to be followed for applications in its Wednesday Seminar. As is known, the Law on the Protection of Personal Data ("Law"), sets forth certain rules on cross-border transfer of personal data. Preparing a commitment letter between the transferor and the transferee and obtaining the DPA's approval appears as one of those mechanisms. Two template forms are published on the DPA's website for this purpose: one is for transfers from data controller to data controller, and another for transfers from data controller to data processor. You may access these templates (in Turkish) here. After the Law came into effect in 2016, the DPA announced its first approval of a commitment letter on 9 February 2021 and its second approval on 4 March 2021.
