Data protection and cybersecurity concern not only companies’ information technology functions, but also their corporate governance and day-to-day commercial operations. APX Legal advises domestic and international businesses on identifying obligations relating to the processing, retention and transfer of personal data, and on compliance with data protection and cybersecurity legislation.
Our work includes privacy notices and consent forms under Türkiye’s Personal Data Protection Law (KVKK), personal data processing and retention policies, contractual arrangements with data processors, cross-border data transfers and data subject requests. Where relevant, we also assess how the European Union’s General Data Protection Regulation (GDPR) and other foreign data protection rules may affect the activities concerned.
In cybersecurity matters, we advise on the legal obligations of companies and their governing bodies, the preparation of internal policies and procedures, the contractual allocation of responsibilities with service providers and the legal aspects of incident response. We also assist clients following data breaches and cyber incidents with notification obligations, dealings with regulatory authorities, internal investigations and potential disputes, coordinating with the relevant technical teams where specialist input is required.
