NEW REGULATION ON THE PROTECTION OF PERSONAL DATA: KEY PROVISIONS

At the end of 2016, the Minister of Communication and Informatics issued Regulation No. 20 of 2016 on Personal Data Protection within Electronic Systems (“Regulation 20/2016”) to implement Article 15 (3) of Government Regulation No. 82 of 2012 on the Organization of Electronic Systems and Transactions (“GR 82/2012”). The regulation was issued on 7 November 2016 and came into force on 1 December 2016. Existing electronic system providers must adjust to the regulation within 2 years of its issuance.