Recent Developments on the Personal Data Protection

The Turkish Personal Data Protection Authority revealed the recent developments regarding the personal data. According to the newsletter current updates on the personal data protection are as follows: 

• The Personal Data Protection Board published a Principle Decision Regarding the Recording of Photocopies of the Turkish Republic (T.C.) Identity Documents of Persons Receiving Accommodation Services in the Tourism and Hotel Industry”. According to the decision:
  • It was decided to discontinue the practice of taking photocopies of T.C. identity documents from guests hosted in accommodation facilities by data controllers providing services in the tourism and hotel industry.
  • It was decided that data controllers who recorded photocopies of T.C. identity documents of relevant persons receiving services for accommodation purposes prior to the publication of the Decision must destroy documents.

• The European Data Protection Board (EDPB) made an announcement that the document containing recommendations regarding the legal basis requiring the creation of user accounts on e-commerce sites has been opened for public consultation and that opinions regarding the said text can be submitted until 12.02.2026.

• The French Data Protection Authority (CNIL) published the third and final part regarding the results of the survey examining French users’ perceptions of the use of personal data and consenting to online advertisements.
  • The first study of the series discussed the extent to which users are willing to pay in exchange for access to services offered without targeted advertising.
  • The second study addressed individuals’ tendencies to use their personal data as a “currency”.
  • The final part of the series examines the risks posed by cybercrimes targeting personal data and the financial damages arising for persons affected by data breaches.

• The European Data Protection Supervisor (EDPS) published the “TechSonar” report regarding the year 2025-2026, in which trends regarding emerging technologies are forecasted. In this version of the report, the following technologies are included:
  • Agentic AI
  • AI Companions
  • Automated Proctoring
  • AI-driven Personalised Learning
  • Coding Assistants
  • Confidential Computing

• The World Economic Forum published a study discussing the emergence of “AI agents,” examining technical foundations, classifications, evaluation methods, and governance approaches to support safe and effective adoption. The study states that the aim is to guide decision-makers, technical leaders, and practitioners aiming to integrate “AI agents” into corporate workflows and services during the responsible design, testing, and auditing processes of these tools.

• The European Parliament adopted a resolution regarding the impact of artificial intelligence on the financial sector on 25.11.2025.

• The European Banking Authority (EBA) published a study regarding the effects of the EU AI Act on the banking and payment sector.

• UNESCO published guidelines regarding the use of artificial intelligence systems in courts and judicial bodies.

• The European Parliamentary Research Service (EPRS) published a study addressing the impact of artificial intelligence on the use of search engines and the main challenges arising in this framework.

• The EU Agency for Fundamental Rights (FRA) published a report evaluating the development and use of artificial intelligence in areas defined as high-risk within the scope of the EU AI Act from the perspective of fundamental rights.

• The Australian Digital Transformation Agency published the Artificial Intelligence Impact Assessment tool and its supporting guide, prepared to assist public institutions in evaluating their planned uses of artificial intelligence.

• The Office of the Australian Information Commissioner (OAIC) published informative content regarding the use of generative artificial intelligence tools in the workplace. In this context, stating that caution should be exercised against the risks that publicly available generative artificial intelligence tools may pose and the harms that may be caused to individuals, the importance of developing a holistic and comprehensive compliance and risk management approach within organizations was emphasized.

• UNICEF published the updated version of the guidance on artificial intelligence and children. In the Guidance, which is stated to be prepared to assist in creating artificial intelligence policies and systems that protect children’s rights, a comprehensive framework regarding the foundations and requirements of child-centric artificial intelligence is presented and recommendations are made in this direction. In this context, the requirements for child-centric artificial intelligence are listed as follows:
  • Ensuring regulatory frameworks, oversight, and compliance for child-centric artificial intelligence.
  • Ensuring safety for children.
  • Protecting children’s data and privacy.
  • Preventing discrimination against children and ensuring equity.
  • Ensuring transparency, explainability, and accountability for children.
  • Respecting human and children’s rights through responsible artificial intelligence practices.
  • Supporting the best interests, development, and well-being of children.
  • Ensuring the inclusion of children and being inclusive for children.
  • Preparing and empowering children for current and future developments in artificial intelligence.
  • Creating a conducive environment for child-centric artificial intelligence.

• The World Bank Group published the “Digital Progress and Trends Report 2025: Strengthening Artificial Intelligence Foundations” study, examining how low and middle-income countries can benefit from artificial intelligence to ensure inclusive and sustainable development. In this context, the elements of connectivity (infrastructure), computation (processing power), context (training data, algorithms, and applications), and competence (digital skills), which are fundamental in the adoption, adaptation, and innovation processes of artificial intelligence, are discussed.

• The World Economic Forum published a study emphasizing that the real competitive advantage in the age of artificial intelligence comes from “being human” rather than technological capacity. The said study states that human-centric competencies, once characterized as “soft” skills, have become fundamental skills that enable individuals, organizations, and societies to adapt to change and support them in leading transformation. The report also states that while it is accepted that technology plays an important role as a tool supporting efficiency, innovation, collaboration, and long-term productivity are essentially driven by human-centric skills.

• The Artificial Intelligence Law, containing regulations regarding the development, use, and governance of artificial intelligence, was adopted in Vietnam. It is stated that the regulation, which is noted to consist of 35 articles, will enter into force on 01.03.2026.