In 2015 and 2016 major legislative amendments and new pieces of legislation were introduced with respect to the protection of personal data in the jurisdictions of Turkey and Japan. The purpose of this article is to provide an in-depth summary of the relevant pieces of legislation in Turkey and generally explain the amendments introduced in the already existing laws in Japan.
I. PROTECTION OF PERSONAL DATA IN TURKEY
The Law No. 6698 on the Protection of Personal Data (the Law) entered into force on 24 March 2016 after more than a decade of suspension before the Turkish Parliament. The Law delimits the scope of the term personal data, provides legal definitions identifying the owner of personal data and any processors of that data, and outlines data storage methods commonly used to secure that data. In addition, the Law defines certain basic rights of data owners. It prohibits, for example, the processing of data without the explicit consent of the real person owner of that data.