Turkey's Personal Data Protection Law, known as KVKK or Law No. 6698, governs how the personal data of individuals in Turkiye is processed, stored, and protected. Enacted in 2016 and enforced by the Personal Data Protection Authority and its Board, it is closely aligned with European data protection principles, and the 2024 amendment moves it further toward consistency with the European Union's GDPR.
KVKK applies to data controllers across every sector, from finance and healthcare to telecom, retail, and the public sector, along with the processors that act on their behalf. Article 12 obliges every controller to take the technical and organizational measures needed to keep personal data secure. Because privileged accounts are the keys to the systems where that data lives, privileged access management (PAM) is central to satisfying those Article 12 obligations.

PAM Maturity Model eBook
Explore the stages of PAM maturity and how your organization can progress to the highest level of privileged access security.

PAM Buyer’s Guide eBook
Get expert advice on selecting the right PAM solution for your organization, with key considerations and feature comparisons.

Cost of a PAM implementation
A true cost assessment of PAM implementation must factor in hidden expenses, from infrastructure and maintenance to integration and ongoing management.
Disclaimer: The complete implementation of the NIS2 Directive requires a variety of process, policy, people, and technology controls.The solutions mentioned above are some of the ways in which privileged access management controls help with the NIS2 Directive requirements. Coupled with other appropriate solutions, processes, people controls, and policies, ManageEngine's PAM solutions can help organizations align with the NIS2 Directive. This material is provided for informational purposes only, and should not be considered as legal advice for the NIS2 Directive compliance. ManageEngine makes no warranties, express, implied, or statutory, as to the information in this material. Please contact your legal advisor to learn how the NIS2 Directive impacts your organization and what you need to do to comply with the NIS2 Directive.