# Aligning your PAM strategy with Turkey's KVKK (Law No. 6698)

## KVKK (Law No. 6698) and its significance

Turkey's Personal Data Protection Law, known as KVKK or Law No. 6698, governs how the personal data of individuals in Turkiye is processed, stored, and protected. Enacted in 2016 and enforced by the Personal Data Protection Authority and its Board, it is closely aligned with European data protection principles, and the 2024 amendment moves it further toward consistency with the European Union's GDPR.

KVKK applies to data controllers across every sector, from finance and healthcare to telecom, retail, and the public sector, along with the processors that act on their behalf. Article 12 obliges every controller to take the technical and organizational measures needed to keep personal data secure. Because privileged accounts are the keys to the systems where that data lives, privileged access management (PAM) is central to satisfying those Article 12 obligations.

### This white paper will help you:

- Understand why PAM is important under KVKK and how it helps you meet the Article 12 data security obligations.
- Discover how PAM360 enables your organization to deploy effective PAM controls that address KVKK and the Board's Personal Data Security Guide.
- Gain actionable insights about how PAM360 strengthens your security posture and helps you align with KVKK.

## Additional resources

![](https://www.manageengine.com/privileged-access-management/images/resources/add-resource-book-maturity-model.png)

### PAM Maturity Model eBook

Explore the stages of PAM maturity and how your organization can progress to the highest level of privileged access security.

[Learn more](https://www.manageengine.com/privileged-access-management/pam-maturity-model.html)

![](https://www.manageengine.com/privileged-access-management/images/resources/add-resource-book-buyers-guide.png)

### PAM Buyer’s Guide eBook

Get expert advice on selecting the right PAM solution for your organization, with key considerations and feature comparisons.

[Learn more](https://www.manageengine.com/privileged-access-management/buyers-guide-for-pam-software.html)

![](https://www.manageengine.com/privileged-access-management/images/resources/add-resource-book-pam-implementation.png)

### Cost of a PAM implementation

A true cost assessment of PAM implementation must factor in hidden expenses, from infrastructure and maintenance to integration and ongoing management.

[Learn more](https://www.manageengine.com/privileged-access-management/pam-implementation-cost.html)

**Disclaimer:** The complete implementation of the NIS2 Directive requires a variety of process, policy, people, and technology controls. The solutions mentioned above are some of the ways in which privileged access management controls help with the NIS2 Directive requirements. Coupled with other appropriate solutions, processes, people controls, and policies, ManageEngine's PAM solutions can help organizations align with the NIS2 Directive. This material is provided for informational purposes only, and should not be considered as legal advice for the NIS2 Directive compliance. ManageEngine makes no warranties, express, implied, or statutory, as to the information in this material. Please contact your legal advisor to learn how the NIS2 Directive impacts your organization and what you need to do to comply with the NIS2 Directive.