With the digital revolution, software on smartphones and computers has been continuously updated and improved, creating a need for legal regulations governing the processing of personal information and private data. A significant database of customer information is being built, particularly in the banking, insurance, and telecommunications sectors. Of course, it is the natural right of individuals to have legal rights regarding the security and processing of their own information (personal data) and to demand that spyware not be used and that this information not be disclosed.
The Personal Data Protection Law No. 6698, dated April 7, 2016, established the purpose of processing personal data upon its entry into force, specifically to protect individuals’ right to privacy and freedoms, and to regulate the obligations that natural and legal persons processing personal data must comply with. Personal data may only be processed in accordance with the procedures and principles set forth in this law and other applicable laws.
Processing of personal data: Personal data refers to any operation performed on data, such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, acquisition, retrieval, classification, or use, whether fully or partially automated, as part of a data recording system or obtained through non-automated means.
Data controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.
It is important to note, first and foremost, that personal data may be processed with the explicit consent of the individuals concerned, meaning consent given on the basis of the individual’s being informed and voluntarily disclosing such consent.