Current position
Overview
The Artificial Intelligence Bill (No. 2/2234) was submitted to the Grand National Assembly on 24 June 2024 and remains under parliamentary committee review. A second draft amending existing laws to address AI-generated content liability was submitted in November 2025.
No AI-specific law has been enacted.
KVKK (data protection authority) and TUBITAK AI Institute are active on AI governance.
Key legislation & sources
AI Bill No. 2/2234 — original text, June 2024 (Turkish)
Draft Law on AI-Generated Content, November 2025 (Turkish)
KVKK — Recommendations on Personal Data Protection in AI (July 2025)
Digital Transformation Office — National AI Strategy
Regulatory developments
Latest updates
Latest event import:
Updates sourced from Digital Policy Alert ↗. The latest available entries for this jurisdiction.
implementation
Regulation on provision of differentiated services for children by social network providers and age verification including design requirement enters into force
Source: Digital Policy Alert · View update ↗
adoption
President signed Presidential Circular on Artificial Intelligence Action Plan (2026-2030)
Source: Digital Policy Alert · View update ↗
adoption
Personal Data Protection Authority published report on agentic AI
Source: Digital Policy Alert · View update ↗
On 12 March 2026, the Personal Data Protection Authority published a report on agentic Artificial Intelligence (AI), outlining the characteristics, potential uses, and risks of agentic AI systems and their implications for personal data protection. The report explains that agentic AI systems consist of AI agents capable of autonomously pursuing goals, coordinating multi-step tasks, and adapting to changing conditions, which distinguishes them from conventional AI systems that mainly respond to inputs within predefined rules. It notes that these systems may be applied in areas including research and development, customer support, finance, healthcare, and incident management, but may also create risks related to transparency, accountability, bias, security vulnerabilities, and the accuracy of outputs. The report emphasises that the multi-step and autonomous nature of agentic AI can complicate personal data processing by expanding the scope of data use, enabling inference-based profiling, and making oversight and legal responsibility more difficult. To mitigate these risks, the report recommends a risk-based and human-centred approach, including meaningful human oversight, transparency and explainability mechanisms, privacy by design and by default, clear allocation of roles and responsibilities, and the use of risk assessment tools, including data protection impact assessments.
announcement
Personal Data Protection Authority opened an ex officio investigation into X Internet Unlimited Company and X.AI Corporation over suspected violations of Law on Protection of Personal Data concerning the Grok AI Assistant
Source: Digital Policy Alert · View update ↗
On 11 February 2026, the Personal Data Protection Authority (KVKK) opened an ex officio investigation into X Internet Unlimited Company and X.AI Corporation in relation to the development and deployment of the Grok Artificial Intelligence Assistant. The investigation follows suspicions that the companies failed to implement the technical and administrative measures required under Law No. 6698 on the Protection of Personal Data and that their personal data processing activities may not comply with the requirements of that law.
adoption
Personal Data Protection Authority released guidance for parents of children using artificial intelligence tools
Source: Digital Policy Alert · View update ↗
On 12 January 2026, the Personal Data Protection Authority (KVKK) released guidance for parents of children using artificial intelligence tools. The guidance addresses the use of artificial intelligence technologies by children in education, gaming, communication and social activities. The guidance covers tools including chatbots, artificial intelligence-supported learning applications and content generation tools. The guidance states that these tools may facilitate learning and access to information but may also involve risks if not used appropriately. The guidance identifies risks related to violations of privacy, online security threats, exposure to misleading or false content, artificial intelligence-generated fake images, videos and audio, misuse of personal data, and potential emotional and psychological effects. The guidance sets out parental responsibilities relating to age-appropriate application selection, review of terms of use and privacy policies, use of content filtering and parental control options, management of photo and video sharing, ethical and respectful use of artificial intelligence tools, screen time balance, open communication with children, and digital parenting practices, and includes a parental checklist for practical implementation.
Showing 5 of 18 available API entries. Dates and summaries are supplied by Digital Policy Alert.