According to Article 20 of the Constitution, "Everyone has the right to demand the protection of their personal data. This right includes being informed about their personal data, accessing these data, requesting their correction or deletion, and learning whether they are being used for their intended purposes. Personal data may only be processed in cases prescribed by law or with the individual's explicit consent. The principles and procedures regarding the protection of personal data shall be regulated by law." Within the framework of the mandatory provisions of the Constitution, Law No. 6698 on the Protection of Personal Data (KVKK) entered into force upon publication in the Official Gazette dated April 7, 2016, and regulations and board decisions, which are derivative legislation for the implementation of the law, have been published. This law protects the fundamental rights and freedoms of individuals, particularly the right to privacy, in the processing of personal data, and regulates the obligations of natural and legal persons processing personal data, as well as the procedures and principles they must comply with.