Turkey's KVKK Article 7: erasure of personal data
Article 7 of the KVKK requires personal data to be erased, destroyed or anonymised once the reason for processing ends; it is a core basis for removal requests in Turkey.
What it says
Even if data were processed lawfully, once the reasons for processing no longer exist the controller must erase, destroy or anonymise them on its own initiative or at the data subject's request. A regulation sets the details; on request, the controller has 30 days to respond.
Three methods
- Erasure: making data inaccessible and unusable for relevant users
- Destruction: making data inaccessible and unrecoverable for anyone
- Anonymisation: making data impossible to link to an identified person; replacing a name with initials in a news story is close to this
Use in content removal
If a Turkish site shows your name, photo or contact details with no valid legal basis, or the purpose has ended, Articles 7 and 11 together ground an erasure request. Template: KVKK erasure request.
Limits
Freedom of expression, public interest and legal retention duties can limit erasure; journalistic activity is partly exempt, so in news cases the KVKK is used alongside other routes.
General information, not legal advice. In real cases we work alongside lawyers who specialise in digital rights.
Frequently asked questions
Can a controller anonymise instead of deleting?
Yes; the law lists all three methods, and anonymisation is often what news sites accept fastest.