KVKK - GDPR
The most important advancement regarding the protection of personal data among the fundamental rights and freedoms is the Turkish Personal Data Protection Law numbered 6698 (KVKK), which came into our lives in 2016. On the other hand, the General Data Protection Regulation (GDPR) valid in the European Union, which is similar to the definition included in KVKK, applies to the processing of personal data wholly or partially by automated tools and by other than automated tools that form part of a filing system or intended to form part of a filing system. When we look at the scope of both laws, we see that the data registry system in which employee data is processed must comply with the law.
KVKK and GDPR has increased the burden on Human Resources significantly. A study involving 250 HR managers in the UK reveals that the work and documentation burden of companies in the field of Human resources has increased by 76%. Considering the practices in our country, it is very crucial that you comply with the following principles regarding the personal data of your organization's employees:
- Your data processing activity must comply with the law and good faith
- Your data must be accurate and up to date at the time of use
- You must clearly define your processing purposes
- The processed data should be related to your purpose for processing
- You must follow the principle of data minimization rule and avoid keeping unnecessary data
- You should pay attention to the retention periods
Bordromat® protects your data securely with the most advanced measures taken against cyber threats. Bordromat, which supports the digital transformation required for the increasing information needs of the information society, provides administrative and technical requirements for your KVKK and GDPR compliance. Please visit our website for our experience in the field of compliance and other services.
