Turkey KVKK 7: Article 7: erasure, destruction or anonymisation once the reasons for processing end

Even where lawfully processed, personal data must be erased, destroyed or anonymised by the controller of its own motion or at the data subject's request once the reasons for processing no longer exist, subject to other laws on erasure; the procedures are set by by-law (the Regulation on Erasure, Destruction or Anonymisation). Failing to erase or anonymise data contrary to Article 7 is punishable under Article 138 of the Turkish Penal Code (Article 17(2)).