Criminal provisions in Turkish Penal Code Arts 135-140 apply: unlawful recording of personal data (1-3 years imprisonment), special categories (sentence increased by half), unlawful transfer or seizure (2-4 years), failure to destroy when required (1-2 years).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.