Gazi University: Personal Data Protection Law
2021
I attended Prof. Dr. Olgun Değirmenci’s session on personal data protection law at Gazi University.
Date: 2021-07-01
Speakers: Prof. Dr. Olgun Değirmenci
Personal Data Protection Law
On 1 July 2021, I attended Prof. Dr. Olgun Değirmenci’s event on personal data protection law. The legal principles governing personal information are closely connected to software architecture and information security.
Purpose Limitation and Data Minimization
The purpose of collection, legal grounds for processing and retention periods require separate examination. Data minimization is not merely a storage optimization: it restricts unnecessary processing of personal information.
Access, Retention and Erasure
Authorization, accountable access, retention policies and secure disposal connect legal duties with technical safeguards. Controls should address data flows across the system rather than focusing on one application interface.
Legal and Technical Boundaries
The obligations associated with Türkiye’s personal data protection framework do not automatically mandate one particular technology. Appropriate safeguards depend on the processing context and associated risks.