Ki\u015fisel Verilerin Korunmas\u0131 Kanunu ile GPDR ayn\u0131 san\u0131lsa dahi arada belli farkl\u0131l\u0131klar vard\u0131r. Bu y\u00fczden aradaki farklar\u0131 anlamak ad\u0131na GPDR KVKK Kar\u015f\u0131la\u015ft\u0131rmas\u0131 yapmak en do\u011fru se\u00e7enektir.<\/p>\n
Ki\u015fisel verilerin korunmas\u0131, g\u00fcn\u00fcm\u00fcz dijital \u00e7a\u011f\u0131nda hem bireyler hem de kurumlar i\u00e7in hayati bir konudur. \u0130nternet kullan\u0131m\u0131n\u0131n artmas\u0131, b\u00fcy\u00fck veri analizleri, yapay zek\u00e2 uygulamalar\u0131 ve e-ticaret gibi alanlar\u0131n geli\u015fmesiyle birlikte ki\u015fisel verilerin g\u00fcvenli\u011fi daha da kritik hale gelmi\u015ftir. Bu ba\u011flamda, Avrupa Birli\u011fi\u2019nin Genel Veri Koruma T\u00fcz\u00fc\u011f\u00fc (GDPR) ve T\u00fcrkiye\u2019deki Ki\u015fisel Verilerin Korunmas\u0131 Kanunu (KVKK), veri koruma standartlar\u0131n\u0131 belirleyen en \u00f6nemli yasal d\u00fczenlemelerdendir.<\/p>\n
GDPR (General Data Protection Regulation<\/strong>), 25 May\u0131s 2018\u2019de y\u00fcr\u00fcrl\u00fc\u011fe giren ve Avrupa Birli\u011fi (AB) genelinde ki\u015fisel verilerin korunmas\u0131n\u0131 ama\u00e7layan bir d\u00fczenlemedir. GDPR\u2019\u0131n ba\u015fl\u0131ca ama\u00e7lar\u0131 \u015funlard\u0131r:<\/p>\n Ki\u015fisel verilerin i\u015flenmesinde \u015feffafl\u0131k ve hesap verebilirlik<\/strong> sa\u011flamak,<\/p>\n<\/li>\n Bireylerin verileri \u00fczerindeki haklar\u0131n\u0131 g\u00fc\u00e7lendirmek<\/strong> (\u00f6rne\u011fin silme hakk\u0131, ta\u015f\u0131nabilirlik hakk\u0131),<\/p>\n<\/li>\n Kurumlara veri g\u00fcvenli\u011fi sorumlulu\u011fu<\/strong> y\u00fcklemek ve ihlallerde ciddi para cezalar\u0131 uygulamak (\u00f6rne\u011fin y\u0131ll\u0131k cironun %4\u2019\u00fcne kadar).<\/p>\n<\/li>\n<\/ul>\n GDPR; a\u00e7\u0131k r\u0131za, me\u015fru menfaat, s\u00f6zle\u015fme gere\u011fi veri i\u015fleme gibi yasal dayanaklar tan\u0131mlar ve veri sorumlular\u0131na ciddi y\u00fck\u00fcml\u00fcl\u00fckler getirir.<\/p>\n KVKK (Ki\u015fisel Verilerin Korunmas\u0131 Kanunu<\/strong>), T\u00fcrkiye\u2019de 7 Nisan 2016 tarihinde y\u00fcr\u00fcrl\u00fc\u011fe girmi\u015ftir. Avrupa Birli\u011fi mevzuat\u0131na uyum amac\u0131yla haz\u0131rlanm\u0131\u015f olsa da, GDPR\u2019dan baz\u0131 noktalarda ayr\u0131l\u0131r.<\/p>\n KVKK\u2019n\u0131n temel amac\u0131:<\/p>\n Ki\u015fisel verilerin i\u015flenmesini d\u00fczenlemek,<\/p>\n<\/li>\n Bireylerin \u00f6zel hayat\u0131n\u0131n gizlili\u011fini korumak,<\/p>\n<\/li>\n Verileri i\u015fleyen ger\u00e7ek ve t\u00fczel ki\u015filere sorumluluklar y\u00fcklemek<\/strong>.<\/p>\n<\/li>\n<\/ul>\n KVKK, T\u00fcrkiye\u2019deki ger\u00e7ek veya t\u00fczel ki\u015filer i\u00e7in ge\u00e7erlidir. Ayr\u0131ca T\u00fcrkiye d\u0131\u015f\u0131nda olup T\u00fcrkiye\u2019de ya\u015fayan ki\u015filerin verilerini i\u015fleyen kurulu\u015flar da bu kanun kapsam\u0131na girebilir.<\/p>\n A\u015fa\u011f\u0131daki tablo, iki d\u00fczenleme aras\u0131ndaki temel benzerlik ve farkl\u0131l\u0131klar\u0131 a\u00e7\u0131k\u00e7a g\u00f6sterir:<\/p>\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n Ki\u015fisel verilerin korunmas\u0131 ve \u015feffafl\u0131k:<\/strong> Her iki d\u00fczenleme de veri sorumlular\u0131na, hangi verilerin i\u015flendi\u011fini ve neden i\u015flendi\u011fini a\u00e7\u0131k\u00e7a bildirme y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc getirir.<\/p>\n<\/li>\n Veri sahibinin haklar\u0131:<\/strong> Hem GDPR hem KVKK, bireylere verileri \u00fczerinde eri\u015fim, d\u00fczeltme, silme gibi haklar tan\u0131r.<\/p>\n<\/li>\n A\u00e7\u0131k r\u0131za prensibi:<\/strong> Her iki kanunda da ki\u015fisel verilerin i\u015flenmesi i\u00e7in \u00e7o\u011fu durumda a\u00e7\u0131k r\u0131za al\u0131nmas\u0131 gerekir.<\/p>\n<\/li>\n Veri g\u00fcvenli\u011fi sorumlulu\u011fu:<\/strong> Kurumlar\u0131n teknik ve idari tedbirler alarak veri ihlallerini \u00f6nleme y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc vard\u0131r.<\/p>\n<\/li>\n<\/ul>\n Ceza miktarlar\u0131:<\/strong> GDPR\u2019\u0131n para cezalar\u0131 \u00e7ok daha a\u011f\u0131rd\u0131r ve uluslararas\u0131 \u015firketler i\u00e7in b\u00fcy\u00fck risk olu\u015fturur. KVKK\u2019da cezalar daha d\u00fc\u015f\u00fck seviyededir.<\/p>\n<\/li>\n Veri i\u015fleyenin y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc:<\/strong> GDPR, veri i\u015fleyeni de do\u011frudan sorumlu tutarken KVKK\u2019da veri i\u015fleyenin sorumlulu\u011fu s\u0131n\u0131rl\u0131d\u0131r.<\/p>\n<\/li>\n DPO zorunlulu\u011fu:<\/strong> GDPR\u2019da veri koruma g\u00f6revlisi atanmas\u0131 zorunludur; KVKK\u2019da b\u00f6yle bir \u015fart yoktur.<\/p>\n<\/li>\n Veri ta\u015f\u0131nabilirli\u011fi:<\/strong> GDPR, verinin bir sistemden ba\u015fka bir sisteme ta\u015f\u0131nmas\u0131n\u0131 a\u00e7\u0131k\u00e7a d\u00fczenlerken KVKK\u2019da bu hak net tan\u0131mlanmam\u0131\u015ft\u0131r.<\/p>\n<\/li>\n \u0130hlal bildirim s\u00fcresi:<\/strong> GDPR\u2019da 72 saat s\u0131n\u0131r\u0131 vard\u0131r, KVKK\u2019da ise net bir s\u00fcre belirtilmez.<\/p>\n<\/li>\n<\/ul>\n Ki\u015fisel verileri tutmas\u0131 gereken i\u015fletmeler a\u00e7\u0131s\u0131ndan bu verilerin do\u011fru, yasal y\u00fck\u00fcml\u00fcl\u00fcklere uygun ve g\u00fcvenli bi\u00e7imde tutulabiliyor olmas\u0131 bir se\u00e7enek de\u011fil, zorunluluktur. Bu durumu ciddiye almayan ki\u015fi\/kurumlar\u0131 KVKK cezalar\u0131<\/a> bekliyor olacakt\u0131r.<\/p>\n
GDPR, yaln\u0131zca AB i\u00e7indeki \u015firketleri de\u011fil, AB vatanda\u015flar\u0131n\u0131n verilerini i\u015fleyen d\u00fcnya \u00e7ap\u0131ndaki t\u00fcm kurumlar\u0131 kapsar. \u00d6rne\u011fin T\u00fcrkiye\u2019de faaliyet g\u00f6steren bir e-ticaret sitesi, AB vatanda\u015f\u0131 bir m\u00fc\u015fterinin ki\u015fisel verilerini i\u015fliyorsa GDPR\u2019a uyumlu olmak zorundad\u0131r.<\/p>\n\n
KVKK Nedir?<\/h2>\n
\n
GPDR KVKK Kar\u015f\u0131la\u015ft\u0131rmas\u0131<\/h2>\n
\n\n
\n \nKonu Ba\u015fl\u0131\u011f\u0131<\/th>\n GDPR<\/th>\n KVKK<\/th>\n<\/tr>\n<\/thead>\n \n Kapsam<\/strong><\/td>\n AB \u00fcyesi \u00fclkelerde ya\u015fayan ki\u015filerin verilerini i\u015fleyen t\u00fcm kurulu\u015flar (k\u00fcresel etkisi vard\u0131r).<\/td>\n T\u00fcrkiye\u2019de faaliyet g\u00f6steren veya T\u00fcrkiye\u2019deki ki\u015filerin verilerini i\u015fleyen t\u00fcm kurulu\u015flar.<\/td>\n<\/tr>\n \n Y\u00fcr\u00fcrl\u00fck Tarihi<\/strong><\/td>\n 25 May\u0131s 2018<\/td>\n 7 Nisan 2016<\/td>\n<\/tr>\n \n Veri Sorumlusu Tan\u0131m\u0131<\/strong><\/td>\n Veri i\u015fleme ama\u00e7 ve ara\u00e7lar\u0131n\u0131 belirleyen ger\u00e7ek veya t\u00fczel ki\u015fi.<\/td>\n Ayn\u0131 tan\u0131m ge\u00e7erlidir.<\/td>\n<\/tr>\n \n Veri \u0130\u015fleyenin Sorumlulu\u011fu<\/strong><\/td>\n Veri i\u015fleyenler de do\u011frudan y\u00fck\u00fcml\u00fcd\u00fcr; ihlallerde sorumlu tutulabilir.<\/td>\n Veri i\u015fleyenin y\u00fck\u00fcml\u00fcl\u00fc\u011f\u00fc daha s\u0131n\u0131rl\u0131d\u0131r, temel sorumluluk veri sorumlusundad\u0131r.<\/td>\n<\/tr>\n \n A\u00e7\u0131k R\u0131za<\/strong><\/td>\n A\u00e7\u0131k ve \u00f6zg\u00fcr irade ile verilmi\u015f olmal\u0131d\u0131r; her ama\u00e7 i\u00e7in ayr\u0131 r\u0131za gerekir.<\/td>\n Benzer \u015fekilde a\u00e7\u0131k r\u0131za \u015fartt\u0131r, ancak baz\u0131 istisnalar GDPR kadar detayl\u0131 de\u011fildir.<\/td>\n<\/tr>\n \n Veri Sahibinin Haklar\u0131<\/strong><\/td>\n Eri\u015fim, d\u00fczeltme, silme (\u201cunutulma hakk\u0131\u201d), ta\u015f\u0131nabilirlik, i\u015flemeyi k\u0131s\u0131tlama, itiraz.<\/td>\n Eri\u015fim, d\u00fczeltme, silme, itiraz gibi haklar vard\u0131r; \u201cveri ta\u015f\u0131nabilirli\u011fi\u201d net \u015fekilde d\u00fczenlenmemi\u015ftir.<\/td>\n<\/tr>\n \n \u0130hlal Bildirimi<\/strong><\/td>\n Veri ihlali 72 saat i\u00e7inde yetkili otoriteye ve ilgili ki\u015filere bildirilmelidir.<\/td>\n Bildirim s\u00fcresi KVKK\u2019da net tan\u0131mlanmam\u0131\u015ft\u0131r, \u201cen k\u0131sa s\u00fcrede\u201d ifadesi kullan\u0131l\u0131r.<\/td>\n<\/tr>\n \n Para Cezalar\u0131<\/strong><\/td>\n Y\u0131ll\u0131k global cironun %4\u2019\u00fcne veya 20 milyon \u20ac\u2019ya kadar ceza uygulanabilir.<\/td>\n \u0130dari para cezas\u0131 maksimum birka\u00e7 milyon TL seviyesindedir.<\/td>\n<\/tr>\n \n Veri Koruma G\u00f6revlisi (DPO)<\/strong><\/td>\n Belirli kriterleri sa\u011flayan kurumlar i\u00e7in DPO atamak zorunludur.<\/td>\n KVKK\u2019da DPO zorunlulu\u011fu yoktur.<\/td>\n<\/tr>\n \n \u00c7apraz S\u0131n\u0131r Veri Aktar\u0131m\u0131<\/strong><\/td>\n AB d\u0131\u015f\u0131na veri aktar\u0131m\u0131 i\u00e7in yeterli koruma \u015fart\u0131 veya ek tedbirler gerekir.<\/td>\n Yurt d\u0131\u015f\u0131na veri aktar\u0131m\u0131 i\u00e7in KVKK Kurulu\u2019nun belirledi\u011fi kriterlere uygunluk gerekir; s\u00fcre\u00e7 daha kat\u0131d\u0131r ve izne ba\u011fl\u0131d\u0131r.<\/p>\n GPDR ve KVKK Benzerlikleri<\/h2>\n
\n
GPDR ve KVKK\u00a0Farkl\u0131l\u0131klar\u0131<\/h2>\n
\n
KVKK Dan\u0131\u015fmanl\u0131\u011f\u0131<\/h2>\n