On the ratification of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Convention No 108) on 18 February 2016, the Turkish Grand National Assembly passed the Data Protection Law No. 6698 (the DP Law) on 24 March 2016, which was published in the Official Gazette No. 29677 and entered into force on 7 April 2016. The DP Law sets out some key definitions like personal data, data processing, explicit consent, data controller and data processor which have been debated for some time and it also frames the principles for processing personal data and the obligations of the data controller. Familiarity with the DP Law is therefore of great importance for all individuals and companies who processes personal data in Turkey. The implementation of the DP Law will be subject to the principles held under Article 20 of the Turkish Constitution (the right to privacy) and the Convention No 108.