KVKK Standard Contract 1 (controller to controller): no changes allowed, governed by Turkish law and Turkish courts (Personal Data Protection Board, Standard Contract 1 for the Transfer of Personal Data Abroad (from controller to controller), Clauses 2(a), 16 and 17(a) (English version published by KVKK))
A licence from a Turkish holder to a US buyer that uses the standard contract must be on the Board's text unchanged, governed by Turkish law, with disputes in Turkish courts and data subjects able to enforce it as third-party beneficiaries. Many US buyers will not accept that, which makes the consent route (for an occasional transfer) the usual alternative.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“This Contract sets out appropriate safeguards for the transfer of personal data abroad, including enforceable data subject rights and effective legal remedies in the country receiving the transfer as well, in accordance with Article 9(4) of the Law, and the By-Law, provided that no additions, deletions, or modifications are made. ... Clause 16- Governing Law This Contract shall be governed by Turkish law. Clause 17- Competent Court (a) Any dispute arising from this Contract shall be resolved by Turkish courts.”
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide