GDPR checklist: outsourcing customer service to Türkiye

There is no EU adequacy decision for Türkiye. Our one-page checklist shows which contracts, technical measures and evidence you should ask a provider for.

• Data processing agreement, standard contractual clauses and transfer impact assessment
• Technical and organisational measures – including remote work
• Operations: data minimisation, incident reporting, deletion concept
• Evidence: ISO 27001 (check the scope!), TOMs, KVKK