Turkey
Turkey has a draft AI framework law before parliament, an opposition member's bill filed in June 2024 and modeled loosely on the EU's risk-based approach, and it remains in committee. A bill from MHP deputies (2/3358), filed in November 2025 to set rules for AI systems by amending several laws, is also in committee, along with narrower AI bills. A parliamentary research commission on AI reported in March 2026, recommending a framework law and a national AI authority. A Presidential circular of August 2026 adopted the Türkiye AI Action Plan for 2026 to 2030; the government has not tabled a bill. Binding exposure today comes from the KVKK data protection regime, which the authority has applied to AI processing, and from the new Cybersecurity Law in force since March 19, 2025.
Key points
- An opposition AI bill introduced in 2024 remains pending, as do an MHP bill on AI systems (2/3358, November 2025) and narrower AI bills; timing is uncertain.
- KVKK, Turkey's data protection law, applies to AI systems processing personal data, with authority guidance.
- The Cybersecurity Law entered into force on March 19, 2025 and reaches AI systems in critical infrastructure.
- The Grand National Assembly's AI research commission published its report (no. 260) in March 2026, recommending a framework law and a national AI authority, either a new body or the Cybersecurity Directorate. No government bill has followed.
- Presidential Circular 2026/9, published in the Official Gazette on August 18, 2026, adopted the Türkiye AI Action Plan 2026 to 2030, coordinated by the Ministry of Industry and Technology; it replaces the 2021 to 2025 strategy, directs public bodies to carry out assigned tasks, and creates no duties for companies.
Laws and instruments
Draft AI framework law
Pending framework legislation drawing on the EU's risk-based structure. Not law; monitor for committee movement.
Bill on AI systems amending several laws (MHP)
A bill from MHP deputies, with Halil Öztürk as first signatory, that would set rules for AI systems by amending several existing laws. It was referred on November 10, 2025 to the industry and technology committee, with the justice and digital media committees as secondary committees. Not law.
Türkiye AI Action Plan 2026 to 2030
A policy instrument without statutory force. The circular adopts the national AI action plan for 2026 to 2030, replacing the 2021 to 2025 strategy, places coordination with the Ministry of Industry and Technology, sets out the plan's four principles, and directs public institutions to carry out the tasks assigned to them. It names no AI authority and creates no obligations for private companies.
Cybersecurity Law
Turkey's cybersecurity statute, in force since March 19, 2025, with obligations relevant to AI systems in critical national infrastructure.
Timeline
- June 24, 2024Opposition deputy files AI bill 2/2234; it goes to committee the next day.
- March 19, 2025Cybersecurity Law in force.
- November 7, 2025MHP deputies file bill 2/3358 setting rules for AI systems; it goes to committee on November 10.
- March 2026The parliamentary AI research commission reports, recommending a framework law and a national AI authority.
- August 18, 2026Presidential Circular 2026/9 adopts the Türkiye AI Action Plan 2026 to 2030.
- October 2026Bills 2/2234 and 2/3358 remain in committee; no AI-specific law has passed as of October 2026.
Who it applies to
AI systems processing personal data of people in Turkey fall under KVKK now; critical-infrastructure AI faces the Cybersecurity Law. AI-specific duties await the pending framework.
Penalties
KVKK administrative fines and cybersecurity sanctions apply. No AI-specific penalties yet.
Common questions
Does Turkey have a comprehensive AI law?
What are the penalties for AI violations in Turkey?
Who does AI regulation in Turkey apply to?
Artificial Intelligence Regulations, "AI Regulation in Turkey," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/turkey.html.
Entries state the position as of the review date and link to the primary text for verification.