The bill aimed at expanding the Cybersecurity Presidency’s remit, the scope of which we discussed in our publication dated 7 July 2026, was adopted by the General Assembly of the Grand National Assembly of Türkiye on 24 July 2026 and enacted as Law No. 7590 Amending Certain Laws and Decree-Laws (the “Law”). The Law expands the Cybersecurity Presidency’s (the “Presidency”) powers in relation to internet domain names, the management of internet infrastructure and electronic communications.
Under the Law, certain duties and powers currently exercised primarily by the Information and Communication Technologies Authority (“ICTA”) will be transferred to the Presidency. The Presidency will also be authorised to directly order measures in cases where any delay may be prejudicial.
The Law has not yet been published in the Official Gazette and its publication is pending.
Authority relating to Internet Infrastructure and Electronic Communications Will Be Transferred to the Presidency
- Under the provision to be added to the Electronic Communications Law No. 5809, the Presidency will be authorised to determine strategies and policies relating to internet domain names and to issue regulations in this area.
- Where one or more of the grounds set out under Article 22 of the Constitution, which governs the freedom of communication, are present and any delay may be prejudicial, the Presidency will be authorised to determine the necessary measures either at the request of security and intelligence authorities or ex officio.
- Decisions issued by the Presidency will be notified immediately to operators, access providers, data centres and the relevant content and hosting providers. Such decisions must be implemented immediately and, in any event, within two hours of notification.
- The Law also provides for certain technical and regulatory powers relating to internet domain names, the management of internet infrastructure, and the detection and analysis of communications to be consolidated under the Presidency.
Urgent Measures, Judicial Review and Administrative Sanctions
Decisions issued by the Presidency in cases where any delay may be prejudicial must be submitted to a criminal judgeship of peace for approval within 24 hours. If the judge does not issue a decision within 48 hours, the relevant measure will automatically cease to have effect.
The Presidency will be authorised to impose administrative fines ranging from TRY 20,000 to TRY 100,000 for each act constituting a breach on persons and entities that fail to comply with their obligations under the Electronic Communications Law. Administrative fines and other administrative sanctions imposed by the
Administrative fines and other administrative sanctions imposed by the Presidency may be challenged before the competent administrative court.
The IT infrastructure and systems, data centres, records and documents, as well as any other assets, rights, receivables, liabilities and obligations used in connection with the duties and powers transferred to the Presidency, will be transferred to the Presidency within three months of the Law’s entry into force.
Existing secondary legislation will continue to apply until the Presidency issues new secondary legislation. Certain references in the existing secondary legislation to ICTA and the Telecommunications Communication Presidency will be deemed to refer to the Presidency.
