When does the age limit of 15 on social media begin, and on what regulation is it based?
The legal framework created by Laws No. 7578 and No. 7590
The age threshold for social network providers in Türkiye did not arise only from the regulation dated 10 October 2026. Law No. 7578 on Amendments to the Social Services Law and Certain Other Laws was adopted on 22 April 2026 and published in Official Gazette No. 33240 of 1 May 2026. Through Article 22 of this law, amendments were made to additional Article 4 of Law No. 5651 concerning the provision of services to children, segregated service, parental control and platform obligations. The amendments of Law No. 7590 dated 24 July 2026 also brought new provisions on the implementing authority and related provisions. The date of entry into force of additional Article 4/7 of Law No. 5651 on the age prohibition is given as 1 November 2026. [2][3]
The Regulation on the Provision of Segregated Services Specific to Children by Social Network Providers and on Age Verification, published in Official Gazette No. 33396 of 10 October 2026, sets out in detail the design of the service, age verification, parental tools, objection and the transition period. Article 13 of the Regulation expressly sets 1 November 2026 as the date of entry into force. Accordingly, as of 22 October 2026, although the Regulation has been published, it has not yet entered into force. [1]
Which social network providers will the rules apply to?
Articles 2 and 4 of the Regulation cover domestic or foreign social network providers accessible from Türkiye and their users. A social network provider is a service provider that enables users to create, view or share text, images, sound, location or similar content for the purpose of social interaction. The scope is not limited to the brand name of a particular popular application. However, not every website or electronic service can automatically be treated in the same category; the function of the service and the definition in Law No. 5651 matter. [1][2]
Gaming platforms and social network providers are also not the same legal category. Since the provisions on gaming platforms are regulated separately under additional Article 5 of Law No. 5651, the rule in this article that social network services cannot be provided to those under 15 should not be generalized automatically to all digital games and internet services. [2]
Is it prohibited for children under 15 to open a social media account?
Age thresholds: under 15, 15–17 and adult users
Under Article 5/1 of the Regulation, from 1 November 2026 the social network provider may not provide services to children who have not turned 15. This prohibition requires both the refusal of new account openings and the assessment of existing accounts according to the result of age verification. A user who has exactly turned 15 is not in this first prohibited group; however, until turning 18 he or she benefits from the segregated service specific to children. [1]
| User's status | Basic consequence provided for in the Regulation |
|---|---|
| Has not yet turned 15 | Opening of a new account is refused; if an existing account is identified in age verification, it is closed after notice is given. |
| Has turned 15, has not turned 18 | Instead of closing the account, a protected/segregated service specific to children is applied. |
| Has turned 18 | The provisions on segregated child accounts do not apply on grounds of age; the general legislation and platform rules continue. |
| Existing account, age verification not completed | There is an obligation to have verification carried out by 31 March 2027; an automatic, uniform closure is not expressly provided for. |
Important distinction: In the Regulation, the definition of a child covers persons who have not turned 18, including those made adults at an earlier age (Art. 4/ç). Therefore, early majority under civil law and child protection under the Regulation must not be equated. [1]
Does parental permission lift the prohibition for those under 15?
No. Articles 5 and 6 of the Regulation do not provide an exception under which parental permission would make the provision of social network services to a child who has not turned 15 lawful. Parental control tools do not mean that the social network provider hands its own obligation over to the family. Of course, the family's guidance of the child is important; but the platform's duty not to provide service to the prohibited age group is separate and direct. [1]
Is watching social media the same as opening an account on the platform?
The Regulation specifically regulates the provision of services by the social network provider and the account/age verification processes for that service. It cannot be concluded from this provision that all news, educational content or web pages on the internet are prohibited to those under 15. How the specific platform provides service, in terms of free video viewing, access without an account and the functions of the social network service, should be assessed separately. It would not be correct to expand the scope of the rule to mean that all digital content is prohibited to all children.
How will e-Devlet age verification be carried out?
What is an age verification token and what information does it contain?
Article 7 of the Regulation provides for the use of an age verification token in determining age. The token is created through the online service of the Cybersecurity Presidency (Siber Güvenlik Başkanlığı) accessed via the e-Devlet Gateway. According to the technical flow envisaged by the Regulation, the user authenticates through e-Devlet and requests the token; then uploads the token created to the platform of the relevant social network provider. The platform first confirms that the token was created by the authorized system, and then determines the age group from the token. [1, Art. 7]
The token is not designed to carry the date of birth, the identity number, the open identity or the user name on the platform. The information it is intended to contain is whether the person has passed the 15 age threshold and, if over 15, whether he or she has passed the 18 age threshold. In this way, identity determination and the age-threshold check needed for the service are kept separate. The platform is also prohibited from using the token for any other purpose. [1]
The legal sequence of the application
- The user accesses the official age verification service defined in the Regulation.
- The user generates an age verification token from the authorized system through e-Devlet identity authentication.
- The user uploads the token to the relevant verification section of the social network provider.
- The platform verifies the source of the token and determines only the necessary age group.
- For under 15, the opening of the account is refused; for 15–17, the rules on segregated accounts apply.
This sequence explains the legal and technical process envisaged in the Regulation; it does not show that, as of 22 October 2026, all platforms have in fact opened the same screens or that the e-Devlet service has become available to all users. The user should not be asked to upload an image of his or her identity to an unknown link. The address shown in genuine platform announcements and the official service should be checked for authenticity.
Will identity information be automatically matched with the State or the platform?
The design of the token aims to let the platform understand the age threshold without seeing the user's full identity document. However, the absence of a user name in the token does not mean that the State or the platform cannot obtain any data through another legal and technical process. The processing of identity authentication records in the age verification service, the platform's own account and connection records, and the powers of judicial authorities arising from the law are different legal matters. Categorical claims such as "the State will not know under any condition who is using which account" or "the platform will never learn the user's identity" therefore cannot be derived from Article 7 of the Regulation.
The legal criterion here is whether collecting data beyond the age threshold is necessary, proportionate and based on a statutory condition for processing. The principles of purpose limitation, data minimization and lawful processing in the Personal Data Protection Law No. 6698 also continue to apply. [1][4]
How will temporary visitors not resident in Türkiye verify?
Article 7/1-d of the Regulation provides a special mechanism for users who are not resident in Türkiye and are present temporarily. Although they are exempt from the general age verification control mechanisms, on application an exceptional token is created through an online service accessible using only passport information in order to use the service in Türkiye. It therefore cannot be said that every foreign user is expected to complete the same e-Devlet authentication steps as residents of Türkiye. This exception should not be interpreted as an unlimited permission to use the service that removes the aim of protecting children. [1]
Can age verification be requested again after an account has been opened?
Yes. Under Article 6/3 of the Regulation, after the initial token verification the platform may operate single or layered methods that it determines itself while the service continues. If there is reasonable suspicion that a verified account is being used contrary to its age group, the account is suspended; to use it again, age verification with a token is required. The existence of reasonable suspicion and the proportionality of the intervention matter in the specific case. The allegation that another person's account is being used by a young child and the mistaken treatment of an adult user as suspect are not the same legal situation. [1]
Will existing social media accounts be closed? The 31 March 2027 transition process
Not all existing accounts will be closed on 1 November 2026
The Regulation does not provide for the automatic closure of all existing accounts on 1 November 2026. Under provisional Article 1, the social network provider must verify at least once by token, by 31 March 2027, accounts opened before the date of entry into force and not verified by token. This is a transition obligation separate from the verification requirement for opening a new account. The transitional provision is based not only on known child accounts but on existing accounts that have not previously been verified. [1]
What happens if verification shows a user under 15?
Provisional Article 1/1-a expressly provides that the existing accounts of children found not to have turned 15 will be closed after notice is given. The content and data of the closed account are protected by the right to object: if an application or objection has been made, data are not deleted until the process is concluded; if there is no objection, they are deleted without delay. Deletion without waiting for the result of an objection would be incompatible with the safeguard in Article 10 of the Regulation. [1]
What is the legal status of the account if verification is never carried out?
This is one of the most important interpretive problems of the regulation. The provisional article imposes verification of accounts by token as an obligation on the platform and expressly orders the closure of accounts found, as a result of age verification, to belong to users under 15. However, an automatic closure procedure that takes place on the same date in every case is not provided for existing accounts where the user has not carried out any verification despite being called upon and there is also no separate reasonable suspicion as to age.
This gap does not mean that platforms may neglect the obligation of age verification. To avoid nullifying the age prohibition by continuing to serve unverified accounts, a platform may consider gradual access limits, suspension or similar methods. However, definite consequences not found in the Regulation as to exactly which day and in what manner these steps will be applied must not be invented. The objection mechanism in Article 10 remains valid against erroneous action and wrong age determination. [1]
What happens to photographs, messages and posts in a closed account?
While the Regulation provides for deletion of the data of closed accounts, it also regulates protection during the objection period. Whether the content will first be exported in an accessible form, which secure channel the user will use, or the backup facility of a particular platform depends separately on the platform's practice. The Regulation does not guarantee every user the same technical transfer tool or unlimited retention for every category of data. It is useful for the family to review in advance the lawful backup options and the platform's notices; the transfer of the child's data to unauthorized persons must be prevented.
What rules will apply to social media accounts in the 15–17 age group?
Accounts will be private; a public account option cannot be offered
Under Article 8/5-b of the Regulation, the accounts of children who have turned 15 but not 18 will be provided with a high level of privacy. These accounts will be private by default and the option of being public cannot be offered. It is not enough that the private option is ticked only when the account is first opened; the possibility of the user later switching it to public mode is also incompatible with the prohibition in the Regulation. [1]
Follower and following lists will be hidden
Information on the followers of children in this age group and the accounts they follow must not be shown to accounts other than the account-holder child. This provision aims to limit the mapping of the child's online social circle through the profile. However, hiding the list does not automatically protect the information the child discloses in his or her own posts or on other channels. [1]
The persons who can send private messages will be restricted
Only accounts followed by the child can send messages to the child's account; the read receipt cannot be shown in messages. This is a design limitation aimed at reducing unwanted contact and the pressure to reply immediately. Even so, it does not by itself eliminate the possibility of misuse of an account followed by the child. The platform's blocking, reporting, safety and content moderation mechanisms are also important. [1]
Phone contacts matching and account suggestions will be restricted
The social network provider cannot synchronize the child's account with the contacts on the device, the email address book or friend or follow lists in other applications; it cannot process the contact data of the third persons concerned for this purpose. Article 8/5-d of the Regulation sets aside, as an express exception, the processing of only the parent's contact information for account creation, verification, recovery, security and parental control. The deletion of matching and suggestion records obtained in breach of the prohibition is provided for. The child's account cannot be suggested to other accounts as a follow suggestion, nor can other accounts be suggested to the child account. [1]
Protection concerning going live and screenshots
Article 8/5-g of the Regulation prohibits the live broadcast feature in child accounts. Sub-paragraph (f) of the same paragraph requires the necessary technical measures to be taken to prevent third persons from taking screenshots of the child's profile photograph, account, posts and images. It cannot be concluded from the technical-measures obligation that photographing the screen with another device, or every method of copying, becomes physically completely impossible. The obligation is to design and implement the security measures that the system can provide. [1]
Infinite scroll, algorithmic recommendation and the ban on personalized advertising
Sequential visual feeds and addiction-fostering design
Article 8/5-a of the Regulation prohibits offering services that may have an addiction-fostering effect on a child account. Sub-paragraph (ğ) more concretely covers interfaces, designs and functions that enable visual content to be presented by scrolling, tapping, clicking or automatically in sequence. The provision applies to applications, websites and all other interfaces. It would therefore not be correct to limit the prohibition to turning off an "autoplay" button or to the phone application alone. [1]
The implementation question is which content feeds fall within this provision and how all the interactions that present visual content will be distinguished. Article 8/7 and Article 12 of the Regulation give the Cybersecurity Presidency the power to determine the implementation procedures and principles. Guidance or technical explanations that may be published on this in future should not be presented as being in force before they are published. [1]
Personalization and advertising according to the child's behavior
Under Article 8/5-h of the Regulation, child accounts cannot be customized according to the child's behavior; personal data cannot be the subject of profiling or personalized commercial advertising activities. The conclusion should not be drawn that all forms of advertising are prohibited without exception. The limit relates to the specified targeting and profiling methods built on the child's behavior and personal data. [1]
Protective filtering needed to reduce harmful content and commercially motivated behavioral targeting are not the same thing. While Article 8/4 of the Regulation provides for protective filtering and recommendation system settings, Article 8/5-h prohibits behavior-based customization. The platform's technical solution must not turn into prohibited profiling while carrying out filtering that serves the protective purpose. This distinction makes auditable algorithm explanations important in practice.
What rights will parental control provide, and what responsibilities will it not remove?
Screen time, paid transactions, location and account settings
Article 9 of the Regulation lists the minimum functions of parental control tools: management of account and feature settings; making transactions such as purchases, rentals and paid memberships subject to parental permission or approval, and a spending limit; monitoring and limiting usage time; and control over location sharing. The tools must be in Turkish, clear and accessible, easy to find and operate across different devices. When enabled, the child is notified; protection is provided against removal of the control without the parent's knowledge and security verification. [1]
Parental approval does not remove the platform's obligation
Article 9/1 of the Regulation establishes this distinction expressly: providing parental tools does not remove the platform's obligation to provide segregated service. Because a parent can limit screen time, providing a public-account option to a 16-year-old user or applying behavioral commercial advertising to such a user does not become lawful. Similarly, parental permission is not an exception provided for in the prohibition on providing social network services to those under 15. [1]
The child's privacy and evolving autonomy
Parental control does not mean unlimited surveillance. Article 9/4-e of the Regulation requires that the control tools not disproportionately eliminate the child's privacy and that they be based on communication, learning and empowerment rather than on surveillance. Articles 3, 12, 13, 16 and 17 of the Convention on the Rights of the Child also offer a framework suited to considering together the child's best interests, the consideration of the child's views, freedom of expression and access to information, and privacy. The balance between protection and autonomy should not turn the child into a user with no say. [1][5]
What should be done if an account is closed by mistake or age verification is refused?
The right to object in Turkish, free of charge and accessible
Article 10 of the Regulation orders the establishment of an application/objection mechanism that is in Turkish, free of charge and accessible against actions concerning the result of age verification, the suspension or closure of an account and protective measures. A user affected by the action may object. The application cannot be concluded by fully automated systems; meaningful human review must be carried out. [1]
Can data be deleted during the objection?
No. Under Article 10/4 of the Regulation, until the application or objection is concluded, the content and personal data of the account are not deleted. This is an important safeguard that separates temporary restriction of access from irreversible destruction of data. For accounts under 15 where no objection is made, the rule of deletion without delay under the provisional article applies separately. [1]
Platform application, complaint to the Presidency and judicial remedy
When notifying the result of the application/objection, the platform must explain that the user may complain to the Cybersecurity Presidency and may apply to the courts. These are not all the same application. While the correction process within the platform primarily aims at reexamining the account's age determination, in allegations of a personal data breach, application to the data controller and the relevant complaint procedures under Law No. 6698 may also come into play. In the specific case, the legal nature of the decision, the addressee and the application periods are determined according to the relevant route. The existence of Article 10 of the Regulation does not automatically suspend the application periods in all other laws. [1][4]
What information should an effective objection contain?
The application should clearly include the following without unnecessarily disclosing personal data:
- The action or application number given by the platform for the account and the date of the notice.
- The type of action: age determination, suspension, closure or restriction of a protective feature.
- The concrete ground of the error: an explanation directly connected to the action, such as the correct age group, rejection of the token, or the account-holder being treated as a different person.
- An express request for renewed human review, for notification of the reasons for the action and, if lawful, for reopening of the account.
- A request that the account content and personal data be preserved until the review is completed.
If an official document or screenshot has to be sent, only the platform's verified, secure channel should be used; the personal data of third persons should not be unnecessarily attached to the application.
Sanction and supervision obligations of social network providers
Supervision will not consist only of account opening
The obligations of a platform that verifies the age token do not end. The privacy settings, messaging, recommendation system, advertising and the actual operation of parental tools in the segregated service are continuing obligations. Under Article 8/6 of the Regulation, these measures are published on the social network provider's own website. In addition, under Article 10/6, the numbers of applications and objections, the acceptance rates and the average time to conclusion are reported annually to the Presidency and published on the internet. Putting a policy text on a website does not by itself prove that the relevant measure is actually applied on the user's account. [1]
On what legal conditions do fines, advertising bans and bandwidth throttling depend?
Article 11 of the Regulation refers to additional Article 4 of Law No. 5651 for sanctions for breaches of obligations. Before sanction, notification of the breach to the platform and, depending on its nature, the granting of a reasonable period are provided for. In determining the sanction, the seriousness and duration of the breach, the number of children affected and good-faith compliance efforts will be taken into account. [1]
Under additional Article 4/24 of Law No. 5651, social network providers that breach the obligations concerned may be given an administrative fine of up to three percent of the global turnover of the previous calendar year. The same provision regulates, under certain conditions, an advertising ban for a breach continuing after the administrative fine, and a mechanism of gradual bandwidth throttling by court order. These do not mean that every breach will be punished automatically and by the same amount. The stages, notice and time conditions in the law, the competent authority and judicial review must be assessed separately. [2]
The different roles of the Cybersecurity Presidency and personal data supervision
Implementation of the Regulation has been entrusted to the Cybersecurity Presidency. On the other hand, the processing of child users' data is not independent of the obligations under the Personal Data Protection Law. The Personal Data Protection Board has publicly announced that it has initiated an ex officio investigation into certain platforms concerning the processing of children's personal data on social media platforms and the measures taken. This announcement does not lead to the conclusion that a decision finding a breach has been given about every platform; an investigation and a final administrative decision are different. [4][6]
Legal assessment in terms of children's personal data and fundamental rights
Child safety does not require unlimited collection of personal data
While age verification aims at protecting children, it is a new data processing activity. Lawfulness is not achieved merely by saying "an age check is being carried out". What data the platform processes for what purpose, which records it accesses and for how long, sharing with third persons, security and deletion must be reviewed. The Regulation's design of the token so as to show only the age thresholds is a conscious choice in terms of data minimization; in practice, it does not automatically legitimize all additional data processing. [1][4]
Proportionality of the protective measure and the risk of wrongly closing accounts
A wrong age determination can cut a person's relationship with communication and access to information; if the child's educational, social and creative content remains on the account, a loss of rights may arise. The human review and data-retention rules in Article 10 should therefore not be seen as merely a formal right to object. It matters that the objection is easy to find, that reasons are explained and that the error can be corrected. Since the Regulation does not specify a fixed decision period for each objection, a specific promise of "conclusion within three days" should not be added to the text. [1]
Not only prohibiting, but ensuring safe participation
The Convention on the Rights of the Child gives importance to hearing the child's views, privacy and access to information as well as the child's best interests. Although the Regulation expressly provides a service prohibition for those under 15, for ages 15–17 the aim is not to eliminate all digital participation but an age-appropriate and safer service design. The lasting effect of the regulation will depend on the functioning of design, advertising, data processing and objection controls as much as on the age verification step in the real world. [1][5]
A practical guide for families and platforms
Preparations families can make
- Review together the accounts the child uses and determine the real age group; do not try to correct a wrong date of birth with a new false declaration.
- Distinguish what the dates 1 November 2026 and 31 March 2027 mean; do not assume that all accounts will be closed on 1 November.
- For age verification, use only e-Devlet and the verified official referrals of the platform; do not share identity documents and passwords with third parties.
- If the child is 15–17, check that the privacy, messages, follower lists, live broadcast and advertising settings comply with the new rules.
- Use parental control by explaining it to the child; set shared rules on screen time, paid transactions and location sharing.
- If there is an age verification or account closure error, keep the transaction number; exercise the free right to object and ask that the data not be deleted while the review is pending.
Minimum compliance headings for social network providers
A platform's legal compliance work should not consist of a single age verification screen. At the institutional level, at least the following areas must be assessed in connection with one another: correct determination of users' age group; verification resistant to manipulation; privacy and messaging limits in child accounts; the ban on phone-book/suggestion matching; restrictions on personalization, advertising and visual feeds; parental controls; objection open to human review; data protection and deletion schedule; and an annual transparency report. [1][2]
| Implementation issue | Point to note legally |
|---|---|
| New account application by a 14-year-old child | If age verification after 1 November 2026 shows under 15, the request is refused. |
| Public account of a 16-year-old child | The option of being public must not be offered for a 15–17 account. |
| A 16-year-old child going live | The live broadcast feature must not exist in a child account. |
| Behavioral advertising targeted at a 15–17 user | Child data cannot be used for profiling and personalized commercial advertising. |
| Account closure although the age information is correct | Free Turkish objection, meaningful human review and data protection during the objection can be requested. |
| Existing account not verified by 31 March 2027 | The platform's verification obligation is clear; there is no express provision for automatic account deletion in every case. |
Conclusion
At the center of the new social media regulation is not only the age limit of 15 but also how child accounts are designed and by what procedure they are managed. While the rules starting on 1 November 2026 prohibit providing social network services to those under 15, they establish for ages 15–17 a broad protection regime ranging from privacy to advertising and from messaging to screen feeds. The verification requirement of 31 March 2027 for existing accounts should not be interpreted to mean that every account that does not verify its age will definitely be deleted on that day. The objection based on human review and the data-protection safeguards against erroneous age determination or closure are an integral part of the regulation.
For families, the basic need is secure verification and communication with the child; for platforms, it is measurable and auditable legal compliance that makes the child's best interests concrete at every stage of design. The protection of children online must be achieved without eliminating their privacy and their voice.
Frequently Asked Questions
When will the age limit of 15 on social media begin?
The Regulation and the relevant age limit provisions will enter into force on 1 November 2026. The deadline for age verification of existing accounts is set as 31 March 2027. [1][2]
Will my 14-year-old child be able to open a social media account?
From the entry into force of the Regulation, no. The social network provider cannot provide service to a user under 15 and refuses the new account application if this age is identified in age verification. [1]
Will the account of a child who turns 15 be closed?
Closure is not provided for merely because the child is in the 15–17 age group. The account is moved to the segregated service specific to children; limits on private profile, messaging, recommendations, live broadcasts and advertising apply. [1]
Will everyone under 18 be banned from social media?
No. There is a service prohibition for those under 15. Users who have turned 15 and not turned 18 are subject to the protected service specific to children. [1]
Will all existing accounts be closed on 1 November 2026?
No. The Regulation provides that existing unverified accounts will be verified by 31 March 2027 at the latest; it does not say that all accounts will be closed at once on the date of entry into force. [1]
If age is not verified by 31 March 2027, is the account definitely deleted?
An automatic, uniform account deletion is not expressly provided for in this case. The closure of an existing account whose age is verified and found to be under 15 is expressly provided for. The platforms' verification obligation continues separately. [1]
In e-Devlet age verification, will my Republic of Türkiye identity number be given to the platform?
The age verification token in the Regulation is designed to show limited information on the 15 and 18 age thresholds and not to contain data such as the identity number or the user name on the platform. The platform's other legal data processing is assessed separately. [1]
How will foreign tourists carry out Turkish e-Devlet authentication?
For users who are not resident in Türkiye and are temporarily present, Article 7/1-d provides an exceptional token mechanism using passport information. The general method is not applied unchanged to all temporary visitors. [1]
Can my 16-year-old child make the account public?
No. The segregated child account is provided to be private; offering a public account option is prohibited. [1]
Will there be live broadcasts and infinite scroll in child accounts?
The Regulation prohibits going live in child accounts and interfaces that enable visual content to be presented in sequence in the specified ways. The Presidency has the power to issue guidance and procedures on implementation details. [1]
Have all advertisements to children on social media been banned?
The Regulation prohibits the use of the child's personal data for profiling and personalized commercial advertising. This provision cannot be extended to mean that all types of advertising are prohibited unconditionally. [1]
Does parental permission give a child under 15 the right to open an account?
No. Parental permission is not provided for in the Regulation as an exception to the prohibition on providing service to those under 15. Parental control serves to manage safety particularly in the child accounts that are permitted. [1]
Can I object if an account is closed by mistake?
Yes. A free, Turkish application/objection mechanism must be established, the application must be subject to meaningful human review, and data must not be deleted until it is concluded. [1]
Where can I apply if the objection is rejected?
The platform's notice of result must indicate a complaint to the Cybersecurity Presidency and the judicial remedy. If there is a separate complaint relating to the processing of personal data, the special application procedures in Law No. 6698 may also be considered. [1][4]
Does the same age prohibition of 15 apply to gaming platforms?
The age limit of 15 for social network providers and the provisions of additional Article 5 of Law No. 5651 on gaming platforms are not the same regulation. It cannot be said that the social network age prohibition applies automatically to all games without determining the nature of the specific service. [2]
Sources
1 — Regulation on the Provision of Segregated Services Specific to Children by Social Network Providers and on Age Verification, Official Gazette, 10.10.2026, No. 33396, Arts. 1–14 and provisional Art. 1. Official Gazette text | Full text on the official site of the Ministry of National Education.
2 — Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed by Means of Such Publications, additional Arts. 4/7, 20, 24–25; additional Art. 5. Current text and records of entry into force.
3 — Law No. 7578 on Amendments to the Social Services Law and Certain Other Laws, adopted 22.04.2026; Official Gazette 01.05.2026, No. 33240, in particular Art. 22. TBMM Law Information; Law No. 7590, amendments of 24.07.2026, in particular Art. 27 (provisions on Law No. 5651).
4 — Personal Data Protection Law No. 6698, Arts. 4, 5, 11, 13 and 14. KVKK Legislation.
5 — United Nations Convention on the Rights of the Child, in particular Arts. 3, 12, 13, 16 and 17. UNICEF Türkiye, full text of the Convention.
6 — Personal Data Protection Authority, “Public Announcement on the Protection of Children's Personal Data in Their Use of Social Media” (Çocukların Sosyal Medya Kullanımında Kişisel Verilerinin Korunmasına İlişkin Kamuoyu Duyurusu), statement on the ex officio investigation concerning social media platforms. Authority announcement.