Use of Generative Artificial Intelligence Tools in Workplaces

The Turkish Personal Data Protection Authority published a guideline on 5 March 2026 titled “Use of Generative Artificial Intelligence Tools in Workplace” (“Guideline”). The Guideline provides a general framework for the use of publicly accessible generative AI tools offered by third-party providers within workplace environments and highlights the potential legal, technical, and organizational risks that may arise from their uncontrolled use, particularly in relation to personal data protection, data security, intellectual property, and institutional governance.

The Guideline emphasizes that rather than adopting a blanket prohibition, organizations should implement a risk-based and controlled approach to the use of such tools, including the establishment of internal policies, clear rules on the types of data that may be shared with AI systems, human oversight over AI-generated outputs, and employee awareness measures.

You may access our note on the Guideline here.