Law No. 7578 — what it actually says
Practical orientation for foreign legal teams. This is a summary, not legal advice. For binding interpretation, consult Turkish counsel.
- 22 Apr 2026Parliament accepted
- 1 May 2026Resmi Gazete published
- 31 Jul 2026Law No. 7590 moves oversight to the Cyber Security Presidency
- PendingSecondary regulation — not yet published
- TodayOctober 26, 2026
- 1 Nov 2026Law effective
Status
Law No. 7578 was accepted by the Turkish Parliament on 22 April 2026 and published in the Resmi Gazete (Official Gazette) No. 33240 on 1 May 2026. The law becomes effective approximately six months after publication — around 1 November 2026.
Who is in scope
Foreign-source game platforms whose daily access from Türkiye exceeds 100,000. This includes game stores, launchers, mobile publishers, cloud-gaming services, and UGC environments operating from outside Türkiye and reaching Turkish users at scale.
What is required
Three obligations. First, appoint a real-person or legal-person representative in Türkiye. Second, notify the Cyber Security Presidency (Siber Güvenlik Başkanlığı) of the representative's details. This role sat with BTK until Law No. 7590, published on 31 July 2026, transferred it to the Presidency. Third, publish the representative's contact details conspicuously on the platform's own website or app.
What the representative does
Receives and handles notices, notifications, and requests from the Cyber Security Presidency, the Access Providers Union (Erişim Sağlayıcıları Birliği), judicial authorities, and administrative authorities. Coordinates compliance with the law's other obligations including age-rating, parental controls, and child-safety requirements.
Sanctions ladder
After a notice from the Cyber Security Presidency, a 30-day cure window. If unresolved: administrative fine of TRY 1M–10M. If still unresolved 30 days later: TRY 10M–30M. If still unresolved 30 days after that: the Presidency applies to a criminal peace judgeship for 30% bandwidth throttling. If still unresolved another 30 days later: throttling of up to 50%. Access providers must implement the order within 4 hours.
Open questions
The secondary regulation, to be issued by the Cyber Security Presidency, will specify the filing form, document package, counting methodology for 'daily access from Türkiye,' and qualifications for the representative. PlatRep tracks the consultation process and will publish a comprehensive Implementation Guide once the secondary regulation is finalized.