The Information and Communication Technologies Authority’s (BTK) critical powers over digital platforms have been transferred to the Cybersecurity Directorate (SGB). The most widely discussed provision of the new regulation concerns access blocking and content removal procedures. Under the previous system, a court order and a four-hour implementation window were required; under the new law, the process has been significantly sped up.
Courts and judicial matters
- Action without prior court order: At the request of the Cybersecurity Directorate, content can now be removed without a preceding court decision.
- Two-hour deadline: Content providers will be required to comply with a takedown request within two hours at the latest.
- Retroactive judicial approval: The decision must be submitted for approval to a criminal judge of peace within 24 hours. If the judge does not approve it within 48 hours, the decision will automatically lapse.
- Penalties ahead: Those who fail to comply will face administrative fines ranging from 20,000 to 100,000 TL per violation.
Social networks and gaming platforms now under the Cybersecurity Directorate
Oversight authority over major social media platforms and online gaming services with millions of daily users in Turkey has also been transferred to the Cybersecurity Directorate. Sanctions, access restrictions, and local-representative requirements imposed on major platforms — on grounds such as national security, public order, the right to life, and public health protection — will now be directly overseen by the new institution.
A new era for lawful interception and bandwidth throttling
- Lawful interception infrastructure transferred: Responsibility for providing the technical infrastructure needed for court-ordered wiretaps carried out by institutions such as the National Intelligence Organization (MİT) and the police has been moved from BTK to the Cybersecurity Directorate.
- Legal change to bandwidth throttling: The provision on bandwidth throttling under Law No. 5809 has been repealed. Under the new structure, the Cybersecurity Directorate will be able to issue restriction orders either on its own initiative or at the request of security and intelligence agencies.
Three-month transition period begins
All physical and digital assets, systems, and financial obligations BTK used to carry out the powers now transferred to the Cybersecurity Directorate are to be fully handed over to the new institution within three months.
