KVKK
Law No. 6698 on the Protection of Personal Data (KVKK)
S3M supports the data security duties of KVKK with technical controls. Article 12 asks for measures against unlawful access to personal data: ConnGuard NAC and EndGuard limit which users and devices reach those systems, SpotGate identifies and records guest Wi-Fi users, and SAMI keeps audit-ready records for internal audits.
How S3M supports KVKK
Applies to: Data controllers and processors that process personal data in Türkiye. Read the official text
| Article / control | What it asks | How S3M supports it | Products |
|---|---|---|---|
| Art. 12(1) | Take every necessary technical and administrative measure to prevent unlawful processing of and unlawful access to personal data, and to keep it safe. | ConnGuard NAC admits users and devices to the network by identity and role, so systems that hold personal data are reachable only by those allowed. EndGuard keeps checking the device during the session. | |
| Art. 12(3) | Run or commission audits inside the organization to check that the law is applied. | SAMI answers questions about network access from telemetry, with the source shown, and SpotGate keeps guest session records, which provide evidence for these audits. | |
| KVKK Guide §3.1 | Limit access to what each role needs, for example with an access authorization and control matrix. | ConnGuard NAC and CityGate enforce the role-based network access you define in policy. | |
| KVKK Guide §3.2 | Keep regular records of user activity, know what runs on the network and detect unexpected activity. | SpotGate stores guest sessions with their identity, SAMI keeps audit-ready records, and ConnGuard NAC sees every device that connects. | |
| KVKK Guide §3.3 | Restrict or separate access between network components, and secure employees’ personal devices that join the network. | CityGate segments without VLANs, SpotGate keeps guests apart, and ConnGuard NAC admits personal devices by identity and posture. |
S3M supports these requirements with technical controls. This is not legal advice or a certification; confirm legal questions with your counsel.
Checked against the official text on .
Frequently asked questions
Which KVKK guide does this page follow?
The Personal Data Security Guide (Technical and Administrative Measures) published by the KVKK Authority in April 2025. Section numbers in the table refer to that edition.
Does S3M handle KVKK breach notifications?
No. Article 12(5) asks you to notify the person concerned and the Board when data is obtained unlawfully. S3M records can help you establish what happened; the notification stays with your organization.
Does SpotGate help with guest Wi-Fi under KVKK?
Yes. SpotGate identifies each guest by SMS, OAuth, voucher or sponsor, keeps guest traffic apart from the corporate network and stores guest sessions for audits.
Last updated