With the Data & Cybersecurity Desk, scalable data-compliance architecture.
An integrated legal framework for Data protection, cyber incident response, and international data transfer.
Subject-focused, multi-jurisdictional and actionable advice
The Data & Cybersecurity Desk addresses the legal requirements in a given area together with operational process, technology, contract, and risk management.
Our working model brings regulatory compliance, contract architecture, crisis preparedness, and cross-border coordination together into a single work plan.
Services Offered by the Desk
Actionable and coordinated advice at every stage of cross-border work.
Building the Compliance Architecture
We turn policy, contract, process, and the responsibility matrix into an actionable work plan.
Explore →Risk Analysis
By prioritising regulatory, contractual and operational risks, we make them ready for decision-making.
Explore →Contracts & Documentation
We update supplier, customer, technology, and service contracts in line with the relevant obligations.
Explore →Multi-Jurisdictional Coordination
We address obligations in multiple countries in a coordinated manner under a single project management.
Explore →Crisis & Incident Response
In the event of a breach, audit or commercial crisis, we provide rapid legal assessment and action support.
Explore →Training & Implementation
To implement the prepared programme within the company, we provide management and team training and simplify the documentation.
Explore →Related Focus Areas
Data & Cybersecurity Desk brings several strategic focus areas together under one roof.
Data
From KVKK/GDPR compliance to data governance, from the EU Data Act and cross-border transfers to data contracts, licensing, and breach response; every legal layer of data in a single focus.
Explore the focus area →Cybersecurity
Legal support for cyber incident response, data breach notification, technical supplier contracts, information security policies, and KVKK/GDPR compliance.
Explore →ESG & Sustainability
End-to-end advisory for Turkish and DACH companies on supply chain due diligence, LkSG/CSDDD, sustainability reporting, and ESG compliance.
Explore →Related Practice Areas
Data & Cybersecurity Desk works with the firm’s relevant legal disciplines on cross-border matters.
Sectors We Serve
A selection of sectors this desk works with most often.
Technology
Legal advisory on licensing, SaaS, data, intellectual property, investment, scaling, compliance, and product law for technology companies.
Explore →Banking & Finance
Advisory services in banking, fintech, payments, lending, collateral, investment, regulation and financial dispute processes.
Explore →Healthcare
Regulatory, data, contract, investment and dispute advisory for healthcare services, medical products and the pharmaceutical ecosystem.
Explore →Selected Matters
A selection of representative matters handled by this desk. Client names are anonymised for confidentiality.
Building a single compliance programme for KVKK and GDPR
Establishing the data inventory, document set, transfer mechanisms and breach plan of a group selling in two markets within a single programme.
Data breach response and notification management
Managing detection, legal assessment, authority notifications, and communications from a single plan when a system breach is suspected.
Corporate generative-AI policy and tool contracts
A policy setting data boundaries, confidentiality, and copyright rules for employees' use of generative AI; negotiation of the tool contracts accordingly.
Negotiating an AI procurement contract with its data clauses
Negotiation of performance, data-use, IP and liability clauses in a model-API procurement, together with the KVKK/GDPR layer.
A single point of contact, a multidisciplinary team
Our desk structure combines market- or subject-specific experience with all of our firm's practice areas. This way, you move forward with a single centre of strategy and responsibility, without getting lost among separate advisors.
- A core team dedicated to the market or subject
- The ability to work in Turkish, English and German
- A model integrated with practice areas and sector teams
- A single view across contract, compliance and dispute work
- Coordination with local and international partner firms when needed
Desk Team
Meet the multilingual core team working on this desk.
Portrait 4:5Mehmet Köksal
Founder and Managing PartnerIstanbul · Berlin · KyreniaProfile →
Portrait 4:5Kübra Köksal-Yılmaz
PartnerBerlin · İstanbulProfile →
Portrait 4:5Sven Köksal
Legal EngineerBerlin · İstanbulProfile →
Portrait 4:5Gökçe Yıldırım
Of CounselİstanbulProfile →Related Publications
Data & Cybersecurity Desk — related insights and guides.
Data ProtectionCookie banner and information notice: KVKK/GDPR dual compliance in e-commerce
Read more →Data ProtectionGDPR compliance in e-commerce: a roadmap for Turkish stores selling to the EU
Read more →Data ProtectionEU AI Act compliance timeline: a roadmap for your company
Read more →In matters that have an investment, trade, contract, compliance, or dispute dimension in the relevant market or subject, the desk team coordinates the file through a single point of contact.
We designate the file's main point of contact and connect the relevant desks and practice-area teams to the same work plan. On the client side, communication runs through a single channel.
No. The desk structure is a team-formation model focused on the relevant market or subject. The scope of services is determined according to the needs of the file.
Depending on the needs of the file, we work in Turkish, English, and German; we organise communication and documentation with foreign parties accordingly.
The market or subject objective, existing contracts, party information, the timeline, and any dispute or compliance documents, if available, are sufficient for an initial assessment.
The right legal partner for your data and cybersecurity work.
International · Specialist Desk