Presidential Decree on Cyber Security Presidency (Decree No. 177) (the "Decree") was published in the Official Gazette dated January 8, 2025, and numbered 32766. The Cyber Security Presidency (“Presidency”) has been established by the Decree and it has further outlined the organization, duties, powers, and responsibilities of the Presidency. The Decree entered into force on the date of its publication, January 8, 2025.

The Decree stipulates that the purpose of the establishment of the Presidency is to strengthen Turkey's national cyber security policy, protect critical infrastructures, and ensure the protection of the state against cyberthreats in digital environments.  The Presidency is designated as a public legal entity under the Presidency, and the organizational structure includes a President and service units. The president is responsible for the execution of its duties and reports to the President of Turkey. According to Provisional Article 1 of the Decree, the duties to be carried out by the Presidency will be carried out by the relevant public institutions and organizations until the relevant units are established and operational in the Presidency.

Article 4 of the relevant Decree outlines the responsibilities and authorities of the Presidency. The Presidency’s primary duties and authorities are outlined below:

·   Developing national cybersecurity policies, strategies, and objectives, preparing action plans to implement, ensuring coordination, and follow up to maintain cybersecurity,

·      Conducting training and awareness-raising initiatives to raise awareness on cybersecurity,

·      Developing products and technologies with the cybersecurity ecosystems, supporting global entrepreneurs to become competitive in the global market,

·      Participating in and organizing domestic and international cybersecurity exercises and events,

·     Developing emergency response and crisis management plans for cybersecurity incidents and establishing joint operation centers within the scope of these plans,

·      Providing opinions on incentives to be provided by public institutions and organizations in the field of cyber security.

As outlined in the Decree, the organizational structure of the Presidency, comprises a President and designated service units. The duties and authorities of the service units will be regulated by a regulation issued by the Presidency in accordance with the field of activity of the Presidency. The relevant service units are as follows:

a)     Directorate General of Cyber Defense,

b)    General Directorate of Cyber Strength,

c)     Directorate General of Ecosystem Development,

d)    Department of Foreign Relations,

e)    Department of Management Services,

f)      Legal Consultancy,

g)     Press and Public Relations Consultancy.

Article 10 of the Decree establishes guidelines for the delegation of authority within the scope of the President and service units. According to the relevant article, the President, and managers at all levels of the Presidency may delegate some of their authorities to lower levels, provided that the limits are clearly specified and in writing. However, it is important to note that this delegation of authority does not in any way eliminate the supervisory responsibility of the delegating supervisor.

Please find the Decree here. For further details you may contact us here.

Kind regards,

DL Attorneys at Law

The information contained in this Legal Alert is for general informative purposes only and it does not constitute legal advice or create an attorney-client relationship. All rights regarding the information contained in this Legal Alert and the design of the document belong to DL Attorneys at Law (“DL”) and cannot be partially or completely copied, reproduced, used or distributed without the written permission of DL.