Article 20 of the Constitution states that “Everyone has the right to request the protection of personal data concerning them,” as required by the right to “privacy and protection of private life.” This right includes the right to be informed about personal data concerning oneself, to access such data, to request its correction or deletion, and to learn whether it is being used for its intended purposes. Personal data may only be processed in cases provided for by law or with the explicit consent of the individual. The principles and procedures regarding the protection of personal data are regulated by law."

In accordance with the provisions of the Constitution, the Personal Data Protection Law No. 6698 (the Law) entered into force upon its publication in the Official Gazette dated April 7, 2016, and numbered 29677. Various regulations, circulars, and decisions of the Personal Data Protection Board have also been enacted to support the implementation of the Law.

The aforementioned the Law aims to protect individuals' fundamental rights and freedoms, particularly the privacy of their private lives, during the processing of personal data; and to determine the obligations of natural and legal persons processing personal data and the procedures and principles they must comply with.

Hacettepe University, as the data controller, considers ensuring the security of all personal data processed under the Law as a fundamental responsibility. Personal data is stored only for as long as the specified purpose remains valid; necessary administrative and technical security measures are meticulously implemented to prevent data loss, unauthorized access, and unlawful use.