Can I download and archive the documents in PDF or Word format?

No, the only export option is a plain text (.txt) download; there is no archive/record system either.

Is there a legal time limit for notifying the Authority after learning of the breach?

Yes. From the moment you learn of the breach, you must notify the Board within 72 hours; incomplete or late notification may result in you facing sanctions. This tool lets you prepare a form based on the 72-hour period from the breach date.

What information do I need to enter when filling out this form?

The form includes fields for company name, person making the notification and contact email, breach date and detection date, breach type, number of affected persons, affected data categories, description of the breach, possible consequences, urgent measures taken, and planned additional measures. Company name, contact email, breach date, and breach type are mandatory fields.

What options are offered as the breach type?

You can choose from three breach types: confidentiality (unauthorized access/disclosure), integrity (unauthorized modification), and availability (loss/deletion).

Is this form sent directly to the Authority?

No, this tool only generates a draft. You must submit your notification through the KVKK Board's online system and obtain a lawyer's opinion.

KVKK Data Breach Notification Builder

🚨 72-hour rule: under Article 12(5) of the KVKK, personal data breaches must be reported to the Personal Data Protection Authority no later than 72 hours after you become aware of them. Fill in the Discovery Date field to start a live countdown. This form is a template only — the official submission goes through the online form or KEP (registered e-mail).

📋 Breach Details

Company Name *Notifying PersonContact Email *Metin Dili / Output Language

Breach Date *Discovery Date

Breach Type *Number of Affected People (estimated)Affected Data CategoriesDescription of the BreachLikely ConsequencesImmediate Measures TakenPlanned Follow-up Measures

📜 Notification Form

Fill in Company Name, Email and Breach Date on the left.
The notification form will appear instantly.

⚠️ Official submission: this form is a notification draft only. For the official submission, use the KVKK Online Formu (kvkk.gov.tr) or send it via KEP: [email protected]. Also get input from your legal counsel. The English output is a translation of the Turkish original; if there is any discrepancy, the Turkish text prevails.

Auto-deleted in 7 days

256-bit SSL

Support

Your files are encrypted with SSL and automatically deleted from our servers 7 days after processing.

📖 How to Use

Upload document

Drag-drop or pick file.

Set options

Choose operation and parameters.

Process

Server runs the task.

Download

Get result in your format.

⚖️ This tool is not legal advice — it only provides a draft/summary/information. Always consult a lawyer before making important decisions. KolayDönüştür is not responsible for the legal consequences of any output.

👨‍⚖️ Find a lawyer via the Union of Turkish Bar Associations (barobirlik.org.tr)

Frequently asked questions

No. The tool generates only a single notification document to be submitted to the Authority; for individual notification, there is only an empty approval checkbox, and no actual letter text is generated.

Data Breach Notification Form — 72-Hour Rule (KVKK) user reviews

No reviews yet. Be the first to tell others how Data Breach Notification Form — 72-Hour Rule (KVKK) worked for you.

Data Breach Notification Form — 72-Hour Rule (KVKK)