From the team

Notes on continuous compliance

Notes from the team building Legalifi. On KVKK and GDPR compliance, human-supervised AI, and compliance programs that are truly built to last.

All articles

Filter by what you're working on. New essays roughly every two weeks.

All AI Regulation Compliance Crypto Assets Cybersecurity Data Protection Financial Regulation GDPR KVKK Legal Insights

Illustration representing European Union crypto-asset regulation and digital finance compliance.

Markets in Crypto-Assets Regulation (MiCA)

A concise overview of MiCA, the EU’s crypto-assets regulation, including licensing, stablecoin rules, CASP obligations, cybersecurity standards and the July 2026 transition deadline.

Alperen Turhal

Jun 9, 2026

4 min

Compliance

Featured

The Intersection of Law and Technology: Meet Legalifi, a RegTech Software Solution

Legalifi is a RegTech platform where law meets technology. It turns regulations into living systems with AI-powered compliance management for frameworks like GDPR, KVKK, and MiCA, helping organizations manage compliance faster and smarter.

Elif Hilal Kara

May 9, 2026

9 min

Legal Insights

Featured

What Did Legalifi Change?

LegalTech, RegTech, and Legalifi’s approach to continuous compliance: how law, engineering, AI, and regulatory monitoring come together in a single compliance infrastructure.

Alperen Turhal

Aug 14, 2026

4 min

Compliance

MiCA and GDPR Obligations: A Current Overview and Assessment

An overview of the evolving relationship between MiCA and GDPR, covering CASP licensing, blockchain data protection, EDPB guidance, administrative penalties and the rules affecting non-EU crypto service providers.

Alperen Turhal

Jul 23, 2026

11 min

Crypto Assets

European Union stars combined with an artificial intelligence network, representing the EU AI Act and the regulation of artificial intelligence in Europe.

EU AI Act: The European Union Artificial Intelligence Act

A comprehensive overview of the EU AI Act, including AI risk categories, high-risk system obligations, GPAI rules, transparency requirements, administrative fines, and the regulation’s implications for companies in Türkiye.

Alperen Turhal

Jul 1, 2026

11 min

Compliance

Secure digital records, redacted personal information and identity data representing KVKK and personal data protection in Türkiye.

Türkiye’s Personal Data Protection Law (KVKK): Key Principles, Rights and Obligations

A practical overview of Türkiye’s Personal Data Protection Law (KVKK), covering personal data, processing conditions, data subject rights, controller obligations, data security and compliance requirements.

Alperen Turhal

Jun 26, 2026

6 min

KVKK

Abstract digital security matrix with encrypted connections, access-control checkpoints and incident alerts representing NIS2 cybersecurity governance and regulatory compliance.

NIS2 Directive: Cybersecurity Obligations, Incident Reporting and Corporate Liability

A comprehensive overview of the NIS2 Directive, covering essential and important entities, cybersecurity risk management, management liability, incident reporting and its impact on non-EU suppliers.

Alperen Turhal

Jun 26, 2026

9 min

Cybersecurity

Modern GDPR and data privacy illustration featuring a security shield, padlock, European map, and secure data protection icons in a blue-toned technological scene.

General Data Protection Regulation (GDPR)

GDPR is a key regulation that redefines data privacy rules for companies operating in the EU or serving EU citizens. In this article, we break down its scope, core principles, and real impact on businesses in a clear and practical way.

Alperen Turhal

May 10, 2026

4 min

GDPR