The Transformation of Privacy in the Algorithmic Age: A Legal, Technical, and Social Analysis in Light of the KVKK and the GDPR

Ayşe Güngör; Filiz Kutluay Tutar; Abdallah Abukalloub

doi:10.58905/saga.v4i1.598

Authors

Ayşe Güngör Department of Logistics Management, Kadir Karabaş School of Applied Sciences, Giresun University, Türkiye
Filiz Kutluay Tutar Department of Economics, Faculty of Economics and Administrative Sciences, Nigde Omer Halisdemir University, Türkiye
Abdallah Abukalloub Department of Economics, Institute of Social Sciences, Nigde Omer Halisdemir University, Türkiye

DOI:

https://doi.org/10.58905/saga.v4i1.598

Keywords:

Privacy Transformation, Personal Data Protection, Algorithmic Governance, Smart Cities, Data Justice

Abstract

The rapid expansion of big data, Internet of Things (IoT) systems, and artificial intelligence (AI) has transformed the conditions under which privacy and personal data protection operate. In the algorithmic age, privacy is increasingly challenged not only as an individual right but also as a structural condition of socio-technical systems. This article examines whether privacy is merely adapting to technological change or undergoing a deeper paradigmatic transformation. Focusing on Türkiye’s Personal Data Protection Law (KVKK No. 6698) in comparison with the European Union’s General Data Protection Regulation (GDPR), the study investigates the changing legal and operational foundations of personal data protection, particularly the declining centrality of explicit consent and the growing role of broader governance mechanisms. Methodologically, the article adopts a qualitative multi-method design combining comparative legal analysis, doctrinal examination, and a socio-technical case study of six smart city applications in Türkiye. The findings reveal a gap between formal regulatory alignment and substantively effective protection, especially in smart city systems characterized by ambient data collection, system interoperability, and limited user contestability. The study concludes that privacy is being restructured from an individual consent-based model toward a more systemic governance condition. Accordingly, sustainable privacy protection requires integrated legal, technical, and societal governance mechanisms.

References

Allen, Anita L., and Christopher Muhawe. "Is Privacy Really a Civil Right?." Berkeley Tech. LJ 40, 2025.

B. F. G. Fabrègue and A. Bogoni, “Privacy and Security Concerns in the Smart City,” Smart Cities, vol. 6, no. 1, pp. 586–613, Feb. 2023, doi: 10.3390/smartcities6010027.

B. Kinikoglu, “Implementing a new data protection law: lessons from the Turkish experience,” International Data Privacy Law, vol. 13, no. 1, pp. 25–46, Mar. 2023, doi: 10.1093/idpl/ipad001.

F. Tanrikulu, “Comparative Evaluation of Selected Elements of Data Protection Regulations: Türkiye’s KVKK and the EU’s GDPR,” Comparative Law Review, no. 31, pp. 205–243, Dec. 2025, doi: 10.12775/CLR.2025.008.

E. Küzeci, “Turkish data protection law: GDPR alignment and key 2024 amendment,” Journal of Data Protection & Privacy, vol. 7, no. 4, p. 372, Jun. 2025, doi: 10.69554/FOTQ9875.

F. S. Doğan, “RECENT AMENDMENTS AND JUDICIAL REVIEW OF DECISIONS BY THE TURKISH DATA PROTECTION AUTHORITY,” Law and Justice Review, vol. 28, pp. 57–76, 2024.

L. Keser Berber and A. Atabey, “Turkey ∙ Evaluation of the Recent Developments in Laws and Policies Relating to Cross-Border Data Transfers in Turkey,” European Data Protection Law Review, vol. 8, no. 2, pp. 302–310, 2022, doi: 10.21552/edpl/2022/2/19.

S. S. Siryon, “PRINCIPLES AND APPLICATIONS OF THE RIGHT TO PRIVACY: EVALUATING INTERNATIONAL PERSPECTIVES AND LAWS,” LawFoyer International Journal of Doctrinal Legal Research, vol. 3, no. 3, pp. 897–909, Oct. 2025, doi: 10.70183/lijdlr.2025.v03.116.

C. Aradau and E. Mc Cluskey, “Making Digital Surveillance Unacceptable? Security, Democracy, and the Political Sociology of Disputes,” International Political Sociology, vol. 16, no. 1, Apr. 2022, doi: 10.1093/ips/olab024.

C. Mohan, “Surveillance and National Security: Balancing Privacy and Public Interest for a Safer Society,” 2025, pp. 537–561. doi: 10.2991/978-2-38476-426-6_26.

P. Königs, “Government Surveillance, Privacy, and Legitimacy,” Philos Technol, vol. 35, no. 1, p. 8, Mar. 2022, doi: 10.1007/s13347-022-00503-9.

J. Duncan, National Security Surveillance in Southern Africa. Bloomsbury Publishing Plc, 2022. doi: 10.5040/9780755640256.

K. Nishat, “Human Rights Protections in Digital Surveillance: Balancing Security Needs and Privacy Rights.,” Mayo Communication Journal, vol. 1, no. 1, pp. 83–92, 2024.

Q. Bu, “Behind the Huawei sanction: national security, ideological prejudices or something else?,” International Cybersecurity Law Review, vol. 5, no. 2, pp. 263–300, Jun. 2024, doi: 10.1365/s43439-024-00112-6.

A. Krysovatyy, O. Desyatnyuk, and O. Ptashchenko, “Digital Innovations and their Ramifications for Financial and State Security,” AFRICAN JOURNAL OF APPLIED RESEARCH, vol. 10, no. 1, pp. 431–441, Jul. 2024, doi: 10.26437/ajar.v10i1.713.

Mosa, M. J., Barhoom, A. M., Alhabbash, M. I., Harara, F. E., Abu-Nasser, B. S., & Abu-Naser, S. S. “AI and Ethics in Surveillance: Balancing Security and Privacy in a Digital World,” International Journal of Academic Engineering Research (IJAER) , vol. 8, no. 10, pp. 8–15, 2024.

S. Shahriar, S. Allana, S. M. Hazratifard, and R. Dara, “A Survey of Privacy Risks and Mitigation Strategies in the Artificial Intelligence Life Cycle,” IEEE Access, vol. 11, pp. 61829–61854, 2023, doi: 10.1109/ACCESS.2023.3287195.

L. Kisselburgh and J. Beever, “The Ethics of Privacy in Research and Design: Principles, Practices, and Potential,” in Modern Socio-Technical Perspectives on Privacy, Cham: Springer International Publishing, 2022, pp. 395–426. doi: 10.1007/978-3-030-82786-1_17.

A. López Martínez, M. Gil Pérez, and A. Ruiz-Martínez, “A Comprehensive Review of the State-of-the-Art on Security and Privacy Issues in Healthcare,” ACM Comput Surv, vol. 55, no. 12, pp. 1–38, Dec. 2023, doi: 10.1145/3571156.

H. D. Zubaydi, P. Varga, and S. Molnár, “Leveraging Blockchain Technology for Ensuring Security and Privacy Aspects in Internet of Things: A Systematic Literature Review,” Sensors, vol. 23, no. 2, p. 788, Jan. 2023, doi: 10.3390/s23020788.

S. Sannon, B. Sun, and D. Cosley, “Privacy, Surveillance, and Power in the Gig Economy,” in CHI Conference on Human Factors in Computing Systems, New York, NY, USA: ACM, Apr. 2022, pp. 1–15. doi: 10.1145/3491102.3502083.

A. G. Evren, “Comparative Analysis of the European Union and Turkish Personal Data Protection Laws: Basic Principles, Legal Grounds, and Rights of Data Subjects,” Kişisel Verileri Koruma Dergisi, vol. 5, no. 2, pp. 39–64, 2023.

A. J. Andreotta, N. Kirkham, and M. Rizzi, “AI, big data, and the future of consent,” AI Soc, vol. 37, no. 4, pp. 1715–1728, Dec. 2022, doi: 10.1007/s00146-021-01262-5.

G. Malgieri and G. González Fuster, “The Vulnerable Data Subject: A Gendered Data Subject?,” SSRN Electronic Journal, 2021, doi: 10.2139/ssrn.3913249.

D. S. Guamán, D. Rodriguez, J. M. del Alamo, and J. Such, “Automated GDPR compliance assessment for cross-border personal data transfers in android applications,” Comput Secur, vol. 130, p. 103262, Jul. 2023, doi: 10.1016/j.cose.2023.103262.

S. E. Bibri and Z. Allam, “The Metaverse as a Virtual Form of Data-Driven Smart Urbanism: On Post-Pandemic Governance through the Prism of the Logic of Surveillance Capitalism,” Smart Cities, vol. 5, no. 2, pp. 715–727, May 2022, doi: 10.3390/smartcities5020037.

A. Solow-Niederman, “Information Privacy and the Inference Economy,” SSRN Electronic Journal, 2021, doi: 10.2139/ssrn.3921003.

E. Morozov, “Critique of Techno-Feudal Reason,” New Left Rev, vol. 2, no. 133, pp. 89–126, Jan. 2022, doi: 10.64590/13n.

S. Barth, D. Ionita, and P. Hartel, “Understanding Online Privacy—A Systematic Review of Privacy Visualizations and Privacy by Design Guidelines,” ACM Comput Surv, vol. 55, no. 3, pp. 1–37, Mar. 2023, doi: 10.1145/3502288.

K. Wach et al., “The dark side of generative artificial intelligence: A critical analysis of controversies and risks of ChatGPT,” Entrepreneurial Business and Economics Review, vol. 11, no. 2, pp. 7–30, 2023, doi: 10.15678/EBER.2023.110201.

S. Bordt, M. Finck, E. Raidl, and U. von Luxburg, “Post-Hoc Explanations Fail to Achieve their Purpose in Adversarial Contexts,” in 2022 ACM Conference on Fairness Accountability and Transparency, New York, NY, USA: ACM, Jun. 2022, pp. 891–905. doi: 10.1145/3531146.3533153.

A. Kelly-Lyth, “Algorithmic discrimination at work,” European Labour Law Journal, vol. 14, no. 2, pp. 152–171, Jun. 2023, doi: 10.1177/20319525231167300.

A. C. B. Garcia, M. G. P. Garcia, and R. Rigobon, “Algorithmic discrimination in the credit domain: what do we know about it?,” AI Soc, vol. 39, no. 4, pp. 2059–2098, Aug. 2024, doi: 10.1007/s00146-023-01676-3.

Y. Hayta, “Akıllı Kent Uygulamalarında Kişisel Verilerin Gizliliği ve Güvenliği,” Firat University Journal of Social Sciences, vol. 31, no. 2, pp. 929–941, 2021.

Kişisel Verileri Koruma Kurumu, “Personal Data Protection Law .” Accessed: Mar. 31, 2026. [Online]. Available: https://www.kvkk.gov.tr/Icerik/6649/Personal-Data-Protection-Law

Kişisel Verileri Koruma Kurumu, “Obligation to Inform (Aydınlatma Yükümlülüğü).” Accessed: Mar. 31, 2026. [Online]. Available: https://www.kvkk.gov.tr/Icerik/6637/Communique-On-Principles-And-Procedures-To-Be-Followed-In-Fullfillment-Of-The-Obligation-To-Inform

Kişisel Verilerin Korunması Kanunu, “KİŞİSEL VERİLERİN KORUNMASI KANUNU.” Accessed: Mar. 31, 2026. [Online]. Available: https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=6698&MevzuatTur=1&MevzuatTertip=5

Kişisel Verileri Koruma Kurumu, “Principles on Processing of Personal Data.” Accessed: Mar. 31, 2026. [Online]. Available: https://www.kvkk.gov.tr/Icerik/6639/Principles-of-Processing-Personal-Data

C. Gallagher, “CCTV and Human Rights: the Fish and the Bicycle? An Examination of Peck V. United Kingdom (2003) 36 E.H.R.R. 41,” Surveill Soc, vol. 2, no. 2/3, Sep. 2002, doi: 10.24908/ss.v2i2/3.3378.

A. ÖZDEMİR, “DATA- AND KNOWLEDGE-DRIVEN SMART CITY STRATEGIES: RESEARCH ON IMPLEMENTATION CHALLENGES OF LOCAL GOVERNMENTS IN TURKEY,” Yönetim ve Ekonomi Araştırmaları Dergisi, vol. 20, no. 3, pp. 152–169, Oct. 2022, doi: 10.11611/yead.1162186.

Y. Sei, “Privacy-Preserving Data Collection and Analysis for Smart Cities,” in Human-Centered Services Computing for Smart Cities, Singapore: Springer Nature Singapore, 2024, pp. 157–209. doi: 10.1007/978-981-97-0779-9_5.

A. Erbey, “Akıllı Şehirlerde Teknoloji ve Veri Yönetimi: Geleceğin Şehir Yaşamı,” in Yönetim Bilişim Sistemleri Alanında Yenilikçi Çözümler ve Güncel Yaklaşımlar, Özgür Yayınları, 2025. doi: 10.58830/ozgur.pub700.c2986.

Lioudakis, Georgios V., Dimitra I. Kaklamani, and Iakovos S. Venieris. "Personal data protection under the InfoCity lights." 2009 European Wireless Technology Conference. IEEE, 2009.