KVKK extends loyalty card data verification deadline to 2027

The Personal Data Protection Authority (KVKK) has extended the compliance deadline for new regulations regarding the use of loyalty cards and phone numbers during shopping. Following requests from the sector, the deadline for data controllers to implement verification mechanisms has been pushed to February 28, 2027.

The regulation aims to ensure that when a third party uses a loyalty card member's phone number or card number to claim discounts, points, or campaigns, the actual owner's consent is verified. This is intended to prevent the unauthorized use of personal benefits.

Businesses are expected to develop technical infrastructures, likely utilizing methods such as SMS verification, to confirm the cardholder's identity at the point of sale. The six-month extension provides companies additional time to establish these necessary verification systems.