Corporate Counseling in Turkey: A Cross-Border Guide for Foreign Companies

This guide is for the person responsible for a foreign company's Turkish operation — a general counsel in New York or London, a group legal director in Frankfurt, a founder who just opened a subsidiary in Istanbul. It's about what happens after the company is formed: the ongoing legal counsel that keeps a Turkish entity compliant, contracts enforceable, and directors out of personal trouble. The one idea to carry through all of it: Turkish law is codified civil law, and it will quietly override the common-law assumptions you arrived with. Your choice-of-law clause won't save you from Turkish employment rules. Your at-will instincts don't exist here. Your data-processing setup may already be non-compliant. This guide maps where those gaps sit and what ongoing counsel actually does about them.

Key Points

• Formation is the easy part; staying compliant is the work. A Turkish subsidiary or branch carries continuing obligations — corporate, tax, employment, and data — that need managing year-round, not at setup.

• Mandatory Turkish rules override your contracts. For staff working in Turkey, core protections on termination, notice, severance, working time, and leave apply regardless of a choice-of-law clause pointing home.

• Data protection (KVKK) reaches you even without a Turkish office. Under Law No. 6698, foreign companies processing data about people in Turkey must register with VERBIS and meet transfer rules aligned with the EU's GDPR. 2026 fines run into the millions of lira per violation.

• Directors face personal liability. Under the Turkish Commercial Code (Law No. 6102), board members can be personally liable for unpaid public debts and breaches of duty — a sharper exposure than many common-law directors expect.

• Contracts follow civil-law logic. Turkish contract law is codified in the Code of Obligations (Law No. 6098); some common-law drafting (indemnities, liquidated damages, boilerplate) behaves differently or is reshaped by mandatory rules and the good-faith principle.

• Agency and distribution deals carry statutory exit costs. A foreign principal terminating a Turkish agent can owe portfolio compensation by operation of law, even if the contract says otherwise.

• The value of ongoing counsel is translation. The recurring job is converting your home-jurisdiction expectations into what Turkish civil law actually permits — before a dispute, an audit, or a fine forces the issue.

Why "Counseling" Is Different From "Setup"

Most foreign companies meet Turkish law once, at incorporation, and assume the hard part is over. It isn't. Setting up a limited company (limited şirket) or joint-stock company (anonim şirket) is a defined, finite process. Corporate counseling is the recurring layer that sits on top: keeping the board's decisions valid, the contracts enforceable, the workforce compliant, the data lawful, and the tax and reporting current.

In a common-law environment, a lot of this runs on autopilot — precedent, standard forms, and market practice fill the gaps. Turkish civil law does not work that way. The rules live in codes, many of them mandatory, and they apply whether or not your paperwork acknowledges them. Ongoing counsel is how a foreign company stays inside those rules without a full in-house Turkish legal team.

The Core Areas Ongoing Counsel Manages

Entity governance and the board

Your Turkish entity has its own governance machinery that has to actually run. General assemblies must be held and minuted, board resolutions properly taken and registered with the trade registry, share transfers documented, and signatory authority (imza sirküleri) kept current. Lapses here are not cosmetic: an improperly authorised signature can render a contract contestable, and unregistered changes can stall a bank transaction or a deal.

The exposure that surprises common-law directors most is personal liability. Under the Turkish Commercial Code (Law No. 6102), board members owe duties of care and loyalty to the company, and can be held personally liable for losses caused by breach. Separately, and more sharply, directors and legal representatives can be pursued personally for the company's unpaid public debts — taxes and social-security premiums — in ways that pierce the usual assumption of limited liability. For a foreign parent, this means the choice of who sits on the Turkish board, and how that person is indemnified and insured, is a real risk decision, not a formality.

Employment — where your contracts meet mandatory Turkish law

This is usually a foreign company's first and hardest collision with Turkish civil law, which is why it's the natural entry point to everything else. You cannot contract out of Turkish employment protections for people working in Turkey. A choice-of-law clause selecting New York or English law does not displace the mandatory rules of the Labour Law (Law No. 4857) for locally performed work.

Concretely, that means:

• There is no "at-will" employment. Termination requires valid grounds, correct notice, and, for eligible employees, severance (kıdem tazminatı) and notice pay (ihbar tazminatı). Getting this wrong is the single most common and expensive foreign-employer mistake.

• Working time, overtime, and minimum annual leave are fixed by statute, not by the employment agreement.

• Employment and most monetary disputes require mandatory mediation before a lawsuit — a procedural gate discussed in Turkish Legal System: Overview.

Ongoing counsel keeps the employment templates, handbook, and termination process aligned with these rules so a routine dismissal doesn't turn into a reinstatement suit.

Data protection (KVKK) — compliance that reaches across borders

Turkey's Personal Data Protection Law (Kişisel Verilerin Korunması Kanunu, Law No. 6698, "KVKK") mirrors the structure of the EU's GDPR but has its own hard edges, and it applies far beyond companies with a Turkish office. If your business processes personal data about people in Turkey — customers, users, employees — you are likely in scope even from abroad.

Three points matter most for foreign companies in 2026:

• VERBIS registration. Data controllers, including foreign controllers without a physical presence, generally must register with the Data Controllers Registry (VERBIS). Non-registration is itself a violation.

• Cross-border transfers. A 2024 amendment aligned Turkey's transfer regime with GDPR: moving personal data out of Turkey now needs an adequacy decision, standard contractual clauses, or binding corporate rules. Relying on explicit consent alone is no longer sufficient for routine transfers.

• Real penalties. KVKK administrative fines for 2026 reach into the millions of lira per violation, and the Penal Code (Articles 135–140) criminalises unlawful recording, sharing, or retention of personal data — meaning data mishandling can carry individual criminal exposure, not just corporate fines.

For a group that already runs GDPR compliance, KVKK is not a copy-paste. Ongoing counsel maps the Turkish-specific obligations onto the existing programme rather than assuming GDPR coverage is enough.

Commercial contracts under civil-law rules

Turkish contract law is codified in the Code of Obligations (Law No. 6098), and it approaches agreements differently from common law. Freedom of contract exists, but it operates within mandatory rules and an overarching good-faith principle that courts apply actively. Some familiar common-law drafting does not translate cleanly: broad indemnities, penalty and liquidated-damages clauses, and one-sided limitation-of-liability provisions can be reduced or reshaped by the court, and heavily negotiated boilerplate may carry less weight than the code's default rules.

There is also no discovery in Turkish litigation, which changes how contracts should be drafted in the first place: because you cannot compel document production the way you can in the US, the agreement itself — notice mechanics, evidence and record-keeping obligations, clear payment triggers — has to do more of the protective work up front. Ongoing counsel reviews the templates your headquarters uses and adapts them so they actually perform in a Turkish court.

Agency, distribution, and the exit-cost trap

If your Turkish go-to-market runs through a local agent or distributor, know this before you sign: under the Turkish Commercial Code (Law No. 6102), terminating a commercial agent can trigger a statutory portfolio compensation (portföy tazminatı) for the customer base the agent built — and this right generally cannot be waived away in advance by contract. Foreign principals routinely discover this only at termination, when a distributor they expected to exit cleanly presents a compensation claim. Structuring these relationships with the exit cost understood from day one is core counseling work.

Tax, reporting, and the compliance calendar

A Turkish entity carries a recurring cadence of corporate tax filings, VAT (KDV) returns, withholding, social-security (SGK) declarations, and trade-registry updates. None of it is optional, and missed deadlines create both penalties and, as noted above, potential personal exposure for directors on public debts.

Legal Framework

Corporate life in Turkey sits on a stack of codes. The Turkish Commercial Code (Law No. 6102) governs company structure, board duties and liability, share transfers, and commercial agency and distribution. General contract and obligation rules come from the Code of Obligations (Law No. 6098), within the private-law framework of the Civil Code (Law No. 4721). Employment is governed mainly by the Labour Law (Law No. 4857), whose core protections are mandatory for work performed in Turkey. Data processing is governed by the Personal Data Protection Law (Law No. 6698, KVKK), with criminal backstops in the Penal Code (Law No. 5237). Foreign investment is protected on a national-treatment basis under the Foreign Direct Investment Law (Law No. 4875) — see Foreign Direct Investment Law.

The practical thread for a foreign company is that several of these codes contain mandatory rules that override private agreement — particularly in employment, data protection, and agency compensation. Knowing which rules you cannot contract around is the difference between a compliant operation and a series of avoidable disputes.

Common Mistakes to Avoid

• Assuming a choice-of-law clause protects you. For staff and many local dealings, Turkish mandatory rules apply no matter what law the contract names.

• Treating GDPR compliance as KVKK compliance. They rhyme but diverge on VERBIS registration, transfer mechanics, and criminal exposure. Assuming coverage is a common and expensive error.

• Importing at-will termination. There is no at-will employment in Turkey. Dismissing without valid grounds, notice, and severance invites a reinstatement or compensation claim.

• Underestimating director liability. Foreign parents often appoint a board member casually, not realising that person can be personally pursued for the company's unpaid taxes and social-security debts.

• Signing agency or distribution deals without pricing the exit. Statutory portfolio compensation on termination is frequently overlooked until the distributor invokes it.

• Letting governance lapse. Unregistered board changes, stale signature authorities, and unminuted assemblies can invalidate contracts and freeze transactions at the worst moment.

Frequently Asked Questions

We already have outside counsel at headquarters. Why do we need Turkish corporate counsel too? Because Turkish civil law contains mandatory rules your home-jurisdiction counsel cannot advise on or contract around — in employment, data protection, and agency in particular. Ongoing Turkish counsel translates headquarters' expectations into what Turkish law actually permits, before a dispute or an audit forces the correction.

Does Turkey's KVKK apply to us if we have no office in Turkey? Often yes. If you process personal data about people in Turkey, you can fall within KVKK (Law No. 6698) even without a local establishment, including an obligation to register with VERBIS and to meet the cross-border transfer rules. A group running GDPR compliance still needs a Turkish-specific overlay.

Can we run our Turkish employees on our standard head-office employment contract? Not safely. For work performed in Turkey, mandatory protections under the Labour Law (Law No. 4857) — on termination, notice, severance, working time, and leave — apply regardless of a foreign choice-of-law clause. Contracts should be localised to those rules.

How exposed are our directors personally? More than in many common-law systems. Under the Commercial Code (Law No. 6102), board members can be personally liable for breaches of duty, and directors and legal representatives can be pursued personally for the company's unpaid taxes and social-security premiums. Board composition and indemnification deserve real attention.

We want to end our Turkish distributor. Is that straightforward? Not necessarily. Turkish law can entitle a terminated commercial agent or distributor to statutory portfolio compensation for the customer base they developed, and that right generally can't be waived in advance. The exit should be planned before you sign, not at termination.

Do our Turkish contracts need to be in Turkish? For enforceability and court use, Turkish-language versions (or sworn translations) are effectively necessary, since Turkish is the sole language of the courts. Bilingual contracts with a governing-language clause are common practice, and counsel should confirm the Turkish text says what the English does.

What does "outside general counsel" actually cover here? Typically: entity governance and board support, contract review and localisation, employment and HR compliance, KVKK/data compliance, regulatory and tax-calendar oversight, and first-response on disputes — the recurring legal operations of a Turkish entity, without the cost of a full in-house team.

How Yilmaz Attorneys Can Help

We act as ongoing corporate counsel for foreign companies operating in Turkey, bridging our clients' common-law expectations and Turkish civil-law reality across the US, UK, and EU. That means governance and board support, contract localisation, KVKK and employment compliance, agency and distribution structuring, and dispute prevention — handled as a continuing relationship rather than one-off filings. If you are opening, running, or cleaning up a Turkish operation, book a consultation and we'll assess where your current setup diverges from Turkish mandatory rules and what to prioritise.

Disclaimer

This guide is provided for informational purposes only and does not constitute legal advice. Laws, fees, and procedures change frequently. For advice specific to your situation, please consult with a qualified attorney.