The Personal Data Protection Authority has published the Guide on Generative Artificial Intelligence and the Protection of Personal Data. The guide summarizes the role of generative AI systems in the processing of personal data, their responsibilities, and current issues with 15 questions and examples.
The Ministry of Trade has submitted the “Draft Regulation on Amendments to the Regulation on Commercial Advertising and Unfair Commercial Practices” for public consultation. The draft contains new provisions and amendments on social media influencers, targeted advertising, and discounted and conditional sales.
The European Parliament has approved a non-binding vote to ban users under the age of 16 from accessing social media and AI chatbots. French President Macron has stated that social media algorithms fuel a culture of bullying and extremism. European Commission President von der Leyen stated in her annual “State of the Union” speech in September that they would “closely examine” Australia’s social media ban for young people.
The Central Bank of the Republic of Turkey has published its Digital Turkish Lira Phase Two Progress Report. The report covers the maturation of the Digital Currency System prototype into a minimum viable product state, the development of programmable and offline payment infrastructures, and preparatory work regarding cross-border interoperability and financial intermediary integration.
Google introduced the third generation of its Gemini AI model and integrated it on launch day into its search engine for the first time. Gemini 3 offers new tools such as “Gemini Agent,” which can conduct multi-step tasks thanks to its advanced capabilities in areas such as coding and reasoning, while also providing corporate customers with autonomous coding capabilities through the AI-powered software development platform “Antigravity.”
The European Commission is postponing the entry into force of strict rules on the use of AI in critical infrastructure sectors from 2026 to 2027 as part of its “Digital Omnibus” package of proposals. The proposal also allows companies to more easily use anonymized personal data, such as health and biometric data, for AI training. While the package provides compliance relief for small businesses, critics point to increased privacy risks.
Amazon, lost its lawsuit against being classified as a “Very Large Online Platform” and subject to the strictest oversight and transparency obligations under the EU’s Digital Services Act. The EU court ruled that these rules apply to Amazon due to its user base and the platform’s potential risks.
At the 30th Conference of the Parties to the United Nations Framework Convention on Climate Change, the European Union rejected the draft agreement on the grounds that it contained no commitments to phase out fossil fuels and weakened global emission reduction targets. Meanwhile, the US did not send a representative to the summit for the first time. Commitments to phase out fossil fuels were removed from the text due to resistance from oil and gas exporters. Countries agreed only on a voluntary call to accelerate the reduction of fossil fuel use. The next summit will be held in Turkey in 2026.
The European Parliament has agreed to postpone the entry into force of a new regulation banning the import of products that contribute to deforestation by one year. Accordingly, the implementation date has been set for December 30, 2026, for large companies and June 30, 2027, for small businesses. The postponement decision was made primarily due to pressure from the food industry and difficulties in implementing the regulation, and it has been criticized by environmental advocates.
Environmental law organization ClientEarth has filed a lawsuit against Shell’s board of directors, arguing that it has failed to establish a climate strategy in line with the Paris Agreement and has not complied with court rulings, asserting the personal liability of its members. As a result of this case, for the first time, members of a company’s board of directors may face individual liability for negligence in their sustainability obligations.
European Union and African Union leaders met at summits in Luanda and Johannesburg. The summits emphasized that Africa’s solar energy and raw material potential plays a strategic role in achieving the EU’s 2050 net-zero target and announced that cooperation in sustainable infrastructure would be strengthened. The European Investment Bank announced that it would provide €350 million in loans for the modernization of South African ports and green hydrogen projects. While the EU aims to diversify its supply of critical minerals and green hydrogen, monitoring organizations argue that this financing model carries the risk of excessive debt and “energy colonialism” for Africa.
The Regulation Amending the Cybersecurity Competency Model Regulation in the Energy Sector was published in the Official Gazette dated November 25, 2025, and numbered 33088. With the amendment, CISA and IAF certifications were included in the scope of the regulation, and the certification and experience requirements were also updated.
