Overview of Türkiye’s regulation on IT systems
Financial institutions in Türkiye must comply with regulations governing IT systems and custody solutions for both traditional and digital assets. The Banking Regulation and Supervision Agency (BDDK) and the Capital Markets Board (SPK) define requirements for system deployment, data security, and custody operations. This whitepaper provides a structured overview of key regulatory areas:
-
Regulatory Authorities and Legal Framework – Oversight institutions and applicable laws.
-
IT System Deployment – On-premises requirements, outsourcing restrictions, and custody implications.
-
Custody and Asset Servicing – Compliance for safeguarding financial and digital assets.
-
Alternative Deployment Models – Hybrid and managed solutions within regulations.
-
Licensing and Oversight – Approval processes for financial institutions, custodians, and service providers.
A practical reference for financial institutions, custodians, and technology providers navigating Türkiye’s IT and custody regulations.
