Cloud computing systems within the framework of the Personal Data Protection Law no. 6698

With numerous advantages such as easier, faster, and more economical access to data from anywhere, the establishment of service models to meet user demands, cloud computing technologies are becoming more widespread. The essence of cloud computing allows users to store and process their data on servers over the internet, rather than on local servers or personal devices. With such data processing activities, many personal and specifically characterized personal data are processed today. Therefore, it is necessary to ensure the compliance of cloud computing systems with the law on the protection of personal data. In today's world where data is increasingly gaining importance day by day, cloud computing systems that offer unlimited storage space are actively used. As cloud computing technologies increase, data breaches are also increasing. Compliance of data processing activities carried out in cloud computing systems with regulations aimed at the protection of personal data reduces concerns about privacy and security related to cloud technologies. In our legislation, there is no special regulation prepared specifically for cloud computing systems. In this context, our study firstly examined the working mechanisms, service models, and distribution groups of cloud computing systems, and then discussed the reflections of the Law No. 6698 on the Protection of Personal Data in cloud computing systems. In line with the Law on the Protection of Personal Data, we scrutinized who is responsible for the data processing activity occurring in cloud computing systems, the identification of the nature of their data, data processing principles, the legal status of the cloud service provider, and the rights and obligations of the parties.