A comprehensive legal guide to employee onboarding procedures and legal documentation requirements in Turkey, covering employment contracts, personnel files, SGK notifications, data protection, occupational health and safety, remote work, and foreign employee compliance.
Employee onboarding is often described as an HR function, but in legal terms it is much more than an administrative welcome process. In Turkey, onboarding is the stage at which the employer converts recruitment into a legally structured employment relationship. That means the employer must not only introduce the new hire to the business, but also complete the written employment framework, social security notifications, personnel records, data protection notices, occupational health and safety training, and, where relevant, immigration-related formalities. For this reason, employee onboarding procedures and legal documentation requirements should be understood as a compliance process shaped mainly by Labour Law No. 4857, Occupational Health and Safety Law No. 6331, the Personal Data Protection Law No. 6698, social security rules administered by SGK, the Remote Work Regulation, and the work-permit regime for foreign nationals.
A weak onboarding process can create disputes that surface months or even years later. When there is no proper written statement of working conditions, no organized personnel file, no evidence of health and safety induction, no lawful employee privacy notice, or no timely social security entry notification, the employer may still think the employment relationship is functioning normally. Yet legally, those gaps can become the foundation of labor claims, administrative sanctions, data protection complaints, or defense difficulties in later disputes. That is why good onboarding is not merely about efficiency. It is about building the legal architecture of employment from day one.
Why onboarding is a legal stage of the employment relationship
Turkish labour law does not treat the beginning of employment as an informal transition. Article 8 of Labour Law No. 4857 defines the employment contract as the agreement under which the employee undertakes to perform work in subordination to the employer, while the employer undertakes to pay remuneration. The same article also makes clear that fixed-term employment contracts of one year or more must be in writing, and that where no written contract has been made, the employer must still provide the employee with a written document within two months showing the general and special conditions of work, daily or weekly working time, basic wage and any supplements, pay intervals, duration if the contract is fixed-term, and termination conditions. In practice, this means that onboarding is the point at which verbal arrangements must become proper legal documentation.
The onboarding stage also sits within the Labour Law’s equality framework. Article 5 prohibits discrimination in the employment relationship on grounds such as language, race, sex, political opinion, philosophical belief, religion, and similar reasons, and it expressly bars sex- or maternity-based discrimination in the conclusion, conditions, execution, and termination of the employment contract unless there is an objective justification linked to biology or the nature of the work. Although this rule is usually discussed in recruitment or termination, it also affects onboarding. The documents signed, benefits granted, working conditions recorded, and duties assigned on entry must be structured consistently and without unlawful differentiation.
The first onboarding document: the employment contract or written statement of terms
In Turkey, the first core onboarding document is the employment contract itself or, at minimum, the written statement required by Article 8. From a compliance perspective, employers should not treat this as a minimal formality. The written contract or written statement should clearly reflect the real position, the job title, essential duties, place of work, working model, working time, wage structure, pay periods, fixed-term or indefinite-term nature of the relationship, and any probation arrangement within legal limits. The law does not force every employment relationship into a single template, but it does require transparency about the key terms of work. A properly designed onboarding system should therefore ensure that what was advertised, what was offered, and what is finally signed are consistent with one another.
This matters because later changes to working conditions are not legally free. Article 22 of the Labour Law states that changes by the employer in working conditions arising from the employment contract, annexed work rules, similar sources, or workplace practices may be made only through written notice, and that changes not accepted in writing within six working days do not bind the employee. In other words, onboarding documents do not only describe the initial employment relationship; they also help define which terms may later be treated as contractual working conditions. A vague or incomplete onboarding record therefore weakens the employer’s position both at the start and when later adjustments become necessary.
SGK entry notification and social security registration
A legally compliant onboarding process in Turkey must also include timely social security registration. According to SGK’s official employer guidance, for insured persons falling under Article 4/1(a) of Law No. 5510, the employer must submit the Sigortalı İşe Giriş Bildirgesi through the e-insurance system at least one day before the employee starts work, subject to specific statutory exceptions. SGK also explains that the workplace declaration itself must be submitted by the date on which insured employment begins in that workplace. This means that onboarding is not complete merely because the employee signs a contract or appears at the office. The employer must also complete the statutory insurance-entry notification within the legal time limit.
For HR and legal teams, the practical point is simple: employment must be documented both internally and externally. The internal side is the employment contract, the personnel file, and the induction record. The external side is the social security notification and related compliance with SGK procedures. If the employer postpones SGK registration until after the employee starts work, the onboarding process is already defective from a compliance standpoint. A lawful onboarding design therefore requires coordination among HR, payroll, and the employer’s social security function before the employee’s first actual working day.
The personnel file is a legal archive, not just an HR folder
Article 75 of Labour Law No. 4857 requires the employer to arrange a personnel file for each employee working in the establishment. In addition to the employee’s identity information, the employer must keep all documents and records it is required to arrange under the Labour Law and other legislation, and must present them to authorized persons and authorities upon request. The same article also requires the employer to use employee information in line with honesty and law and not to disclose information that the employee has a justified interest in keeping secret. This provision turns the personnel file into one of the most important onboarding outputs in Turkish employment practice.
The significance of the personnel file is often underestimated. It is not only a repository for copies of identity documents or signed forms. It is the legal record of the employer’s compliance with the beginning of employment. Depending on the role and the sector, the file may include the contract, the written terms document, payroll-related records, work-permit materials for foreigners, remote-work annexes, equipment delivery forms, health and safety training records, lawful medical documents where required, and other legally necessary papers. Because Article 75 is framed broadly, the employer should build the onboarding file around legal necessity and proportionality rather than habit or overcollection.
Personal data protection begins on day zero
Onboarding also marks the point at which candidate data become employee data, and that transition is regulated by the Personal Data Protection Law. Article 4 requires that personal data be processed lawfully and fairly, for specified, explicit, and legitimate purposes, in a manner that is relevant, limited, and proportionate, and stored only for the period required by law or by the purpose of processing. Article 5 states the general rule that personal data may not be processed without explicit consent, but it also recognizes several other legal grounds, including cases where processing is directly related to the establishment or performance of a contract, necessary for compliance with a legal obligation, necessary for the establishment or protection of a right, or necessary for the legitimate interests of the data controller provided fundamental rights are not violated. For onboarding, this means the employer should identify the legal basis for each category of employee data rather than relying mechanically on blanket consent language.
The law also imposes a direct information duty. Article 10 requires the data controller, at the time personal data are obtained, to inform the employee about the identity of the data controller, the purposes of processing, the possible recipients and purposes of transfer, the method and legal basis of collection, and the employee’s rights under Article 11. In practice, that means a lawful onboarding package should include a proper employee privacy notice or information text. It is not enough for the employer merely to gather documents for the personnel file. The employee must also be informed, at the time of collection, how and why those data are being processed.
Data security is equally important. Article 12 requires the data controller to take all necessary technical and organizational measures to prevent unlawful processing, prevent unlawful access, and ensure the protection of personal data. It also imposes audit and confidentiality obligations. Therefore, onboarding compliance is not complete once the employer has collected the employee’s documents. The employer must also control who can access them, how they are stored, how long they are retained, and under what circumstances they may be shared within the company group or with external processors such as payroll or software vendors.
Special-category data and medical documents require extra caution
Some onboarding documents are more sensitive than others. Article 6 of the Personal Data Protection Law classifies data relating to matters such as health, criminal convictions, trade-union membership, biometric data, and similar items as special categories of personal data. The article permits processing of such data only under specific legal conditions, including where expressly provided by law, where necessary for the establishment or protection of a right, or where necessary to fulfil legal obligations in the fields of employment, occupational health and safety, social security, social services, and social assistance. This means employers should not demand special-category data at onboarding merely because they would prefer to have a more detailed file. Each sensitive document should be tied to a lawful and necessary reason.
The same caution applies to medical examinations. Labour Law No. 4857 states in Article 86 that an employee may not be engaged in arduous or dangerous work without a certificate based on a medical examination conducted at recruitment or during employment, at least once a year, proving fitness for the job. Occupational Health and Safety Law No. 6331 also provides that health data obtained through medical examinations must be kept confidential in order to protect individual privacy and prestige. Together, these rules show that medical documentation can be mandatory in certain risk-based contexts, but it must still be handled confidentially and proportionately. Onboarding practice should therefore distinguish between legally required medical documentation and unnecessary health-data collection.
Occupational health and safety induction is part of onboarding
Occupational health and safety is not a separate subject that begins after onboarding. Under Law No. 6331, the object of the statute is to regulate the duties, authority, responsibility, rights, and obligations of employers and workers to ensure occupational health and safety and improve existing conditions. Article 4 requires the employer to take measures related to health and safety, monitor whether those measures are followed, carry out or procure risk assessment, and take the worker’s capabilities into account in relation to health and safety when assigning tasks. This means the employer cannot lawfully onboard a new worker without considering whether the job, the workplace, and the employee’s assignment are aligned from a safety perspective.
Articles 16 and 17 are especially relevant to onboarding. Article 16 requires the employer to inform workers and workers’ representatives about workplace health and safety risks and the protective and preventive measures in place. Article 17 requires the employer to ensure that each worker receives adequate safety and health training on recruitment, on transfer or change of job, and when equipment changes or new technology is introduced. The law also states that this training may not impose a financial burden on workers, and the time spent in training counts as actual work time. In practical onboarding terms, that means induction is not limited to HR orientation. It must also include documented health and safety information and training adapted to the employee’s work.
For workplaces with fifty or more employees where permanent work is performed for more than six months, Article 22 requires an occupational health and safety committee. This does not mean every new hire must be taken before the committee, but it does show that onboarding sits inside a broader compliance structure that may include formal consultation and workplace-level safety governance. Where multiple employers or subcontractors share the same work environment, the OHS law also requires cooperation and information-sharing to protect workers. For onboarding in complex industrial or site-based settings, the employer should therefore ensure that the employee’s induction reflects the actual multi-employer risk environment.
Remote and hybrid onboarding require additional written documentation
Where the employee will work remotely or in a hybrid model, onboarding needs an extra layer of legal structuring. The Remote Work Regulation defines remote work as a written employment relationship in which the employee performs all or part of the work outside the workplace, usually through technological communication tools. Article 5 of the Regulation requires remote-work employment contracts to be made in writing and to include the job description, the manner of performance, duration and place of work, wage and payment matters, the tools and equipment provided by the employer, obligations relating to their protection, communication rules, and the general and special working conditions. That makes the remote-work document a core onboarding instrument, not a side memo.
The Regulation goes further. It states that, where necessary, arrangements regarding the remote workplace must be completed before work starts; that the method for allocating the costs arising from those arrangements is to be determined by the parties; that employer-supplied tools and materials are the default unless otherwise agreed; and that a written equipment list may need to be delivered and signed, with a copy preserved in the employee’s personnel file. It also requires the contract to address work time, overtime rules, communication methods, data protection, and occupational health and safety obligations in remote work. In other words, remote onboarding in Turkey is not just traditional onboarding conducted by video call. It requires specific written compliance on equipment, expenses, communication, privacy, and safety.
Foreign employees require work-permit and additional onboarding steps
If the new hire is a foreign national within the scope of Law No. 6735, onboarding cannot lawfully proceed unless the employee has a valid work permit or work-permit exemption before starting work in Türkiye. The Ministry of Labour and Social Security’s official FAQ states this expressly and notes that foreigners who work without a valid work permit or exemption are subject to criminal and administrative action. This means that work authorization is not a document to be completed after the employee begins. It is a precondition for lawful onboarding.
The Ministry’s step-by-step work-permit guidance also identifies key supporting documents for the foreign employee’s file, including the employment contract, biometric photograph, passport, and diploma. The same official guide states that once the work permit is approved, the employer must submit the statement of starting employment to the Social Security Center within 30 days of the foreigner’s entry into the country or within 30 days of work-permit approval, depending on the application pathway. The Ministry’s social security guidance further explains the interaction among work-permit timing, start-of-work obligations, and social security notifications for foreign employees. Therefore, onboarding foreign workers requires coordination among employment documentation, immigration status, and social security compliance rather than handling each issue separately.
International HR systems and data transfers
Many employers now onboard employees through multinational HR platforms, shared databases, or cross-border software systems. That does not remove Turkish data protection obligations. Under the current text of Article 9 of the Personal Data Protection Law, personal data may be transferred abroad where one of the Article 5 or Article 6 conditions is met and there is an adequacy decision, or, absent adequacy, where appropriate safeguards such as Board-approved binding corporate rules, the published standard contract, or another recognized mechanism are in place. For onboarding practice, this means that using a global HR platform may require a transfer analysis under Turkish law rather than a simple assumption that group-wide access is automatically lawful.
This point matters especially because onboarding datasets usually include identity records, bank details, tax and payroll data, contact information, signatures, and sometimes special-category data. The employer should therefore align onboarding workflows with the actual transfer mechanism, employee information notice, retention period, and processor arrangements used by the group or vendor. A technologically modern onboarding process is not legally modern unless it also respects the cross-border transfer rules that apply to the employee data it creates.
Onboarding should anticipate future disputes, not only present administration
The real legal value of onboarding is not limited to getting the employee started. A strong onboarding file later helps the employer prove what was agreed, what the employee was told, what training was given, when social security notifications were made, how data were lawfully collected, and whether the work model was properly documented. A weak onboarding file, by contrast, creates evidentiary gaps at exactly the moment the employer most needs clarity, whether in labor inspection, mediation, litigation, or data-protection review. Because Article 75 requires employers to keep legally required records and present them when requested, onboarding should always be built with future verifiability in mind.
That is why a compliant onboarding structure in Turkey should be designed as a coordinated legal process. The employment contract or written terms should be finalized before or at the start of work, SGK entry notification should be made on time, the personnel file should be organized around legal necessity, the employee should receive the required privacy information, special-category data should be requested only where lawful and necessary, health and safety induction should be documented, remote-work specifics should be reduced to writing where relevant, and foreign employees should not begin before work authorization is in place. When these steps are handled as one connected system, onboarding becomes a compliance asset rather than an administrative risk.
Conclusion
In Turkey, employee onboarding procedures and legal documentation requirements are not limited to collecting signatures and opening an HR profile. They form the legal foundation of the employment relationship. Labour Law No. 4857 requires written transparency about working conditions and the maintenance of a personnel file; SGK rules require timely entry notifications; the Personal Data Protection Law requires lawful data processing, information notices, and security measures; Occupational Health and Safety Law No. 6331 requires risk-based information and training from the beginning of work; the Remote Work Regulation imposes additional written obligations for remote roles; and foreign employees must have work authorization before starting work. Each of these obligations is part of onboarding in legal terms.
For employers, the safest approach is to stop seeing onboarding as a checklist owned only by HR. It is a shared compliance function involving HR, legal, payroll, data protection, occupational safety, and, where applicable, immigration teams. Employers that onboard correctly do more than welcome the employee efficiently. They create a lawful, provable, and sustainable employment structure from the first day forward.
Yanıt yok