A detailed legal guide to recruitment law and HR compliance in Turkey, covering job ads, interviews, discrimination, candidate data, background checks, foreign employees, hiring quotas, employment contracts, and onboarding.
Recruitment is often treated as a commercial function, but in reality it is one of the most legally sensitive phases of the employment relationship. The employer’s risks do not begin only after the employee starts work. They begin when the job is defined, when the advertisement is published, when CVs are collected, when candidates are interviewed, when background documents are requested, and when the final offer is made. In Turkey, recruitment law and HR compliance sit at the intersection of labour law, data protection law, occupational health and safety rules, and, where foreign nationals are involved, immigration and work-permit law. Employers that treat hiring as a purely operational exercise often create preventable disputes, compliance gaps, and reputational damage. (Natlex)
The main legal framework for lawful hiring in Turkey is built on Labour Law No. 4857, which regulates the employment relationship and prohibits discrimination in employment, the Personal Data Protection Law No. 6698, which governs the collection and use of candidate and employee data, and Law No. 6735 on International Labour Force, which requires foreign nationals within its scope to obtain a work permit or exemption before starting work in Türkiye. Depending on the role, employers must also consider occupational health and safety rules, special medical examination requirements, and sector-specific conditions. A legally sound recruitment process therefore needs more than a good HR policy. It needs a structured compliance approach. (Natlex)
Why Recruitment Is a Legal Process, Not Just an HR Process
Under the Labour Law, the employment relationship is not only about daily performance after hiring; the law also addresses the conclusion of the employment contract. Article 5 expressly prohibits discrimination in the employment relationship and states that, except for biological reasons or reasons linked to the nature of the job, the employer must not discriminate directly or indirectly in the conclusion, conditions, execution, or termination of the employment contract due to sex or maternity. The same provision also bars unjustified discrimination between full-time and part-time employees and between fixed-term and open-ended employees. In practice, this means the legal review of recruitment starts before the contract exists. (Natlex)
The first recruitment-law question for an employer is often basic but decisive: which legal regime applies to the role? Labour Law No. 4857 applies broadly, but it also contains express exclusions for certain categories, such as some domestic services, apprentices, sportsmen, and certain small-scale or sector-specific activities. Employers who misclassify a working relationship at the hiring stage can create later disputes about rights, working conditions, termination standards, and compliance obligations. A lawful hiring process therefore begins with the legal characterization of the role itself. (Natlex)
Step One: Define the Position Lawfully Before Advertising It
A lawful recruitment process starts with a lawful job definition. HR teams should define the role, the business need, the reporting line, the core duties, the workplace, and the working model before candidate outreach begins. This is not only a managerial best practice. It is legally important because the employment contract and later written statements to the employee must reflect the real working conditions, including the job structure, wage, working time, and, where relevant, the duration and basis of the relationship. Turkish law gives parties freedom to determine the type and conditions of the employment contract, but only within statutory limits.
This also matters because Turkish law distinguishes between open-ended and fixed-term employment. Article 11 provides that an employment contract is deemed indefinite unless the relationship is based on a fixed term supported by objective conditions such as the completion of a specific task or the occurrence of a specific event. Employers should therefore avoid advertising or offering a fixed-term role unless there is a real legal and operational basis for that structure. A fixed-term label used merely for convenience may not survive legal scrutiny. (Natlex)
Step Two: Draft Job Advertisements Without Discrimination
The most visible recruitment document is usually the job advertisement, and it is also one of the easiest places for unlawful discrimination to appear. Article 5 of the Labour Law prohibits discrimination on grounds such as language, race, sex, political opinion, philosophical belief, religion, and similar reasons. It also expressly prohibits discrimination because of sex or maternity in the conclusion of the employment contract unless the distinction is objectively justified by the job or by biological reasons. For employers, this means job ads should not impose unnecessary gender, age, marital-status, pregnancy-related, or comparable criteria unless a narrow legal justification truly exists. (Natlex)
In practical terms, a legally safer job ad focuses on qualifications, experience, technical skills, licensing, language proficiency genuinely required for the role, workplace location, and working model. A legally riskier ad is one that uses coded exclusion, such as “young and dynamic female assistant,” “single candidate preferred,” or similar wording unrelated to job performance. Recruitment law does not prohibit employers from choosing the best-qualified candidate. It requires that the selection criteria be job-related, proportionate, and consistently applied. (Natlex)
Step Three: Collect Candidate Data on a Lawful Basis
Once applications start arriving, data protection law becomes central. Under Article 4 of the Personal Data Protection Law, personal data must be processed lawfully and fairly, for specified and legitimate purposes, in a manner that is relevant, limited, and proportionate, and stored only for the period required by legislation or by the purpose of processing. These principles apply directly to recruitment because a hiring process usually involves CVs, cover letters, application forms, interview notes, contact information, education records, references, IDs, and often sensitive documents such as criminal-record extracts or health-related materials. (KVKK)
Article 5 of the same Law states that personal data shall not be processed without explicit consent unless one of the statutory grounds applies. Those grounds include cases where processing is directly related to the establishment or performance of a contract, necessary for compliance with a legal obligation, necessary for the establishment, exercise, or protection of a right, or necessary for the legitimate interests of the data controller, provided those interests do not override the individual’s fundamental rights and freedoms. In recruitment practice, this means employers should not rely mechanically on consent for every step. They should identify the actual legal basis for each category of data they collect. (KVKK)
The duty to inform is equally important. Article 10 requires the data controller, at the time personal data are obtained, to inform the candidate about the identity of the data controller, the purposes of processing, possible transfer recipients and purposes, the method and legal basis of collection, and the rights available under Article 11. In other words, lawful recruitment in Turkey requires more than a privacy paragraph hidden in a portal. It requires proper candidate information notices that match the real flow of recruitment data. (KVKK)
Step Four: Ask Only for What the Role Actually Requires
One of the most common hiring mistakes is excessive document collection. Turkish data protection practice has moved clearly against that approach. In its 2022/172 summary decision, the Personal Data Protection Board addressed a recruitment process in which, after acceptance to work, the liaison office requested documents including a criminal record, health report, lung film report, blood-group certificate, photocopy of driver’s license, marriage certificate, and identity documents of family members. The published summary states that requesting family members’ identity-card information contradicted the principles in Article 4 and also criticizes the handling of special categories of personal data. (KVKK)
That decision is highly instructive for employers. It does not mean employers can never request a health document, criminal record, or role-specific license. It means they must be able to show a lawful basis, necessity, and proportionality. If the role does not require driving, collecting the candidate’s driver’s license copy at the initial stage is hard to justify. If family-member identity information is irrelevant to the role, the employer should not request it merely because it is convenient for its internal file structure. Recruitment compliance is therefore not about collecting as much as possible. It is about collecting only what the employer can justify. (KVKK)
Step Five: Conduct Interviews Within Legal Boundaries
Interviews are not legally unregulated spaces. They are part of the process of concluding the employment contract and therefore fall within the labour-law equality principle and the data-protection framework. Questions should be tied to professional suitability, legal eligibility for the role, workplace logistics where genuinely relevant, and essential qualifications. Questions about pregnancy plans, marital status, religious belief, union preference, ethnicity, or broad health history are legally risky unless a very specific legal necessity exists. (Natlex)
The safest interview practice is to standardize core questions for comparable candidates, keep written notes focused on objective job-related criteria, and avoid storing unnecessary narrative comments about protected characteristics. Employers should also train line managers who participate in interviews. Many legal problems do not arise from written policy but from an interviewer who believes informal personal questions are harmless. They are not harmless when they become evidence of discriminatory hiring criteria or excessive data processing. (Natlex)
Step Six: Treat Background Checks as Exceptions, Not Routine
Background checks are often useful, but Turkish law does not allow them to become automatic fishing expeditions. A criminal record contains special-category personal data under Article 6, and health data are likewise specially protected. Article 6 now permits processing of special categories only under specified conditions, including explicit legal permission, necessity for the establishment or protection of a right, or necessity for legal obligations in employment, occupational health and safety, social security, social services, and social assistance. This means the employer must ask, document by document, why the information is needed and on which legal basis it is being processed. (KVKK)
The same logic applies to pre-employment health checks. The Labour Law requires medical certification in some situations, but not as a blanket rule for every office job. Article 86 provides that a worker may not be engaged in arduous or dangerous work without a certificate based on medical examination at recruitment or during employment. Article 87 separately requires medical examination and certification before employing children and young employees between fourteen and eighteen. Employers should therefore distinguish between legally required medical screening for specific categories and unjustified routine medical data collection for all candidates. (Natlex)
Step Seven: Control Data Sharing Within Corporate Groups
A frequent compliance mistake in modern recruitment is assuming that candidate data can be freely circulated within a group of affiliated companies. The Turkish Personal Data Protection Board has taken a stricter view. In a published case summary concerning a job applicant, the Board stated that sharing a candidate’s personal data among multiple data controllers within the same group, by using a common database and without the applicant’s explicit consent, violated the Law’s data-security framework and led to an administrative fine. The summary also states that transfers among separate companies within the same corporate group are treated as transfers to third parties for these purposes. (KVKK)
That principle matters in HR practice. A company cannot assume that once a person applies to one group company, the candidate has automatically applied to all of them. If the employer wants to use a centralized talent pool, it should structure legal bases, transfer mechanisms, privacy notices, and access permissions carefully. This is especially important where data may also move abroad. Under the current text of Article 9, cross-border transfers require that an Article 5 or 6 condition be met and that the international transfer mechanism comply with the adequacy or safeguard framework now set out in the Law. (KVKK)
Step Eight: Hire Foreign Nationals Only After Work-Permit Compliance
Where the selected candidate is a foreign national, recruitment becomes an immigration-law issue as well. The Ministry of Labour and Social Security states that foreigners within the scope of Law No. 6735 must obtain a work permit or work-permit exemption before starting work in Türkiye, and that working without a valid permit or exemption can trigger criminal and administrative consequences. The Ministry also states that a residence permit alone does not, by itself, give most foreigners the right to work. (Çalışma ve Sosyal Güvenlik Bakanlığı)
The employer’s obligations continue at the application stage. The Ministry’s work-permit documentation page states that the work-permit file includes, among other items, an employment contract signed by the employer and the foreigner, and that domestic applications are possible where the foreigner has a residence permit valid for at least six months. The Ministry also explains that complete applications are evaluated according to work-permit criteria and, if duly filed, are completed within thirty days. For HR departments, this means the offer stage must be coordinated with permit strategy rather than treated as an afterthought. (Çalışma ve Sosyal Güvenlik Bakanlığı)
Employers should also be aware that the Ministry updated its work-permit evaluation criteria effective 1 October 2024. The current criteria page states, as a general rule for workplaces subject to the balance-sheet basis procedure, that at least five Turkish citizens should be employed in the workplace for each foreigner for whom a work-permit application is made, while some high-turnover workplaces may benefit from exemptions for a limited number of foreigners. These are not small technicalities. They directly affect whether the candidate can lawfully be hired at all. (Çalışma ve Sosyal Güvenlik Bakanlığı)
Step Nine: Do Not Ignore Disability and Protected Hiring Obligations
Lawful hiring is not only about avoiding discrimination; it is also about meeting positive employment obligations. Article 30 of the Labour Law establishes a quota-based framework for the employment of disabled persons and requires recruitment through the Turkish Public Employment Organization for the relevant categories. ISKUR’s official guidance explains the current quota in practical terms: employers with fifty or more employees in private-sector workplaces must employ disabled workers at a rate of 3 percent, while public workplaces must employ 4 percent disabled workers and 2 percent ex-convict workers in positions suited to their occupational, physical, and mental conditions.
This matters at the recruitment-planning stage. A company that waits until inspection or complaint to examine its quota obligations is already late. HR teams should monitor headcount thresholds, province-based calculations where relevant, and the use of İŞKUR channels for required placements. Inclusive recruitment, in Turkish law, is not only a cultural value. In some workplaces it is a statutory obligation.
Step Ten: Convert the Hire Into the Right Contract
A lawful recruitment process ends not with a verbal “you’re hired,” but with correct employment documentation. Article 8 of the Labour Law defines the employment contract and states that written form is required for fixed-duration contracts of one year or more. It also requires the employer, where no written contract has been made, to provide a written statement within two months showing the general and special conditions of work, working time, wage and wage supplements, pay intervals, contract duration if fixed-term, and termination conditions. Article 9 confirms that parties may shape contract type and conditions within the limits of the law. (Natlex)
For recruitment compliance, this means the offer letter, contract template, and onboarding workflow should already reflect the correct employment model. Employers should decide carefully whether the contract is fixed-term or indefinite, whether a probation clause is used, and whether any role-specific annexes are needed. The law allows probation, but the Labour Law caps it at two months unless a collective agreement extends it to four months. Good HR practice is to align what was advertised, what was offered, and what the written contract finally says. (Natlex)
Step Eleven: Build the Personnel File Lawfully at Onboarding
Once the candidate becomes an employee, Article 75 of the Labour Law requires the employer to arrange a personnel file for each employee. In addition to identity information, the employer must keep the documents and records required under the Labour Law and other legislation and must show them to authorized persons and authorities when requested. The same article also requires the employer to use employee information in accordance with honesty and law and not to disclose information that the employee has a justified interest in keeping secret. (Natlex)
This rule works together with the data-security obligations in the Personal Data Protection Law. Article 12 requires the data controller to take necessary technical and organizational measures to prevent unlawful processing, prevent unlawful access, and ensure the protection of personal data. It also imposes ongoing confidentiality obligations and requires audits and breach response. In recruitment and onboarding practice, this means employers should not only collect documents lawfully; they must also control access, limit retention, and maintain secure HR systems. (KVKK)
How Employers Can Build a Legally Safe Hiring System
The most effective recruitment-compliance model is procedural, not reactive. Employers should begin with role mapping and lawful job criteria, use neutral job advertisements, standardize interview questions, issue candidate privacy notices, define lawful bases for each data category, restrict background checks to role-relevant cases, control intra-group data sharing, check work-permit requirements before foreign hires start work, monitor quota obligations, and ensure that the final contract reflects the true structure of the relationship. Each of these steps is grounded in existing Turkish law and regulator guidance, not merely in HR preference. (Natlex)
A lawful hiring system also depends on discipline inside the company. HR alone cannot guarantee compliance if line managers ask improper interview questions, business units pressure HR to “fix the paperwork later,” or group companies share candidate databases informally. Recruitment law and HR compliance work best when the organization treats hiring as the start of a legal relationship rather than the end of a talent search. That approach reduces disputes, improves documentation quality, and creates a stronger foundation for later performance management, payroll, data governance, and termination decisions. (KVKK)
Conclusion
In Turkey, lawful hiring is not a single document or a single approval. It is a sequence of legally relevant decisions. Employers must define the role properly, advertise without discrimination, collect only necessary candidate data, respect information and data-security duties, avoid excessive screening, control corporate-group transfers, obtain work permits before foreign employees start, observe protected hiring obligations where quotas apply, and convert the recruitment decision into the right contract and personnel file. Each stage carries its own legal risks, but each risk can be managed through clear HR compliance design. (Natlex)
For that reason, recruitment law and HR compliance should be treated as part of corporate governance, not merely HR administration. Employers that hire legally do more than avoid sanctions. They build a more defensible workforce, a more consistent decision-making culture, and a better platform for long-term employment stability. In the Turkish market, where labour law and data protection rules both matter from the first contact with a candidate, legal recruitment is not an optional refinement. It is the proper way to hire. (Natlex)
Yanıt yok