Introduction
Foreign telecom companies doing business in Turkey must operate within a highly regulated legal environment. Turkey has a large and strategically important telecommunications market, with strong demand for mobile services, fixed broadband, fiber infrastructure, data centers, cloud connectivity, satellite communication, IoT solutions, 5G services, corporate data lines, cybersecurity services and digital platforms. However, the Turkish telecom sector cannot be approached as an ordinary commercial market. It is subject to sector-specific authorization, regulatory supervision, consumer protection, personal data protection, cybersecurity, technical standards, spectrum management and administrative sanction rules.
The main regulatory authority is the Information and Communication Technologies Authority, known in Turkish as Bilgi Teknolojileri ve İletişim Kurumu or BTK. BTK states that it regulates and supervises the telecommunications sector in Turkey and that it is Turkey’s first sectoral regulatory authority.
The primary legislation is Law No. 5809 on Electronic Communications. This law governs electronic communications services, networks, infrastructure, authorization, consumer rights, technical regulation, spectrum, administrative supervision and sanctions. Foreign investors must also consider the Foreign Direct Investment Law No. 4875, Turkish Commercial Code, Law No. 6698 on the Protection of Personal Data, Law No. 5651 on internet publications, cybersecurity rules, consumer protection legislation, tax rules, employment law and contract law.
Turkey generally follows an equal-treatment approach for foreign investors. The official investment portal states that Turkey’s investment legislation offers equal treatment for all investors, and that the Foreign Direct Investment Law aims to encourage FDI, protect investor rights and establish a notification-based system rather than an approval-based system for foreign direct investment.
However, equal treatment in foreign investment law does not mean that a foreign telecom company can start regulated telecom operations without BTK authorization. A foreign investor may freely establish or acquire a Turkish company under the general investment framework, but if the business involves electronic communications services, networks or infrastructure, sector-specific telecom rules must be followed.
Why Turkey Is Important for Foreign Telecom Companies
Turkey is an attractive market for foreign telecom companies because of its geographic location, large population, growing digital economy, increasing broadband demand, expanding fiber networks, mobile data usage, data center potential, cloud services, e-commerce growth and strategic position between Europe, Asia and the Middle East.
Foreign telecom companies may enter Turkey through different business models. Some companies may establish a Turkish subsidiary and apply for BTK authorization. Others may provide wholesale services to Turkish operators. Some may invest in fiber infrastructure, satellite services, data centers, cybersecurity platforms, IoT connectivity, cloud communication services or telecom equipment. Foreign companies may also acquire shares in existing Turkish telecom operators or enter into joint ventures with local partners.
Each model has different legal consequences. A foreign equipment supplier may not need telecom operator authorization if it only sells compliant equipment. A cloud platform may need to review data protection and internet law obligations. An ISP, satellite communication company or virtual mobile service provider may need BTK authorization. A company operating telecom infrastructure or providing connectivity to end users may face full electronic communications regulation.
Therefore, the first legal question is not whether the company is foreign. The first legal question is what exactly the company does in Turkey.
Foreign Direct Investment and Company Formation
Foreign telecom companies may establish companies in Turkey under the Turkish Commercial Code. Turkey’s official investment guide states that the Foreign Direct Investment Law is based on equal treatment and allows international investors to have the same rights and liabilities as local investors. It also states that international investors may establish company forms under the Turkish Commercial Code, including joint stock companies and limited liability companies.
For telecom authorization, the company structure is especially important. BTK’s CEVHER application guidance states that, for authorization by notification or usage right together with notification, the applicant company must generally be established as a limited liability company or joint stock company for the purpose of carrying out activities subject to authorization or activities necessary to provide the authorized service.
This means that a foreign telecom company should not use a generic Turkish company with a broad activity clause covering unrelated sectors such as construction, tourism, food, automotive or general trade if it intends to apply for telecom authorization. BTK expects the company’s articles of association to include electronic communications or telecommunications activities and not to include unrelated activities that are not necessary for the authorized service.
In practice, foreign investors should plan the corporate structure before applying to BTK. The company name, articles of association, capital, shareholding structure, management authority, KEP address, signatory authority and trade registry records should be aligned with telecom authorization requirements.
BTK Authorization for Foreign Telecom Companies
BTK authorization is the central market-entry requirement for foreign telecom companies that intend to provide electronic communications services or operate electronic communications networks or infrastructure in Turkey.
BTK explains that, under the authorization regime introduced by Law No. 5809, authorizations are granted through notification or through the granting of usage rights. Companies wishing to provide electronic communications services or establish and operate electronic communications networks or infrastructure must notify BTK before commencing operations.
If the service does not require allocation of scarce resources such as numbers, frequencies or satellite positions, authorization may be completed through notification in accordance with BTK procedures. If the service requires resource allocation, the company must obtain usage rights from BTK. BTK determines which services require usage rights and whether the number of usage rights should be limited.
This distinction is crucial for foreign telecom companies. A company providing certain data transmission, internet access, infrastructure operation or value-added electronic communications services may follow one authorization route. A company requiring frequencies, numbering resources or satellite positions may face a more complex usage-right process.
Foreign companies should not launch services first and apply later. BTK states that companies must notify the Authority before starting operations. Operating without authorization may create administrative sanction risk, contract invalidity issues, customer disputes, reputational damage and potential barriers to future authorization.
Notification and Usage Rights
The notification and usage-right distinction must be analyzed carefully before investment. A foreign company may think of its business as a technology service, but Turkish law may classify it as an electronic communications service if it involves transmission, routing, access, network operation, infrastructure use, internet connectivity, numbering or frequency usage.
Usage rights are especially important in services involving mobile networks, satellite communications, radio systems, nationwide frequency bands, numbering resources or similar scarce public resources. Where usage rights are limited, tender processes, policy decisions, authorization duration, technical criteria and investment obligations may become relevant.
A foreign investor should examine the following questions:
Does the service involve electronic communications transmission?
Will the company provide internet access to users?
Will it operate network or infrastructure in Turkey?
Will it use frequencies, numbers or satellite positions?
Will it resell connectivity under its own brand?
Will it provide services to Turkish end users?
Will it operate data lines, IoT connectivity or virtual mobile services?
Will it use telecom equipment requiring technical conformity?
The answers determine whether BTK authorization is needed and which route should be followed.
CEVHER Application Process
BTK authorization applications are managed through the CEVHER System. BTK states that applications for initial authorization, additional authorization, authorization renewal, adequacy control period and similar processes are carried out through the CEVHER System. Operator information updates are also submitted through the system.
For foreign telecom companies, CEVHER creates several practical requirements. The company must have proper Turkish corporate documentation, authorized signatories, KEP address, e-Government access where required, correct trade registry records and complete application documents. Missing address, telephone, KEP or company-related documents may cause rejection.
Foreign shareholders should also consider notarization, apostille, legalization and sworn translation requirements for foreign corporate documents. If a foreign parent company is a shareholder, Turkish authorities may require documents proving incorporation, representation authority, current status and shareholding.
The CEVHER process should be prepared carefully. A rushed or incomplete application may delay the market-entry plan. Foreign investors should prepare a legal and regulatory checklist before filing.
Paid-In Capital Requirements
BTK requires minimum paid-in capital for authorization. According to BTK’s CEVHER application guidance, pursuant to the BTK Board Decision dated 10 March 2026 and numbered 2026/DK-YED/71, paid-in capital must be TRY 2,500,000 for OKTH authorization and TRY 10,000,000 for other authorizations.
This is a critical point for foreign telecom companies. A Turkish company established with low capital may not be ready for BTK authorization. If the capital is insufficient, a capital increase may be required before or during the application process. This may create delays, banking procedures, accounting work and additional corporate documentation.
Foreign investors should also distinguish between general minimum capital under the Turkish Commercial Code and BTK-specific paid-in capital requirements. Telecom authorization may require a higher capital level than ordinary company formation.
Because capital requirements may change through BTK decisions, foreign companies should verify the current threshold before filing any application.
Shareholder and Management Eligibility
BTK’s CEVHER guidance includes eligibility requirements for shareholders and managers. Real person partners holding at least ten percent of the company’s shares, persons authorized to manage and represent the legal entity and certain real person partners of legal entity shareholders must not have been convicted of specified crimes, including information systems crimes, crimes against state security, crimes against the constitutional order, certain private life offences, embezzlement, bribery, fraud, forgery, money laundering, tax evasion and certain violations under Law No. 5809.
Foreign telecom investors should therefore conduct legal due diligence on shareholders, directors, managers, ultimate beneficial owners and authorized signatories before applying. This is particularly important in group structures, private equity investments, joint ventures and acquisitions.
If a foreign company acquires an existing Turkish telecom operator, it should also examine whether past authorization cancellations, sanctions or eligibility problems affect the target company or its controlling persons.
Foreign Ownership and Local Presence
Turkish foreign investment law generally permits foreign investors to establish companies and hold shares under equal-treatment principles. However, telecom operation usually requires a Turkish legal entity that can be authorized by BTK and supervised under Turkish law.
Foreign telecom companies should decide whether to operate through:
A newly established Turkish subsidiary.
A Turkish joint venture.
An acquisition of an authorized Turkish operator.
A wholesale agreement with an existing operator.
A distributor or reseller model.
A technology supply contract.
A branch or liaison office for non-operational activities.
The correct structure depends on the business model. A foreign company that only sells telecom equipment may use a different structure from a company providing internet access. A company providing software to operators may not need operator authorization, while a company providing connectivity directly to end users may need it.
Consumer Rights and Subscriber Protection
Foreign telecom companies providing services to consumers in Turkey must comply with Turkish consumer protection and telecom-specific subscriber rules. BTK identifies equal access to services, consumer and end-user protection, transparency, information, subscription agreements, personal data processing, privacy and service quality as key consumer-rights areas under Law No. 5809.
This means that foreign operators cannot simply translate their global terms and conditions into Turkish and use them without local adaptation. Turkish telecom consumer rules may require clear subscription agreements, transparent tariffs, fair cancellation procedures, lawful commitment terms, proper complaint handling, accurate billing, service quality disclosures and privacy notices.
Common consumer disputes in Turkey include unfair invoices, unexpected tariff changes, excessive cancellation fees, failure to terminate subscriptions, continued billing after cancellation, poor internet speed, number portability problems and unauthorized value-added services.
A foreign telecom company should prepare Turkish-law-compliant consumer contracts, call center scripts, tariff documents, campaign conditions, cancellation forms, complaint procedures and evidence-retention policies.
Personal Data Protection and KVKK Compliance
Telecom companies process large volumes of personal data, including subscriber identity data, phone numbers, addresses, IP addresses, traffic data, location data, billing information, payment records, device information, customer service recordings and complaint files.
The main personal data protection law is Law No. 6698. The law states that its purpose is to protect fundamental rights and freedoms, particularly privacy, and to set out obligations, principles and procedures for persons processing personal data.
The law defines personal data as any information relating to an identified or identifiable natural person and defines a data controller as the natural or legal person determining the purposes and means of processing personal data.
Telecom companies must comply with general processing principles, including lawfulness and fairness, accuracy, specified and legitimate purposes, proportionality and storage limitation. They must also take necessary technical and organizational measures to prevent unlawful processing, prevent unlawful access and ensure personal data security.
For foreign telecom companies, cross-border transfers are especially important. KVKK Article 9 was amended in 2024 and now regulates transfers abroad through adequacy decisions, appropriate safeguards such as standard contracts or binding corporate rules, and limited incidental transfer exceptions.
A foreign telecom group using global CRM systems, cloud hosting, international technical support, foreign cybersecurity vendors or group-level analytics must therefore analyze cross-border data transfers carefully.
Cybersecurity and Network Security
Telecom companies operating in Turkey must also consider network and information security obligations. BTK’s network and information security materials state that Law No. 5809, privilege agreements and authorization regulations contain obligations related to network and information security.
Foreign telecom companies should not treat cybersecurity as a purely technical internal matter. In the telecom sector, cybersecurity has regulatory, consumer-protection, data-protection and national-infrastructure dimensions. Cyber incidents may cause network outages, personal data breaches, service disruption, customer claims, BTK scrutiny and KVKK investigations.
A foreign operator should implement:
Network monitoring.
DDoS protection.
Incident response procedures.
Access control systems.
Privileged access management.
Encryption.
Secure backup.
Vendor security reviews.
Business continuity planning.
Security logging.
Data breach notification procedures.
Employee and dealer training.
Cybersecurity obligations are particularly important for ISPs, mobile operators, satellite communication providers, infrastructure operators, data centers, IoT connectivity providers and cloud communication platforms.
Law No. 5651 and Internet Services
Foreign telecom companies providing internet-related services in Turkey must consider Law No. 5651. This law regulates content providers, hosting providers, access providers and public internet use providers. Its purpose is to regulate the obligations and responsibilities of these actors and the procedures for combating certain crimes committed through internet publications.
A foreign company may be classified as an access provider if it enables users to access the internet. It may be a hosting provider if it provides systems hosting services or content. It may be a content provider for content it creates or publishes.
This classification is important because access providers may need to implement lawful access-blocking decisions, hosting providers may have traffic data and content-removal obligations, and content providers may be liable for their own content.
Foreign companies operating cloud platforms, hosting services, content delivery networks, public Wi-Fi solutions, internet access services or digital platforms targeting Turkish users should obtain a detailed Law No. 5651 compliance analysis.
Technical Standards and Equipment Compliance
Foreign telecom companies often import or supply equipment such as routers, modems, antennas, base stations, radio equipment, IoT modules, satellite devices and network components. These products may be subject to Turkish technical regulation and market surveillance rules.
BTK states that Turkey has harmonized its telecommunications regulations with EU regulations and that the Radio Equipment Regulation, aligned with the EU Radio Equipment Directive, has entered into force. BTK also explains that market surveillance checks whether radio equipment complies with essential requirements and that a market surveillance laboratory performs tests and measurements.
Foreign manufacturers, importers and distributors should therefore check radio equipment conformity, electromagnetic compatibility, low voltage requirements, RF tests, SAR limits, CE marking, product safety and documentation obligations before placing products on the Turkish market.
Equipment that is compliant in another jurisdiction may still require local conformity review before deployment in Turkey.
BTK Audits and Administrative Sanctions
BTK has broad audit powers. Its audit page states that operators are monitored under Law No. 5809 for compliance with license terms, equipment standards, sector legislation and spectrum use, and sanctions may be imposed on operators that do not comply with regulations.
BTK may supervise operators financially, technically, legally and administratively and may request information and documents.
Foreign telecom companies must therefore be audit-ready. Compliance documents should not be prepared only during authorization and then forgotten. Operators should maintain ongoing records on:
Authorization scope.
Corporate updates.
Shareholder and management changes.
Administrative fees.
Tariff documentation.
Consumer complaints.
Service quality.
Network security.
Data protection.
Technical equipment conformity.
Spectrum use.
Numbering resources.
Interconnection or access agreements.
Vendor contracts.
Administrative sanctions may affect not only fines but also authorization status, market reputation, investor confidence and customer relationships.
Commercial Contracts and Local Legal Adaptation
Foreign telecom companies usually rely on contracts with customers, operators, vendors, dealers, resellers, data centers, cloud providers, equipment suppliers and subcontractors. These contracts should be adapted to Turkish law.
Key contract issues include:
Scope of service.
BTK authorization responsibility.
Service levels and uptime.
Installation deadlines.
Maintenance windows.
Cybersecurity obligations.
Data protection roles.
Cross-border transfers.
Traffic data handling.
Consumer complaints.
Liability limitation.
Force majeure.
Termination.
Regulatory change clauses.
Audit rights.
Dispute resolution.
Indemnity.
A foreign parent company may prefer English-law or foreign arbitration clauses, but Turkish mandatory rules may still apply to regulated telecom activities, consumers, personal data, public-law obligations and administrative matters. Therefore, Turkish legal review is essential.
Tax, Employment and Operational Issues
Foreign telecom companies doing business in Turkey should also consider tax, accounting, employment and operational rules. A Turkish subsidiary will generally have corporate tax, VAT, withholding, social security and accounting obligations under Turkish law. Foreign employees may need work permits. Local engineers, sales teams, call center personnel and technical teams must be employed in compliance with Turkish labor law.
The official investment guide states that work permits for foreign personnel employed in companies within the scope of foreign direct investment are issued by the Ministry of Labor and Social Security, and special rules apply for qualified foreign direct investment and key foreign personnel.
Foreign telecom companies should also consider local language requirements, Turkish customer support, KEP correspondence, e-invoice and e-archive obligations, accounting records, consumer-law documentation and regulatory communication procedures.
Mergers, Acquisitions and Due Diligence
Foreign companies may enter Turkey by acquiring an existing telecom operator. In such cases, regulatory due diligence is essential. Ordinary corporate due diligence is not enough.
The buyer should examine:
BTK authorization scope.
Usage rights.
Numbering resources.
Frequency rights.
CEVHER records.
Capital compliance.
Shareholder and management eligibility.
BTK sanctions and audits.
Administrative fee payments.
Consumer complaints.
Pending litigation.
KVKK compliance.
Cybersecurity records.
Law No. 5651 obligations.
Equipment conformity.
Interconnection and access agreements.
Infrastructure and right-of-way agreements.
Data transfer arrangements.
Dealer and reseller contracts.
If the target company has unresolved regulatory violations, the buyer may inherit serious liabilities. Regulatory due diligence should be completed before signing or closing.
Practical Market Entry Checklist
A foreign telecom company planning to do business in Turkey should follow this checklist:
Define the exact service model.
Determine whether the activity is an electronic communications service.
Check whether BTK authorization is required.
Identify whether notification or usage rights apply.
Establish or acquire a suitable Turkish company.
Draft telecom-specific articles of association.
Ensure paid-in capital compliance.
Review shareholder and management eligibility.
Prepare CEVHER application documents.
Obtain KEP, e-Government and corporate records.
Prepare Turkish-law-compliant customer contracts.
Prepare consumer complaint procedures.
Prepare KVKK privacy notices and data inventories.
Analyze cross-border data transfers.
Review Law No. 5651 obligations.
Prepare cybersecurity and network security policies.
Review equipment conformity and technical standards.
Prepare tax and accounting structure.
Review employment and work permit needs.
Create regulatory audit files.
Monitor BTK, KVKK and cybersecurity developments.
Conclusion
Foreign telecom companies doing business in Turkey face significant opportunities and significant legal responsibilities. Turkey’s telecom market is attractive because of its size, digital growth, connectivity demand and strategic location. However, telecom services are highly regulated and require careful legal planning.
The key rule is that foreign investment freedom does not eliminate sector-specific telecom regulation. A foreign investor may establish or acquire a Turkish company under equal-treatment principles, but if the company provides electronic communications services or operates networks or infrastructure, BTK authorization may be required.
Foreign companies must analyze Law No. 5809, BTK authorization, notification and usage rights, CEVHER applications, paid-in capital, shareholder eligibility, consumer rights, personal data protection, cybersecurity, Law No. 5651, technical standards, audits, sanctions, tax, employment and local contracts.
A successful telecom market-entry strategy in Turkey requires coordination between legal, regulatory, technical, tax, finance, data protection and commercial teams. Companies that build compliance into their structure from the beginning can reduce regulatory risk, protect investment value and operate sustainably in the Turkish electronic communications sector.
Frequently Asked Questions
Can a foreign telecom company do business in Turkey?
Yes. Foreign investors generally benefit from equal treatment under Turkish foreign investment law. However, telecom activities may require BTK authorization depending on the business model.
Does a foreign telecom company need a Turkish company?
In many regulated telecom activities, a Turkish limited liability company or joint stock company is required for BTK authorization. BTK’s CEVHER guidance includes company-form and articles-of-association requirements for authorization applications.
What is BTK authorization?
BTK authorization is the regulatory permission framework for companies wishing to provide electronic communications services or operate electronic communications networks or infrastructure. Authorization may be based on notification or usage rights.
What is the difference between notification and usage rights?
Notification applies where the service does not require scarce resources such as frequencies, numbers or satellite positions. Usage rights are required where such resources must be allocated by BTK.
What paid-in capital is required for telecom authorization?
According to BTK’s CEVHER guidance, the paid-in capital requirement is TRY 2,500,000 for OKTH authorization and TRY 10,000,000 for other authorizations under BTK Board Decision dated 10 March 2026 and numbered 2026/DK-YED/71.
Can a foreign telecom group transfer Turkish subscriber data abroad?
Cross-border transfer of personal data must comply with KVKK Article 9. Transfers may require an adequacy decision, appropriate safeguards such as standard contracts or binding corporate rules, or limited incidental transfer grounds.
Do foreign ISPs need to comply with Law No. 5651?
Yes, where their activities fall within Law No. 5651 as access providers, hosting providers, content providers or related internet actors. The law regulates responsibilities of these actors in Turkey’s internet environment.
Can BTK audit foreign-owned telecom operators?
Yes. If the company is an authorized operator in Turkey, BTK may supervise it financially, technically, legally and administratively and may request information and documents.
Are telecom devices imported by foreign companies subject to Turkish technical rules?
Yes. Radio equipment and telecommunications terminal equipment may be subject to Turkish technical regulations, market surveillance and conformity checks. BTK’s technical regulation materials refer to the Radio Equipment Regulation and market surveillance procedures.
What is the most important first step for a foreign telecom company entering Turkey?
The most important first step is legal classification of the business model. The company must determine whether its planned activity is an electronic communications service, network operation, infrastructure operation, internet service, hosting activity, equipment sale, cloud service or purely software service.
No Responses