Personal data from North Macedonia and engineers in Türkiye
The Law on Personal Data Protection (Official Gazette nos. 42/20, 294/21 and 101/2025) took effect on 24 February 2020 and is largely harmonised with the GDPR. The Personal Data Protection Agency (azlp.mk) enforces it, controllers must report breaches to it within 72 hours, and legal entities can be fined up to 4% of the previous financial year's total annual turnover. Articles 48 to 50 set the transfer routes: EU, NATO and EEA member states are outside the chapter but need a notification to the Agency; other third countries need an adequacy decision by the Agency or safeguards such as standard data protection clauses adopted by the Agency or approved by the European Commission; bespoke contractual clauses need the Agency's authorisation. Which route covers a studio in Türkiye is worth confirming with a lawyer. Repository, database and hosting accounts stay in your name, so you decide who has access.





