Before asking for every message in an internal review

Executive summary

Define the event, period, roles and systems before issuing a broad collection request. Expand scope when a new finding justifies it, recording the reason.

Separate originals from working copies and control access to irrelevant personal information. These suggested recordkeeping measures do not establish a legal basis for collection or guarantee admissibility. Employee notice, lawful access and evidential use require assessment in the specific matter.

Sources

KVKK · Veri güvenliğine ilişkin yükümlülükler

https://www.kvkk.gov.tr/Icerik/2040/Veri-Guvenligine-Iliskin-Yukumlulukler