A confidentiality agreement is the first control in a Turkish M&A process. It lets a buyer review enough information to decide whether to proceed, while limiting use of that information to the transaction. Start it before a teaser, management call, virtual data room or site visit.
What should a Turkish M&A NDA achieve?
The agreement should define the deal purpose, the protected information, the approved recipients and the consequences of misuse. Turkish contract law gives parties room to set that framework within legal limits under Article 26 of the Turkish Code of Obligations. A vague one-page NDA rarely controls a complex diligence process.
Use the NDA as one part of the deal protocol. The broader Turkey M&A guide explains how confidentiality fits before due diligence, bids and signing.
How should confidential information be defined?
Define the information by category and by source. Include financial records, customer and supplier terms, pricing, forecasts, product plans, source material, employee information, tax files and the existence and terms of negotiations. Cover oral disclosures too, then require a written confirmation where practical.
Do not rely only on a label saying “confidential”. The definition should also cover notes, analyses and models created by the recipient from the seller's information. Carve out information that is public without breach, already lawfully known, independently developed, or properly obtained from a third party.
Who can receive the data room materials?
Access should be limited to named deal-team members and professional advisers who need the information for the stated purpose. Make the recipient responsible for its representatives, require equivalent confidentiality duties, and keep an access list. A broad group-company permission is often too loose for a competitive buyer.
If the buyer is part of a cross-border group, agree the approved jurisdictions and advisers in advance. That becomes especially important for a cross-border merger involving a Turkish company.
What data controls belong beside the NDA?
An NDA does not replace data-protection analysis. Where the materials contain personal data, the parties need a separate lawful processing and transfer assessment. The Turkish data-protection authority's international-transfer guide under Law No. 6698, Article 9 should be checked before personal data is sent abroad.
Practical controls matter: role-based data-room access, watermarking, download restrictions, a clean-team protocol for sensitive commercial data, and a log of questions and releases. The NDA should allow disclosure when legally required, with prior notice where legally permitted.
Which restrictions and remedies should be explicit?
State a use restriction, a non-contact rule for customers or employees where appropriate, return or deletion rules, retention exceptions for legal archives, and the survival period. Specify governing law, court or arbitration route, and interim-relief language that counsel can enforce. Avoid copying a foreign template without adapting its remedy and disclosure mechanics.
Competition law still applies. An NDA cannot make a competitively sensitive exchange lawful merely by naming it confidential. The Competition Authority's Law No. 4054 is the relevant baseline, so counsel should set clean-team and information-flow limits before competitors exchange current pricing, margins or strategy.
FAQ: Turkish M&A confidentiality agreements
Should the seller sign a mutual NDA?
Use a mutual form if both sides will disclose protected material. A seller-side form is common at the early buyer-review stage, but the actual information flow decides the structure.
How long should confidentiality last?
There is no universal period. Match it to the information and the deal. Trade-sensitive material often needs longer protection than a short-lived process timetable.
Can advisers receive information?
Yes, when they have a need to know and are bound by equivalent duties. The primary recipient should remain accountable for their handling.
Does an NDA permit international data sharing?
No. Contract confidentiality and personal-data transfer compliance are separate questions.
This is general information, not legal or tax advice. The transaction, sector and parties determine the appropriate document.
For a controlled Turkish acquisition process, contact Corpenza's company-formation and compliance team.
