How to Conduct a Competition Compliance Audit in Turkey (2026), Step‑by‑step Checklist & Timeline

Understanding how to conduct a competition compliance audit in Turkey has become an operational priority for every company doing business in or selling into the Turkish market. Law No. 4054 on the Protection of Competition gives the Turkish Competition Authority (Rekabet Kurumu) broad investigative and sanctioning powers over anti-competitive agreements, abuse of dominance, and concentrations, and Q1 2026 brought a visible uptick in sector inquiries and dawn-raid activity. Communiqué No. 2026/2, effective 1 March 2026, introduced revised merger-notification thresholds and updated administrative procedures, expanding the range of transactions and conduct that now require proactive compliance attention.

This guide walks in-house counsel, compliance officers, general counsel, and M&A teams through the full audit process: scoping, document collection, forensic review, legal assessment, remediation, and external reporting, with the timelines, document checklists, cost benchmarks, and 2026 mitigation strategies needed to turn an audit into a genuine enforcement shield.

Overview of the process and who it applies to

A competition compliance audit is a structured, internal review of a company’s commercial practices, policies, and records designed to identify and remediate conduct that may breach Turkey’s competition rules. Its scope typically extends across five areas: (1) horizontal and vertical agreements (Articles 4 and 5 of Law No. 4054); (2) pricing, discounting, and resale policies; (3) distribution and agency arrangements; (4) trade-association memberships and information exchanges; and (5) pre-transaction M&A due diligence to flag notification obligations under Communiqué No. 2026/2.

Rekabet Kurumu oversees enforcement and can impose turnover-based fines of up to 10 % of annual gross revenue for serious infringements. The Authority also has the power to conduct on-site inspections and compel document production at short notice. A properly documented audit, and the competition compliance program (CCP) it supports, is one of the most effective tools available for reducing both the probability and the severity of enforcement action.

The audit applies to any undertaking operating in Turkey, any foreign company whose products or services reach the Turkish market, and any group contemplating an acquisition or joint venture with a Turkish nexus. Industry observers expect enforcement activity to remain elevated through 2026, making a proactive competition compliance audit in Turkey not merely advisable but, for many sectors, essential.

Eligibility and prerequisites for a competition compliance audit in Turkey

Before the audit begins, the organisation must satisfy a set of internal and external prerequisites. Failing to do so will slow data collection, create privilege risks, and undermine the credibility of any findings presented to Rekabet Kurumu.

Who should run an audit

• Turkish-incorporated companies in sectors with concentrated markets, regulated pricing, or active trade associations.
• Foreign companies selling into Turkey, distribution, agency, and e-commerce arrangements can trigger Law No. 4054 even without a local entity.
• M&A teams, pre-signing or pre-closing audits are critical where the revised notification thresholds under Communiqué No. 2026/2 may apply.

Internal prerequisites

• Nominated compliance owner. A senior manager (typically GC or Chief Compliance Officer) who sponsors the audit and has authority to access business-unit data.
• Document custodian. An individual in IT or Legal responsible for collection, chain of custody, and metadata integrity.
• Business-unit map. A list of all relevant functions, sales, procurement, finance, marketing, business development, with named contacts.
• Pre-audit NDAs. Confidentiality agreements covering external counsel, forensic vendors, and any interviewees outside the legal team.

External prerequisites

• Retained competition counsel with Turkish enforcement experience.
• Forensic accounting or eDiscovery support if the audit involves large data volumes, multiple languages, or electronic communications review.
• Board or audit-committee approval where company governance requires it, formalise the audit mandate in writing.

Competition audit steps, the step‑by‑step procedure

Follow these seven stages in order. Each stage identifies the responsible actors, the actions to complete, and the outputs that feed the next step.

Step 0, Scope and risk assessment

Who: Compliance officer + external competition counsel.

Before any documents are collected, define the audit’s boundaries. Map the company’s markets, products, and geographies. Identify priority risk areas: horizontal contacts with competitors (pricing, market allocation, bid rigging), vertical restraints (resale price maintenance, exclusive distribution, territorial restrictions), potential abuse-of-dominance concerns (excessive pricing, refusal to supply, loyalty rebates), and any upcoming or recent transactions that could trigger notification obligations under Communiqué No. 2026/2.

Appoint an audit lead, typically external competition counsel, and agree a project timeline and budget envelope. Produce a written scope document that lists included business units, data custodians, and the specific competition-law questions the audit will address. This scope document doubles as the audit’s terms of reference and should be signed off by the GC or board sponsor.

Step 1, Data and document collection

Who: Document custodian, IT, Legal.

Issue a litigation-hold notice (also called a preservation notice) to all relevant custodians. The notice should instruct employees to preserve all electronic and hard-copy records, including emails, instant messages, calendar entries, and file-sharing platform content, and to refrain from deleting, modifying, or moving any potentially relevant material.

Build a data inventory that catalogues every source of potentially relevant information: email servers, shared drives, CRM platforms, ERP pricing modules, procurement portals, and personal devices where business communications may reside. Collect the documents listed in the required-documents checklist below, maintaining chain-of-custody records (who collected what, when, and in what format). Where data volumes are large, use targeted date ranges and custodian lists to avoid an unmanageable review set. Ensure metadata (sender, recipient, timestamps) is preserved, it is often more probative than the document text itself in a Rekabet Kurumu investigation response.

Step 2, Interviews and process walkthroughs

Who: External counsel + HR + business heads.

Prepare a witness list covering senior managers, sales directors, procurement leads, and any employees who attend trade-association meetings or have regular contact with competitors. Conduct interviews under an established protocol:

• Upjohn-style warning. Explain that counsel represents the company, not the individual, and that interview notes may be shared with management or, in certain circumstances, with the regulator.
• Structured questionnaire. Cover pricing decisions, competitor contacts, tender processes, distribution terms, information exchanges, and awareness of company compliance policies.
• Contemporaneous notes. The interviewer (or a dedicated note-taker) should produce a written summary within 24 hours. Record who was present, the date and time, and any documents referenced.
• Confidentiality. Instruct interviewees not to discuss the audit or their interview with colleagues who have not yet been interviewed.

Supplement interviews with process walkthroughs, observe how pricing proposals are drafted, how bids are assembled, and how trade-association meetings are reported internally. These walkthroughs often reveal informal practices that do not appear in written policies.

Step 3, Forensic review and red‑flag analysis

Who: Forensic accountants, eDiscovery team, supervised by competition counsel.

Apply keyword searches to the collected data set. Effective search terms include competitor names, phrases such as “market sharing,” “price list,” “agreed,” “don’t undercut,” “our friends,” and any sector-specific code words identified during interviews. Layer the keyword search with communication-pattern analysis: unusual spikes in contact between employees and competitor personnel, encrypted or personal-device messaging, and off-system communications all warrant closer review.

On the commercial side, analyse pricing data for anomalies, parallel price movements with competitors, unexplained margin compression, uniform discount structures across independent distributors, or bid patterns suggesting rotation. Cluster the findings into categories aligned with Law No. 4054: potential Article 4 violations (agreements restricting competition), potential Article 6 violations (abuse of dominance), and potential notification failures under the merger-control regime. Grade each finding by severity, high (probable infringement, material exposure), medium (ambiguous conduct requiring further analysis), low (minor policy gap, no evidence of anti-competitive effect).

Step 4, Legal assessment and drafting of findings

Who: Competition counsel.

Map each red flag to the relevant provisions of Law No. 4054 and applicable secondary legislation. For Article 4 issues, assess whether an individual exemption or a block-exemption communiqué applies. For Article 6 issues, assess market definition, dominance indicators, and the potential foreclosure or exploitation effects of the conduct. For notification issues, apply the revised thresholds introduced by Communiqué No. 2026/2.

Produce a written findings report that includes: (a) an executive summary for senior management; (b) a detailed analysis of each finding with severity grading; (c) a risk-exposure estimate (potential fines, dawn-raid likelihood, reputational impact); and (d) prioritised remediation recommendations. Mark the report as legally privileged and restrict distribution to the audit sponsor and named recipients only.

Step 5, Remediation and compliance training in Turkey

Who: Senior management + Compliance + Legal + HR.

Translate findings into concrete remedial actions. These typically include: updating or adopting a formal competition compliance policy (CCP); revising contract templates to remove problematic clauses (e.g., resale price maintenance, non-compete terms exceeding legal limits); terminating or restructuring trade-association participation where information-exchange risks are unacceptable; and implementing controls over competitor contacts (approval protocols, meeting reporting forms).

Deliver targeted compliance training to the business units identified as high risk. Training should be practical, scenario-based, and specific to Turkish competition law, generic global modules are insufficient. Record attendance, distribute written materials, and schedule refresher sessions at least annually. The training log becomes a key piece of evidence in any future mitigation argument before Rekabet Kurumu.

Step 6, External reporting and record retention

Who: GC + external counsel.

Decide whether voluntary self-reporting to Rekabet Kurumu is appropriate. This is a high-stakes decision that depends on the severity of findings, the likelihood of independent detection, and the potential benefits under Rekabet Kurumu’s leniency and settlement mechanisms. External counsel should present the GC with a written options memo, covering full leniency application, partial cooperation, or purely internal remediation, before any contact with the Authority.

Regardless of the reporting decision, preserve the complete audit record: scope document, data-collection logs, interview notes, forensic reports, findings report, remediation plan, and training records. Establish a retention schedule (industry observers recommend a minimum of ten years for competition-sensitive records) and ensure the records are stored securely and accessible in the event of a future Rekabet Kurumu investigation response.

Competition compliance audit checklist Turkey, required documents and information

The documents needed for a competition compliance audit fall into ten core categories. Collect them early, maintain chain-of-custody records, and flag any material that may attract legal professional privilege before it is shared beyond the legal team.

Privilege note: legal-advice memoranda and privileged investigation reports must be logged on a separate privilege schedule. If the company later produces documents to Rekabet Kurumu, counsel must review each item for privilege claims and appropriate redactions before disclosure.

Compliance audit timeline and key deadlines

A competition compliance audit for a mid-sized company operating in Turkey typically takes 6–12 weeks from kick-off to delivery of the findings report. The variables that drive duration are data volume, the number of business units in scope, the complexity of the commercial arrangements under review, and whether forensic or eDiscovery technology is required.

Rekabet Kurumu-specific deadlines: when the Authority issues an information request or an investigation notice, response windows vary by the type and urgency of the request. Some requests specify a deadline of as little as a few days; others allow several weeks. There is no single statutory deadline that applies uniformly to all requests. Best practice is to treat every notice as urgent: issue an internal preservation hold immediately, notify external counsel within 24 hours, and have counsel review the notice to confirm the precise deadline and any extension procedure. Missing a regulator deadline can undermine mitigation arguments and may itself attract administrative sanctions.

Costs, fees, and tax considerations

The cost of a competition compliance audit in Turkey depends on scope, data volume, and whether external forensic support is needed. The table below provides estimated ranges based on market practice. All figures are indicative and should be confirmed with counsel during the scoping phase.

Tax considerations: audit and legal-advisory fees are generally deductible as professional expenses under Turkish corporate-tax rules. Companies should confirm the treatment of specific cost items, particularly forensic-vendor fees and training expenditure, with local tax counsel.

What changes in 2026, Communiqué No. 2026/2 and enforcement trends

Communiqué No. 2026/2, published in the Official Gazette and effective 1 March 2026, introduced revised merger-notification thresholds and updated several administrative procedures that affect how companies interact with Rekabet Kurumu. The likely practical effect is that a wider range of transactions now falls within the mandatory pre-notification regime, and companies that historically fell below the thresholds must reassess their filing obligations. The Communiqué also streamlined certain procedural steps for information requests, which early indications suggest has accelerated the Authority’s investigative pace.

Alongside the regulatory change, Q1 2026 saw a marked increase in Rekabet Kurumu sector inquiries and preliminary investigations. Industry observers expect enforcement intensity to remain elevated through at least the second half of 2026, particularly in sectors subject to recent sectoral studies (digital platforms, fast-moving consumer goods, and construction materials).

For companies running a competition compliance audit, the 2026 environment creates both higher exposure and stronger mitigation opportunities. Rekabet Kurumu practice recognises documented competition compliance programs as a factor in penalty assessment. The table below maps specific audit outputs to the mitigation leverage they provide when facing enforcement action, a framework directly relevant to mitigating fines in 2026.

Common pitfalls and how to avoid them

• Failing to issue a preservation hold immediately. Data deletion, even routine, automated deletion, after the audit is scoped can be treated as obstruction. Issue the hold before any substantive work begins and confirm receipt from every custodian in writing.
• Overbroad document production. Collecting everything wastes resources and increases the risk of inadvertent privilege waiver. Use targeted custodian lists, date ranges, and keyword filters to keep the review set manageable.
• Poor interview notes. Interviews are only as useful as the record they produce. Designate a trained note-taker, produce a written summary within 24 hours, and have the interviewee confirm factual accuracy (not legal conclusions).
• Ignoring trade-association exposure. Information exchanged at trade-association meetings, especially pricing, capacity, or customer data, is a leading source of Article 4 infringements. Audit trade-association participation as a standalone risk category.
• Mishandling voluntary disclosure. Self-reporting to Rekabet Kurumu without proper legal advice can waive privilege and expose the company to sanctions before a mitigation strategy is in place. Never contact the Authority without external competition counsel’s approval and a written options memo.
• Treating compliance training as a one-off exercise. A single training session does not constitute a credible CCP. Schedule annual refreshers, test comprehension, update materials to reflect regulatory changes (including Communiqué No. 2026/2), and keep auditable attendance records.

Sources

1. Rekabet Kurumu, official site (competition law guidance & publications)
2. ACTECON, Competition Compliance Turkey chapter (2023)
3. Practical Law / Westlaw, Competition audit checklist
4. Mondaq, Competition Compliance Program as a Mitigating Factor (Turkey)
5. Latham & Watkins, Competition Law Compliance Checklist
6. Global Law Experts, Turkey Competition Law 2025: Essential Guide to Antitrust Regulation and Enforcement