Identify the information and purpose
List the information to be shared and why. Technical files, pricing, customer details and business plans may require different treatment. Compare definitions, examples, exclusions and marking requirements with the actual workflow. Identify information that should not yet be disclosed.
Match access to the real team
Identify recipients, employees and service providers who need access. Discuss whether narrowly or broadly drafted permissions fit the planned work and what controls apply. Consider shared folders, email, physical records and online meetings separately.
Discuss use and retention
Clarify whether information is for evaluation or performance of an agreement. Explain copying, internal notes, backups and transfers required by the workflow. For return or deletion obligations, identify the relevant records and systems. Avoid accepting operationally unrealistic commitments just because they appear in a standard template.
Review related obligations
Consider duration, sanctions, liability and dispute provisions together. A confidentiality commitment does not automatically resolve other obligations affecting personal data. The Turkish data protection authority’s security guide is a relevant official resource. This preparation guide is not a complete compliance or contract assessment.
Before your consultation
- Information types and purposes
- Recipients and sharing channels
- Retention, return and deletion questions
Frequently asked questions
Does a confidentiality agreement resolve every sharing issue?
No. Other contractual or legal obligations may apply depending on the information and circumstances.
Can I question the other party’s template?
Prepare questions and proposed revisions. Their suitability depends on the particular relationship.
General information only; not a substitute for legal advice on a specific matter.