Former Manager Keeps Company Laptop and Data After Leaving Turkey: Can Criminal Charges Be Filed? (2026 Updated Guide)

A former manager leaves Turkey with a company laptop, files or confidential data. Learn when Turkish criminal proceedings may be possible, how digital evidence can be preserved and how companies can seek return of devices and data.

When a manager, director or senior employee leaves a company in Turkey but keeps a company-owned laptop, external drive, mobile phone or confidential business data, the dispute can quickly develop beyond an ordinary employment disagreement. The company may be concerned about the physical device itself, but the more serious risk is often the information stored on it: customer databases, financial records, passwords, source files, trade secrets, contracts, internal correspondence and strategic documents. Depending on the facts, Turkish criminal law may become relevant, but criminal liability is not automatic merely because a former manager has failed to return a laptop. Ownership of the device, authority to possess it, demands for return, conduct involving company data and evidence of unauthorized access, copying, destruction or disclosure must be examined separately.

Is Keeping a Company Laptop After Leaving Employment Automatically a Crime?

Not necessarily. The first question is how the former manager obtained and possessed the laptop.

If the company voluntarily provided the device for business use, initial possession was normally lawful. The legal analysis then concerns what happened after employment or managerial authority ended.

A failure to return property can potentially create criminal-law issues depending on the circumstances, but the facts must be distinguished from a genuine contractual or employment dispute.

Establish Who Owns the Laptop

The company should immediately collect evidence demonstrating ownership. Relevant material may include purchase invoices, fixed-asset records, inventory lists, device serial numbers, IT assignment forms and employment documentation.

A criminal complaint should not be based merely on the assumption that the device belongs to the company.

Was the Laptop Given Permanently or Only for Business Use?

This distinction can become important. A device assigned temporarily for performance of employment duties is different from equipment transferred permanently as part of compensation or another agreement.

The company’s internal records should establish the nature of the assignment.

Send a Clear Demand for Return

If the manager has left employment and continues holding company equipment, the company should generally document its demand for return.

The notice should identify the laptop or other property accurately and provide a clear record that authorization to retain company property has ended.

Do Not Focus Only on the Hardware

The market value of the laptop may be relatively modest compared with the value of the information stored on it.

The company should separately investigate whether the former manager possesses customer records, commercial contracts, pricing information, financial documents, intellectual property, access credentials or other confidential files.

Copying Company Data Can Create a Separate Legal Issue

A former manager might return the physical laptop while retaining copies of company files on another computer, external drive, cloud account or personal email.

Therefore, physical return of the computer does not necessarily resolve the data-security problem.

Identify What Data Was Accessible

The company’s IT team should determine which folders, servers, databases and applications the former manager could access before departure.

This helps distinguish authorized historical access from activity occurring after authority ended.

Preserve Access Logs Immediately

Companies should preserve available server logs, cloud-access records, email logs, VPN records, file-transfer history and other digital evidence.

Digital records may be overwritten automatically, so delay can result in loss of valuable evidence.

Was Data Downloaded Before the Manager Left?

A sudden large download shortly before resignation or dismissal can be significant, particularly if it differs substantially from ordinary work activity.

However, a download should not automatically be characterized as criminal. The employee’s role and legitimate business responsibilities must also be examined.

Personal Email Transfers Should Be Investigated

If company files were forwarded to a personal email account, preserve the available corporate email evidence.

The company should identify precisely which files were transferred rather than making an unsupported allegation that “all confidential information was stolen.”

External Storage Devices May Be Relevant

Available IT records may show connection of USB drives or other external devices. Such evidence can assist an investigation, but its meaning should be assessed carefully.

Connecting an external device alone does not establish that confidential information was unlawfully copied.

Cloud Storage Creates Additional Risks

Files may have been uploaded to personal cloud-storage services before the manager left Turkey.

Companies should preserve legally available audit information showing file names, dates, account activity and transfer events.

Unauthorized Access After Employment Ends Is Particularly Important

If the former manager continues accessing company systems after termination of authorization, the situation can raise separate questions concerning unauthorized access to information systems.

The company should therefore disable credentials promptly when the employment or management relationship ends.

Change Passwords and Revoke Credentials

The company should review email accounts, VPN credentials, cloud platforms, administrator privileges, financial systems and third-party applications.

Shared passwords should be changed immediately.

Remote Deletion Requires Caution

A company may have technical tools capable of remotely locking or wiping a company device. Before deleting information, however, consider whether doing so could destroy evidence needed for a criminal, civil or employment dispute.

Evidence preservation should be coordinated with cybersecurity and legal strategy.

Could Breach of Trust Be Relevant?

Depending on the precise circumstances, allegations concerning property entrusted to a person and retained or used contrary to the purpose of delivery may require examination under Turkish criminal-law provisions concerning breach of trust.

Whether the elements are satisfied depends on the factual relationship, possession arrangement and conduct after the manager’s authority ended.

Could Information-System Offenses Be Relevant?

Potentially. If the former manager accesses company information systems without authorization, interferes with data or systems, destroys or alters information, separate cybercrime provisions may become relevant.

Merely possessing a previously authorized company laptop should not be confused with unauthorized system access.

What If Company Data Is Deleted?

Intentional deletion, alteration or destruction of business data can materially change the legal analysis.

The company should preserve backups, logs and forensic evidence capable of demonstrating what information existed and what happened to it.

What If the Former Manager Uses the Data for a Competitor?

This may create several overlapping issues. Depending on the facts, the company may need to evaluate criminal-law remedies, unfair-competition rules, confidentiality obligations, trade-secret protection and contractual claims.

The evidence should identify the specific information allegedly used or disclosed.

Trade Secrets Require Particular Attention

Companies should document why particular information is confidential.

Customer lists, pricing structures, technical information and strategic documents are not strengthened as evidence merely by describing everything within the company as a “trade secret.”

Access restrictions, confidentiality policies and actual commercial sensitivity can become important.

Review the Employment and Management Agreements

Examine provisions concerning company property, confidentiality, data security, intellectual property, return of documents and post-termination obligations.

Signed equipment-delivery forms can be especially useful.

Preserve the Employee’s Exit Documentation

Keep resignation letters, termination notices, handover records and communications concerning the return of company property.

These documents can establish when the person’s authority ended.

Can the Company File a Criminal Complaint in Turkey?

Potentially. If the available facts indicate conduct falling within a criminal offense, a complaint may be submitted to the competent authorities.

The complaint should describe specific acts and evidence rather than attempting to convert an ordinary commercial disagreement into a criminal case.

What Evidence Should Accompany the Complaint?

A well-prepared file may include ownership records for the laptop, equipment assignment forms, termination documents, demands for return, communications with the former manager, IT logs, forensic findings, confidentiality agreements and records identifying the data involved.

The evidence should be organized chronologically.

Digital Forensics May Be Necessary

Where copying, deletion or unauthorized access is alleged, professional forensic examination can become critical.

The company should preserve original digital evidence and maintain an appropriate evidentiary record rather than relying solely on screenshots prepared by employees.

Avoid Altering Digital Evidence

Original files, logs and devices should be preserved wherever possible. Repeatedly opening or modifying files can complicate later forensic analysis.

Create appropriate forensic copies where technically and legally suitable.

Can Prosecutors Seize the Laptop?

Where the legal requirements are satisfied during a criminal investigation, judicial authorities may consider search or seizure measures relating to relevant devices or digital evidence.

Whether such measures are appropriate depends on the alleged offense, evidence and procedural requirements of the individual case.

What If the Former Manager Has Already Left Turkey?

Leaving Turkey does not automatically prevent a Turkish investigation. However, cross-border investigation and recovery can become more complicated.

The company should identify the person’s location if legitimately known and preserve evidence showing that the relevant conduct or damage has a sufficient connection with Turkey.

Can Turkey Force the Return of a Laptop Located Abroad?

Cross-border recovery is more complicated than domestic possession. Criminal procedure, international cooperation and civil remedies may need to be considered separately.

The company should not assume that filing a Turkish complaint automatically results in foreign authorities recovering the device.

Jurisdiction Must Be Examined

Where the laptop is abroad and some alleged conduct occurred outside Turkey, jurisdiction should be assessed according to the nature and location of the alleged offense, the relevant parties and the consequences in Turkey.

Cross-border facts require a more careful analysis than an ordinary domestic employee-property dispute.

What If the Former Manager Offers to Return the Laptop?

The company should arrange a documented handover. Record the serial number, physical condition and date of return.

Where data misuse is suspected, consider preserving the device for forensic examination before it is returned to ordinary business use.

Do Not Reset the Laptop Immediately

A returned laptop may contain evidence showing file transfers, external devices, cloud activity or deletion.

Formatting or reassigning it to another employee can destroy valuable forensic information.

Can the Company Demand Deletion of Copies?

Contractual, civil and other legal remedies may potentially be available to prevent continued possession or use of confidential information.

Where appropriate, the company may seek confirmation concerning copies held on personal devices, email accounts or cloud systems.

Emergency Civil Measures May Also Be Important

A criminal complaint is not always the fastest or only method for protecting company information.

Depending on the facts, urgent civil or commercial measures may be considered to prevent disclosure, use or transfer of confidential information.

Criminal and Civil Remedies Can Proceed Separately

The company may have claims for return of property, damages, breach of contract or unfair competition even where criminal liability cannot ultimately be established.

A prosecutor’s decision does not necessarily determine every private-law issue.

Employment Claims Should Be Kept Separate

A former manager may simultaneously have wage, severance or other employment claims.

The company should avoid suggesting that company equipment is being used as leverage in an unrelated employment dispute, and the former manager should not treat possession of company property as security for alleged unpaid entitlements.

What If the Manager Claims the Laptop Contains Personal Data?

A company device may contain personal files because it was used during employment. That does not automatically determine ownership of the physical device.

A controlled return and data-handling protocol may be needed to address legitimate personal information without compromising company evidence.

Personal Data of Customers and Employees Can Increase the Risk

If the device contains personal information belonging to customers, employees or business partners, the company should separately assess its data-protection obligations and security response.

The incident may therefore require more than a property-recovery strategy.

Foreign-Owned Companies Should Establish Exit Procedures

International companies operating in Turkey should maintain a formal departure protocol for managers and employees.

Company laptops, mobile phones, access cards, security tokens, passwords and corporate files should be addressed before the person’s final working day wherever possible.

Maintain an Equipment Register

Every company device should be linked to a user, serial number and assignment record.

This simple measure can significantly strengthen later evidence concerning ownership and possession.

Use Individual Accounts Rather Than Shared Credentials

Shared administrator passwords make it difficult to determine who accessed or changed information.

Individual credentials and proper logging provide substantially better evidence if a dispute develops.

Conduct a Pre-Departure Access Review

For senior managers with extensive access, the company should identify sensitive systems before departure and plan credential termination carefully.

The objective is both security and preservation of evidence.

Immediate Action Plan

When a former manager leaves Turkey with a company laptop or corporate data, the company should immediately document ownership, send a formal return demand where appropriate, preserve IT and access logs, disable unnecessary credentials, identify sensitive data accessible to the manager, preserve evidence of downloads or transfers, review confidentiality and equipment agreements, avoid destroying digital evidence, assess data-protection implications and determine whether criminal, civil, commercial or employment remedies—or a combination of them—are appropriate.

Frequently Asked Questions

Is keeping a company laptop after resignation automatically a crime in Turkey?

No. Criminal liability depends on the specific circumstances, including ownership, the purpose for which possession was originally transferred and the person’s conduct after authorization ended.

Can the company file a criminal complaint?

Potentially, where the facts indicate conduct satisfying the elements of a criminal offense. The complaint should be supported by specific evidence.

What if the former manager copied company files before leaving?

The company should preserve access logs, email records, transfer information and other available digital evidence and evaluate whether the copying or subsequent use was unauthorized.

What if the laptop has already been returned?

Return of the device does not necessarily resolve allegations concerning copied, deleted, disclosed or retained company information.

Can a company remotely wipe the laptop?

Technical capability does not automatically mean immediate deletion is the best legal strategy. Wiping a device can destroy evidence, so evidence preservation should be considered first.

What if the former manager is already outside Turkey?

A Turkish investigation may still potentially be relevant, but jurisdiction, evidence gathering and cross-border recovery require case-specific analysis.

Can the company recover confidential data stored abroad?

Potential remedies depend on where the data are stored, who controls them and the applicable criminal, civil and international procedures.

Can the company seek damages?

Potentially. Contractual, employment, commercial or other civil claims may exist depending on the loss and legal basis.

Should the company preserve the returned laptop?

Yes, particularly where unauthorized copying, deletion or system activity is suspected. Immediate formatting may destroy important evidence.

What is the most important first step?

Preserve evidence before taking irreversible technical action. Establish ownership of the equipment, determine exactly what company information the former manager possessed or accessed, secure the company’s systems and separate the physical-property issue from potential unauthorized copying, disclosure, deletion or use of corporate data.

Client-Focused Legal Support for Company Data and Criminal Investigations in Turkey

Disputes involving former managers can develop into complex matters involving company property, confidential data, unauthorized system access, trade secrets, digital evidence, criminal complaints and cross-border recovery. Fırat Fesih Kaya Law Office assists foreign companies, international investors and businesses operating in Turkey when former directors, managers or employees retain corporate devices or sensitive information. Lawyer Fırat Fesih Kaya provides legal assistance in preserving digital evidence, evaluating criminal complaints, coordinating forensic evidence, seeking return of company property, protecting confidential business information and managing related civil and commercial proceedings.

Phone:
+90 312 434 22 22

Mobile:
+90 532 769 22 22

Email:
info@firatfesihkaya.av.tr

Address:
Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey