While it doesn't change (or answer) the question on how to bypass the filtering, what the poster does not make clear is that the "safe internet" infrastructure that will be enabled by all operators (due to government regulation) will be opt-in. Unless subscribers specifically request that their internet be filtered, their traffic will not even pass through the filtering system, and the Turkish government has specifically stated (believable or otherwise) that they have no intention of making the system mandatory, and the ISPs have dimensioned their newly purchased parental control systems accordingly which means that the new systems are not designed or capable of handling the load of all subscribers...

This is most Likely done with SACC. It's a built in function of the GGSN...

Speaking as someone who works in IT, I would like to remond you that IT reports to business, and there are all sorts of (legal) reasons why business can order IT to inspect your company owned PC and company owned email account. If you have private information on a work PC, you shouldn't. If you send private mail through a work email account you shouldn't. If you use a work telephone for private calls, you shouldn't. It is unethical on your behalf to use work resources for private business and you should have no expectation of privacy.
To answer the second part of your question, you can easily use truecrypt, GPG or any other encryption program to store data on PC (that hopefully you own) and as long as you use a decent passphrase it would be very difficult for anyone to access should you die. Putting this on a $15 per month VPS is an excercise for the reader...

Yes. They almost certainly changed the password with TR-069 (otherwise known as "CPE WAN Management Protocol"). TR-069 has been a required feature in all major CPE tenders for all major ISPs across the globe for several year now. You can read more about the TR standards on the
Broadband Forum's Technical Reports page