Recent Development
The Data Protection Authority (“Authority“) announced the starting dates for the obligation to register with the Data Controllers Registry (“VERBİS“).
What Does the Decision Mean?
Pursuant to the Authority’s decision published on August 18, 2018,
- Data controllers that employ more than 50 employees and whose annual financial statement exceeds TRY 25 million must register with VERBİS between October 1, 2018 and September 30, 2019;
- Data controllers established outside of Turkey must register with VERBİS between October 1, 2018 and September 30, 2019;
- Data controllers that employ less than 50 employees and whose annual financial statement does not exceed TRY 25 million, but whose core business includes the processing of sensitive personal data must register with VERBİS between January 1, 2019 and March 31, 2020; and
- Public institutions and organizations that act as data controllers must register with VERBİS between April 1, 2019 and June 30, 2020.
Conclusion
Data controllers should carefully assess the registration dates applicable to them and take the necessary actions to ensure compliance.
