Recent Developments
The Data Protection Authority launched the Data Controllers’ Registry (“VERBİS“) on October 1, 2018, enabling data controllers subject to the registration requirements under the Regulation on the Data Controllers’ Registry to fulfill their obligations through the online system.
What’s New?
Pursuant to Article 16 of Law No. 6698 on the Protection of Personal Data (“Data Protection Law“), all data controllers that process personal data must register with the VERBİS prior to initiating activities involving the processing of personal data. The VERBİS is open to public access and operational as of October 1, 2018.
The Data Protection Authority also published system guidelines. The guidelines provide detailed information and instructions regarding registration and logging into the system; procedures for assigning a contact person or a data controller representative for foreign data controllers; and inquiry procedures on the VERBİS. The guidelines are available here (in Turkish).
The VERBİS can be accessed on the Data Protection Authority’s website here.
Conclusion
The Data Protection Authority continues to take actions to implement the Data Protection Law and provide guidance for data controllers. Data controllers must carefully review the guidelines and register with the VERBİS, providing all the necessary information to comply with the Data Protection Law. Registrations must be completed by the deadlines stipulated in the Data Protection Board decision dated August 18, 2018.
