Extension of the Deadline for Registration to Data Controllers Registry

The Regulation on the Data Controllers Registry (the « Registry Regulation« ) had come into force on 1 January 2018 pursuant to the Law on the Protection of Personal Data Numbered 6698. The Registry Regulation requires data controllers (in Turkish, “veri sorumlusu”) to be registered with the official Data Controllers Registry (“Registry”) (in Turkish, “veri sorumluları sicili”).

As explained in our previous Newsletters, the registry information system of data controllers (in Turkish, « VERBİS« ) is going to be used by the data controllers to be registered with the Registry.

The Board of Protection of Personal Data (the “Board” ) with its resolution dated 3 September 2019 and numbered 2019/265 has postponed the deadline for registration on VERBIS from 30 September 2019 to 31 December 2019 for real or legal person data controllers having (i) more than 50 employees annually or (ii) an annual balance sheet value of TRY 25 million or more, and (iii) for real or legal person data controllers residing abroad.

Nevertheless, for the natural and legal person data controllers whose having less than 50 employees annualy and an annual balance sheet value of less than TRY 25 million but whose main activity is processing sensitive personal data, the deadline is still 31 March 2020, while the deadline for state institutions and organizations is still 30 June 2020.

Our Law Firm remains at your disposal for any further clarifications you may need.