According to the decision of the Personal Data Protection Authority ("KVKK") dated 17.12.2019 numbered 2019/387, the deadline for registration obligation to Data Controllers' Registry Information System ("VERBIS") has been extended

With the relevant decision, it has been concluded that,

  • The deadline for fulfilling VERBIS registration (Data Controllers' Registry Information System) and declaration obligation to Registry for real and legal person data controllers with an annual number of employees of more than 50 or annual financial balance of more than 25 million TL to be postponed to 30.06.2020,
  • The deadline for fulfilling VERBIS registration (Data Controllers' Registry Information System) and declaration obligation to Registry for real and legal person data controllers resident abroad to be postponed to 30.06.2020
  • The deadline for fulfilling VERBIS registration (Data Controllers' Registry Information System) and declaration obligation to Registry for real and legal person data controllers with an annual number of employees of less than 50 or annual financial balance of less than 25 million TL and whose main activity is sensitive personal data processing to be postponed to 30.09.2020,
  • The deadline for fulfilling VERBIS registration (Data Controllers' Registry Information System) and declaration obligation to Registry for public institutions and organizations to be postponed to 31.12.2020,

and this decision to be announced at the website of the Authority and to be published in the Official Gazette.

We would like to emphasize that the relevant decision did not bring any changes about the compliance with the Law No. 6698 on the Protection of Personal Data ("KVKK") other than the registration deadline to VERBIS.

In order to protect the fundamental rights and freedoms of individuals, especially the privacy of individuals, real and legal persons who process personal data are required to complete the compliance processes related to their administrative and technical obligations in processing personal data.

CURRENT DATES AND DEADLINES PROVIDED BY THE AUTHORITY FOR VERBIS REGISTRATION:

Data Controllers Start Date of Registration Obligation Period of Time Given for Registration Deadline for Registration

Real and legal person data controllers with an annual number of employees of more than 50 or annual financial balance of more than 25 million TL

01.10.2018 21 months 30.06.2020

Real and legal person data controllers resident abroad

01.10.2018 21 months 30.06.2020

Real and legal person data controllers with an annual number of employees of less than 50 or annual financial balance of less than 25 million TL and whose main activity is sensitive personal data processing

01.01.2019 21 months 30.09.2020

Public institutions and organizations

01.04.2019 21 months 31.12.2020

The announcement of the Board in Turkish can be accessed here.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.