The Turkish Data Protection Authority launched the Data Controllers' Registry (VERBİS) on October 1, 2018, enabling data controllers subject to the registration requirements under the Regulation on the Data Controllers' Registry to fulfil their obligations through the online system.
Pursuant to Article 16 of Law No. 6698 on the Protection of Personal Data (Data Protection Law), all data controllers that process personal data must register with VERBİS prior to initiating activities involving the processing of personal data. VERBİS is operational as of October 1, 2018 and accessible on the Data Protection Authority's website here.
The Data Protection Authority has also published system guidelines. These provide detailed information and instructions regarding registration and logging into the system, procedures for assigning a contact person or a data controller representative for foreign data controllers, and inquiry procedures on VERBİS. The guidelines are available here (in Turkish).
The Data Protection Authority continues to take action to implement the Data Protection Law and provide guidance for data controllers. Data controllers must carefully review the guidelines and register with VERBİS, providing all the necessary information to comply with the Data Protection Law. Registrations must be completed by the deadlines stipulated in the Data Protection Board decision dated August 18, 2018. We summarized these in our article in the previous edition of LegalBytes here.