Recent Development

The Data Protection Authority ("Authority") announced that registration with the Data Controllers Registry ("VERBİS") is now open for second group data controllers.

What Does the Announcement Mean?

According to the Authority's announcement on 2 January 2019, second group data controllers can now register with VERBİS beginning on 1 January 2019. Second group controllers are data controllers that employ less than 50 employees and whose annual financial statement does not exceed TRY 25 million, but whose core business includes the processing of sensitive personal data. Second group data controllers must register with VERBİS until 31 March 2020.

Conclusion

Data controllers should carefully assess the above registration dates and take the necessary actions to ensure compliance.