Video
Let's talk antitrust: Discussing recent cases and emerging competition issues
Recent cases and judgments have shone a light on some emerging themes and trends that companies will want to consider as part of their risk management framework.
Global | Publication | November 2019
This article was written by Ekin İnal, Partner at İnal Kama Attorney Partnership, affiliate firm of Norton Rose Fulbright in Turkey.
Data Controllers' Registry or VERBİS is a publicly available database kept by the Data Protection Board (the “Board”), the decision-making body of the Turkish Data Protection Authority (the “DPA”). Unless exempt from the requirement, all data controllers (individuals and legal entities) who process personal data in Turkey must be recorded with VERBİS prior to processing any personal data. The majority of data controllers must register by the end of this year. However, there are certain actions to be taken by the data controllers that must be taken into consideration to avoid any delays and possible penalties by the DPA.
Data controllers that fail to fulfil this obligation may be subject to an administrative fine in an amount between TL 20,000–1,000,000 (approx. US$3,600-180,000).
The following data controllers must complete their registration with VERBIS prior to the deadlines set forth below:
To the extent they process personal data, individuals must also register with VERBİS by the applicable deadline.
When assessing the registration obligation of foreign data controllers, the DPA has not taken into consideration the number of employees, annual financial statements or the scope of activities. These criteria apply to Turkish data controllers. The DPA has stated that it is required and sufficient that a foreign data controller processes personal data of data subjects resident/located in Turkey and there seems to exist no de minimis threshold for registration.
If a data controller becomes subject to the registration requirement after the deadlines listed above (as it fulfils the criteria), then it must register with VERBİS within 30 days upon fulfilment of the criteria. Exemption from the registration requirement does not relieve data controllers of other duties and obligations under the data protection legislation.
The registration process is similar for local and foreign data controllers, except that the foreign data controllers must first appoint a representative (veri sorumlusu temsilcisi) for VERBİS-related actions.
Below-listed information is required for VERBİS registration:
Video
Recent cases and judgments have shone a light on some emerging themes and trends that companies will want to consider as part of their risk management framework.
Publication
After a lacklustre finish to 2022 when compared to the vintage year for M&A that was 2021, dealmakers expected 2023 to see the market continue to cool in most sectors, in response to the economic headwinds of rising inflation (with its corresponding impact on financing costs), declining market valuations, tightening regulatory scrutiny and increasing geopolitical tensions.
Publication
On 18 September 2023, the CMA published its Initial Report (Initial Report) on AI Foundation Models (FM), supplemented in April 2024 with the publication of its “Update Paper” focused on potential antitrust risks associated with FMs and a “Technical Update Report” providing more detail on the development on FMs (collectively the “Reports”). Below, we consider these CMA publications.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2023