lighted bridge over water at night time

UPDATE: VERBİS registration deadlines extended due to Covid-19

June 24, 2020

The Data Controllers' Registry or VERBİS is a publicly available database kept by the Data Protection Board (the “Board”), the decision-making body of the Turkish Data Protection Authority (the “DPA”). Unless exempt from the requirement, all data controllers (individuals and legal entities) who process personal data in Turkey must be recorded with VERBİS prior to processing any personal data.

With its decision dated June 23, 2020, the Board extended the VERBİS registration deadline until September 30, 2020 for:

  • Turkish data controllers with more than 50 employees annually or whose annual total financial statement exceeds TL 25,000,000 (approx. USD 3.7 million), and
  • Data controllers located outside of Turkey.

In addition, Turkish data controllers which have less than 50 employees annually and whose annual total financial statement is less than TL 25,000,000, but whose main business is processing sensitive personal data must register by March 31, 2021. Public and governmental institutions must also register by March 31, 2021.

Failure to register can expose data controllers to an administrative fine in an amount between TL 36,050 –1,802,640 (approx. USD 5,264 - 263,204).

Click here for additional information on VERBİS and registration requirements.