Publication
Grenfell Inquiry second report: bracing for change in the UK construction industry
On 4 September 2024, the long-awaited Grenfell Tower Inquiry: Phase 2 Report (the Grenfell Report) was published.
Global | Publication | November 2019
This article was written by Ekin İnal, Partner at İnal Kama Attorney Partnership, affiliate firm of Norton Rose Fulbright in Turkey.
Data Controllers' Registry or VERBİS is a publicly available database kept by the Data Protection Board (the “Board”), the decision-making body of the Turkish Data Protection Authority (the “DPA”). Unless exempt from the requirement, all data controllers (individuals and legal entities) who process personal data in Turkey must be recorded with VERBİS prior to processing any personal data. The majority of data controllers must register by the end of this year. However, there are certain actions to be taken by the data controllers that must be taken into consideration to avoid any delays and possible penalties by the DPA.
Data controllers that fail to fulfil this obligation may be subject to an administrative fine in an amount between TL 20,000–1,000,000 (approx. US$3,600-180,000).
The following data controllers must complete their registration with VERBIS prior to the deadlines set forth below:
To the extent they process personal data, individuals must also register with VERBİS by the applicable deadline.
When assessing the registration obligation of foreign data controllers, the DPA has not taken into consideration the number of employees, annual financial statements or the scope of activities. These criteria apply to Turkish data controllers. The DPA has stated that it is required and sufficient that a foreign data controller processes personal data of data subjects resident/located in Turkey and there seems to exist no de minimis threshold for registration.
If a data controller becomes subject to the registration requirement after the deadlines listed above (as it fulfils the criteria), then it must register with VERBİS within 30 days upon fulfilment of the criteria. Exemption from the registration requirement does not relieve data controllers of other duties and obligations under the data protection legislation.
The registration process is similar for local and foreign data controllers, except that the foreign data controllers must first appoint a representative (veri sorumlusu temsilcisi) for VERBİS-related actions.
Below-listed information is required for VERBİS registration:
Publication
On 4 September 2024, the long-awaited Grenfell Tower Inquiry: Phase 2 Report (the Grenfell Report) was published.
Publication
On 3 September 2024, the ECJ delivered its judgment in Illumina’s appeal against the General Court’s (GC) judgment confirming the European Commission’s (EC) powers to review concentrations under the EU Merger Regulation (EUMR) in circumstances where no Member State has jurisdiction under national law.
Publication
One of the driving forces of the ‘fourth industrial revolution’ - AI- has the potential to redefine and disrupt industries worldwide. The MENA insurance industry is no exception, offering a unique landscape for AI adoption characterised by significant challenges and opportunities. Middle East Insurance Review spoke to Norton Rose Fulbright’s Ms Shabnam Karim and Messrs Shiv Daddar, Simon Lamb and Marcus Evans to find out more.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2023