Publication
Distress signals: Cooperation agreements or mergers to the rescue in times of crisis?
The current volatile and unpredictable economic climate creates challenges for businesses.
Global | Publication | November 2019
This article was written by Ekin İnal, Partner at İnal Kama Attorney Partnership, affiliate firm of Norton Rose Fulbright in Turkey.
Data Controllers' Registry or VERBİS is a publicly available database kept by the Data Protection Board (the “Board”), the decision-making body of the Turkish Data Protection Authority (the “DPA”). Unless exempt from the requirement, all data controllers (individuals and legal entities) who process personal data in Turkey must be recorded with VERBİS prior to processing any personal data. The majority of data controllers must register by the end of this year. However, there are certain actions to be taken by the data controllers that must be taken into consideration to avoid any delays and possible penalties by the DPA.
Data controllers that fail to fulfil this obligation may be subject to an administrative fine in an amount between TL 20,000–1,000,000 (approx. US$3,600-180,000).
The following data controllers must complete their registration with VERBIS prior to the deadlines set forth below:
To the extent they process personal data, individuals must also register with VERBİS by the applicable deadline.
When assessing the registration obligation of foreign data controllers, the DPA has not taken into consideration the number of employees, annual financial statements or the scope of activities. These criteria apply to Turkish data controllers. The DPA has stated that it is required and sufficient that a foreign data controller processes personal data of data subjects resident/located in Turkey and there seems to exist no de minimis threshold for registration.
If a data controller becomes subject to the registration requirement after the deadlines listed above (as it fulfils the criteria), then it must register with VERBİS within 30 days upon fulfilment of the criteria. Exemption from the registration requirement does not relieve data controllers of other duties and obligations under the data protection legislation.
The registration process is similar for local and foreign data controllers, except that the foreign data controllers must first appoint a representative (veri sorumlusu temsilcisi) for VERBİS-related actions.
Below-listed information is required for VERBİS registration:
Publication
The current volatile and unpredictable economic climate creates challenges for businesses.
Publication
Recent tariffs and other trade measures have transformed the international trade landscape, impacting almost every sector, region and business worldwide.
Publication
In mid-March 2025, Cognia Law and Norton Rose Fulbright’s Legal Operations Consulting team co-hosted a second roundtable event that brought together senior leaders, including GCs, COO and head of legal operations, from across the legal industry to discuss how to drive meaningful change within the legal ecosystem.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2025