Exemption Criteria For VERBIS Registration Obligation Have Been Changed

With the announcement of the Personal Data Protection Authority on July 25, 2023, the criteria for exceptions to the Data Controllers Registry ("VERBIS") registration obligation have been updated.

Pursuant to Law No. 6698 on the Protection of Personal Data, the Personal Data Protection Authority is authorized to make exceptions to the obligation to register with the Data Controllers Registry and to determine the scope and methods of application of these exceptions. According to the previous regulation, data controllers whose main activities are not based on the processing of special categories of personal data and whose number of employees is less than fifty (50) annually and annual financial statement total is less than twenty-five million Turkish Liras (TRY 25.000.000) were exempted from the obligation to register with VERBIS.