As you might recall, the Regulation on Data Protection Registry
was published by the Data Protection Board
("DPA") literally on the last days of
2017 and entered into force as of 1 January 2018. This was the main
piece of legislation regarding the registry system applicable for
data controllers. The online registration system is called
VERBIS and is expected to be live and running as
of October 2018.
On August 18, 2018, just before the Bayram Holidays (Eid), the
DPA announced the registration dates for four different data
controller groups and as well as the additional list of exemptions
from the registration.
Accordingly, the registration obligation will first start as of
October 2018 for (i) the companies with more than 50 employees or
annual balance sheet total of at least 25 million TL and (ii)
foreign data controllers.
