Some of the important updates on data protection legislation in
Turkey in the beginning of the new year are:
1. The Regulation on Data Controller Registry ("RDCR")
was published on December 30, 2017 and came into force on January
1, 2018. The data controllers, who will not be exempted by the Data
Protection Board ("Board"), will have to register to Data
Controller Registry system called VERBIS. The Board's
announcement of January 2, 2018 stated that the obligation of
VERBIS registration will begin on the date the Board will
determine, which will be after initiation of VERBIS and
identification of exemption criteria by the Board.
As RDCR requires data controllers to complete their
registration, we recommend data controllers to register immediately
after the registration commencement date is announced by the Board.
Although the Board will determine the exemption criteria, we
recommend data controllers to begin preparations assuming they will
not be exempt. The
