Regulation On Data Controllers' Registry Is Published In The Official Gazette, Here Is What's Next For The Registration Obligations

As our readers will recall from our coverage of the new Turkish "Data Protection Law", one of the main obligations of the data controllers is to register with a publicly available Data Controllers' Registry ("Registry"), non-compliance of which may lead to administrative fines up to c. €250,000.

The Regulation on Data Controllers' Registry (the "Regulation"), yet another anticipated regulation to be drafted within the framework of the Data Protection Law, is published in the Official Gazette no. 30286 and dated 30 December 2017.

Below is a brief summary of the major revelations under the Regulation.

Obligation to register with the Registry

The Regulation requires data controllers to register with the Registry before they engage in any personal data processing activities. The Registry will be an online database and the applications thereto shall be accepted through an electronic system called VERBIS (i.e. data controllers' registry information system). The