Turkey Announces Further Exemptions From Registering With The Data Controller Registry And Publishes New Rulings On Processing Personal Data

Turkey's Data Protection Board ("Board") has extended the scope of data controllers which are exempt from registering with the Data Controllers Registry ("Registry"), as well as the dates which data controllers must register. The Board has also published new rulings which shed light on some important matters regarding personal data processing.

Additional criteria extending the scope of data controllers who will be exempt from registration to the Registry

In addition to the data controllers exempt from registration, data controllers which employ less than 50 employees and with an annual balance sheet total less than 25 million Turkish Liras turnover are also exempt from the requirement to register with the Registry (unless the data controller's main business activity is processing sensitive personal data). Customs brokers and mediators are also released from such obligation previously. The Board's ruling number 2018/87 was made on 19 July 2018.