Open menu
22Nisan2022

Administrative Sanctions Has Started Implementing by Turkish DPA for Data Controllers Who Are Not Registered VERBIS

Administrative Sanctions Has Started Implementing by Turkish DPA for Data Controllers Who Are Not Registered VERBIS

As it is known, Art. 16 of the Turkish Data Protection Law ("KVKK") numbered 6698 states that "Natural and legal persons who process personal data shall register with the Data Controllers Registry prior to the start of data processing" and with the provision "Data controllers are obliged to register Data Controllers’ Registry Information System ("VERBIS") within the period determined and announced by the Authority" provision is included.

Those are obliged to register with VERBIS listed below,

  • Natural and legal person data controllers whose employees more than 50 per year or whose annual financial balance sheet total is more than 25 million TRY,
  • Natural and legal person data controllers residing abroad,
  • Natural and legal person data controllers whose employees less than 50 per year or whose annual financial balance sheet total is less than 25 million TRY and whose main field of activity is processing sensitive personal data,
  • Data controllers of public institutions and organizations and professional organizations in the nature of public institutions.

they were given time to fulfill their obligation to register and notify until December 31, 2021.

Administrative sanctions may be imposed by the Turkish DPA on data controllers do not fulfill their obligation to register and notify with VERBİS in accordance with the "Those fail to meet the obligations for enrolling with the VERBIS and making a notification shall be required to pay an administrative fine of 20,000 to 1,000. 000 TRY." provision of the KVKK. The fines increase each year according to the revaluation rate, and this amount is determined as an administrative fine from 53,576 TRY to 2,678.866 TRY for 2022.

You can find our article on administrative fines to be applied in 2022 here.

In this context, administrative sanctions have been initiated against data controllers who are found to have not fulfilled their obligation to register and notify.

Should you have any queries or need further details, please contact your customer representative.

Yazar CottGroup Hukuk ve Mevzuat Ekibi, Kategori Personal Data Protection Law

  • Notification!

    The content in this article is for general information purposes only and belongs to CottGroup® member companies. This content does not constitute legal, financial, or technical advice and cannot be quoted without proper attribution.

    CottGroup® member companies do not guarantee that the information in the article is accurate, up-to-date, or complete and are not liable for any damages that may arise from errors, omissions, or misunderstandings that the information may contain.

    The information presented here is intended to provide a general overview. Each specific case may require different assessments, and this information may not be applicable to every situation. Therefore, before taking any action based on the information provided in the article, it is strongly recommended that you consult a competent professional in the relevant fields such as legal, financial, technical, and other areas of expertise. If you are a CottGroup® client, do not forget to contact your client representative regarding your specific situation. If you are not our client, please seek advice from an appropriate expert.

    To reach CottGroup® member companies, click here.

About The Author

/tr/mevzuat/item/verbi-s-kaydi-bulunmayan-veri-sorumlularina-kurum-tarafindan-i-dari-yaptirim-uygulanmaya-baslandi

Diğer Mevzuatlar