Law on the Protection of Personal Data
Since the enactment of the Law on the Protection of Personal Data, a number of obligations have arisen for real and legal entities regarding personal data. The most important of these is the Data Controllers Registry Information System, or VERBİS for short. According to the provisions of the law, the first thing individuals and legal entities processing personal data must do is to register with VERBİS. Relevant real and legal entities are obliged to disclose their data processing activities to VERBİS. The procedure to be followed with the Law on the Protection of Personal Data is defined through this system. You can get professional support from online websites.
Creating a VERBİS Registration
To register with VERBİS, you need to log in to the website of the Law on the Protection of Personal Data, i.e., kvkk. After clicking on VERBİS on the opened page and filling in the relevant sections, you should register with the system. The real contact person appointed by the data controller completes the registration process by clicking the “Register with the Registry” button in VERBİS and filling in the requested information.
Who Does VERBİS Cover?
According to Law No. 6698 on the Protection of Personal Data, all real and legal entities that process any or all of an individual's personal data by any means are obliged to register with VERBİS. For companies, if there is a non-compliance situation, they are obliged to arrange all their processed data in compliance with the law as of April 7, 2018. According to Article 16 of the Law on the Protection of Personal Data, there are some exceptions to the obligation to register with VERBİS. These exceptions are:
- Notaries
- Political Party Groups
- Lawyers
- Customs Brokers
- Mediators
- Those who process personal data only in a non-automated manner, provided they are part of a data registry system on any platform
- Independent Accountants and Financial Advisors and Sworn Financial Advisors
- Associations
- Unions and foundations that process personal data only for their own employees, their affiliated members, donors, and members, in accordance with the relevant legislation and purposes
- Those whose total annual number of employees does not exceed 50 and whose annual financial balance sheets are less than 25 million.
