A number of industry representatives have applied to the Personal Data Protection Authority (“Authority”) for the extension of Data Controllers’ Registry (“VERBIS”) registration obligation on the grounds that due to the COVID-19 pandemic some workplaces are physically closed or the remote or implement alternate working models and therefore the data controllers cannot prepare personal data inventories and VERBİS registration obligation cannot be fulfilled in due time. Consequently, the Authority has decided to extend the deadlines envisaged for data controllers to fulfill their VERBIS registration obligation.
With the Authority’s decision dated 23 June 2020 and numbered 2020/482, the timeline for VERBİS registration obligation is determined as follows;
- 30 September 2020 for the data controllers with more than 50 employees annually or whose total annual financial statement exceeds TRY 25 million and or data controllers residing or registered outside of Turkey.
- 31 March 2020 for the data controllers have less than 50 employees and an annual balance sheet above TRY 25 million but process special category of personal data as part of its main activity.
- 31 March 2020 for the public entity data controllers.
Please see this link to read the full text of the Authority’s decision dated 23 June 2020 and numbered 2020/482, published in Official Gazette numbered 31166 on 25 June 2020 (only available in Turkish).
