12 March 2021

The decision of the Personal Data Protection Board ("Board") numbered 2021/238 regarding "The Time Extension for Registering with Data Controllers' Registry Information System ("VERBIS") ("Decision") is published in the official website of the Personal Data Protection Authority. 

With the expiration of the periods stipulated by the Board's previous decision numbered 2020/482, the Authority had adopted the method of sending a letter with its decision dated 01.10.2020 to those who have not yet fulfilled the registration obligation and had obliged them to register within the deadline specified in the relevant letter. Due to the difficulties faced in fulfilling the obligation to register with VERBIS properly during the Covid-19 pandemic, it is understood that many data controllers or their affiliated institutions, various sector representatives, some public institutions and professional organizations have requested the extension of the deadlines. Considering these requests, the registration deadline with VERBIS has been extended by the Board until the end of 2021.

Accordingly, the deadlines determined with the previous and current decision for the data controllers to fulfil their obligation of registration with and notification to VERBIS is as follows:

Data Controller Previous Deadline Determined by the Decision No. 2020/482 Current Deadline
Real and legal persons with more than 50 employees annually or with annual financial balance more than TRY 25 million 30.09.2020 31.12.2021
Real and legal persons residing abroad 30.09.2020 31.12.2021
Real and legal persons with less than 50 employees annually or with annual financial balance less than TRY 25 million, whose activity is processing special categories of personal data 31.03.2021 31.12.2021
Public Institutions and Organizations 31.03.2021 31.12.2021
If you have any questions regarding our note above, please do not hesitate to contact us.

Kind regards,
Güner Law Office