ARTICLE
10 October 2023

Turkish Data Protection Authority Amends Exemption Criteria For Data Controller Registration

P
Paksoy

Contributor

Paksoy logo
Paksoy is an independent full-service law firm in Istanbul renowned for its expertise in international legal matters, providing legal services in cross-border transactions and dispute resolution work. With over 60 lawyers, 10 partners we are able to provide a wide range of services to our clients from around the world across the sectors and industries, from healthcare, energy and natural resources to infrastructure, construction, real estate, financial services, technology, media, telecoms. Paksoy provides legal services and specialist input (e.g., antitrust, tax, compliance, employment) to domestic and global clients, financial institutions, private and public companies, foreign investors and private equity funds.
With Decision no. 2023/1154 dated 6 July 2023, the Turkish Data Protection Authority has amended the criteria for data controllers to be exempt from the requirement to register...
Turkey Privacy
To print this article, all you need is to be registered or login on Mondaq.com.

With Decision no. 2023/1154 dated 6 July 2023, the Turkish Data Protection Authority has amended the criteria for data controllers to be exempt from the requirement to register with the Data Controller Registry (VERBİS) pursuant to Turkish Personal Data Protection Law no. 6698 and secondary legislation. The decision was published in Official Gazette no. 32259 dated 25 July 2023 and entered into force on the same date.

The decision increases the exemption threshold based on the data controller's annual balance sheet from TRY 25,000,000 to TRY 100,000,000 in view of current economic conditions in Turkey. Accordingly, as of 25 July 2023, data controllers established in Turkey whose number of employees is below 50 and whose annual total balance sheet is below TRY 100,000,000 are exempt from VERBİS registration, unless they process sensitive data as part of their main activity. Other exemptions previously granted to specific data controller groups, such as notaries public,

The above exemption criteria only apply to data controllers located in Turkey. Data controllers established abroad who process personal data collected in Turkey remain subject to VERBİS registration without any exemption

As announced on its website on 21 April 2022, the Turkish Data Protection Authority has started to impose fines on the data controllers who have failed to register with the Data Controller Registry. In the past year, the Turkish Data Protection Authority's enforcement efforts have also been more specifically aimed at data controllers established abroad who target data subjects in Turkey. The failure to comply with the VERBİS registration requirement may result in the imposition of fines ranging from TRY 119,428 to TRY 5,971,989 (approx. EUR 4,000 to EUR 200,000) in 2023. These monetary thresholds are subject to annual adjustment.

Data controllers who are not subject to registration remain under the obligation to comply with all other requirements of the Turkish data protection legislation.

Originally Published by July 2023

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

ARTICLE
10 October 2023

Turkish Data Protection Authority Amends Exemption Criteria For Data Controller Registration

Turkey Privacy

Contributor

Paksoy logo
Paksoy is an independent full-service law firm in Istanbul renowned for its expertise in international legal matters, providing legal services in cross-border transactions and dispute resolution work. With over 60 lawyers, 10 partners we are able to provide a wide range of services to our clients from around the world across the sectors and industries, from healthcare, energy and natural resources to infrastructure, construction, real estate, financial services, technology, media, telecoms. Paksoy provides legal services and specialist input (e.g., antitrust, tax, compliance, employment) to domestic and global clients, financial institutions, private and public companies, foreign investors and private equity funds.
See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More