The registration period for VERBİS has been extended.

ALTİD Chairman Burhan Sili announced that the deadlines for the latest registration dates in the Data Controllers Registry System, which falls under the Law on the Protection of Personal Data, have been extended. Sili warned that data controllers must complete their company's KVKK (Law on the Protection of Personal Data) procedures by the newly announced updated dates to avoid administrative and legal penalties. According to the law, the final dates for fulfilling the registration obligation to VERBİS (Data Controllers Registry) were determined as June 30, 2020, September 30, 2020, and December 31, 2020, depending on the number of employees, the total financial balance, or whether the company is based abroad.

Genel

Burhan Sili, the President of the Alanya Tourism Operators Association and a member of the Board of Directors of the Turkish Hoteliers Federation, stated: "The deadline for the 'Data Controllers Registry Information System,' which falls under the scope of the Law on the Protection of Personal Data, has been extended for the last registration date."

The deadlines for registration have been extended for the law concerning the storage of information, both physical and digital, which affects millions of people and thousands of businesses. Burhan Sili, President of the Alanya Tourism Operators Association (ALTİD) and Member of the Board of Directors of the Turkish Hoteliers Federation (TÜROFED), stated that it is necessary to complete all procedures to avoid administrative and legal penalties, and warned, "According to Article 1 of Law No. 6698, data controllers must complete their registration in the Registry Information System (VERBİS) and their company KVKK procedures by the newly announced deadlines."

What is KVKK?

The purpose of Law No. 6698 on the Protection of Personal Data (KVKK) is to protect the privacy of individuals and their fundamental rights and freedoms in the processing of personal data. This law applies to all facilities, regardless of size. The law and its supplementary regulations cover the processing of personal data, general principles, processing conditions, the deletion, destruction, or anonymization of personal data, the transfer of personal data, the obligations of the data controller to provide information, obligations related to data security, application, complaint, and the registry of data controllers, the procedures and principles of inspection, offenses, violations, the institution for the protection of personal data, its duties, the board for the protection of personal data, the board's operating principles, organizational structure, personal data protection experts and assistants, provisions related to the personal rights of employees, exceptions, and temporary articles.

WHAT ARE THE LAST REGISTRATION DATES?

According to Article 16 of Law No. 6698 on the Protection of Personal Data, legal entities and individuals who process personal data are required to register with VERBİS before commencing data processing. The deadlines given by the Personal Data Protection Board to data controllers for registration with VERBİS are as follows:
The deadline for legal entities and individual data controllers with an annual employee count of 50 or more, or an annual total financial balance exceeding 25 million TL, to fulfill their registration and notification obligations is set as June 30, 2020.
The deadline for real and legal entities residing abroad to fulfill their registration and notification obligations has been set as June 30, 2020.
Companies whose annual number of employees is less than 50 and whose total annual financial balance is less than 25 million TL, and whose main activity is the processing of special-category personal data, have been given a deadline of September 30, 2020, to fulfill their obligations regarding registration and notification.
Public institutions and organizations' data controllers have been given a final deadline of December 31, 2020, to fulfill their registration and notification obligations.