As per Article 16 of the Law on the Protection of Personal Data and Regulation on Data Controller’s Registry Data Protection Board (Board) is authorized to determine exemption for the registration obligation by taking into account the objective criteria set by the Board such as the nature and quantity of the data processed, or the facts as data is being processed or transferred to third parties by virtue of law.
With a recent decision of the Board dated 06.07.2023 and numbered 2023/1154, the total annual balance threshold exempting the data controllers from registration with VERBIS is increased from TRY 25 million to TRY 100 million considering the current economic conditions in Turkey.
Accordingly, as of 25.07.2023, data controllers employing less than 50 employees and with an annual balance less than TRY 100 million will be exempt from registering with VERBIS provided that their main business activity is not processing sensitive personal data.
This article has been authored by Galya Kohen Benbanaste