A fine of up to 1 million TL will be imposed on those who fail to notify by June 30, 2020. According to the latest information, the final deadline is June 30 for legal entities and real persons whose annual number of employees is 50 or more, or whose annual balance sheet total exceeds 25 million TL. The period granted to real and legal persons to fulfill their registration and notification obligations to the Data Controllers Registry (VERBIS) ends on June 30, 2020. Data controllers are required to register and submit notifications in the VERBIS system. Those who fail to meet this obligation will face administrative fines of up to 1 million TL.
Real and legal person controllers with an annual workforce of more than 50 or an annual balance sheet total exceeding 25 million TL must complete their VERBIS registration and notification obligations by June 30, 2020. Companies that do not want to face administrative fines should not leave this to the last day and should obtain necessary support if needed to ensure timely compliance.
Deadline Set as June 30, 2020
The deadline is June 30, 2020. In the digital age, protecting personal data places significant responsibilities on companies. It is especially important for companies to process, protect and store personal data they collect about individuals in accordance with the Law on the Protection of Personal Data (KVKK). For companies that qualify as data controllers under the KVKK, one of the crucial compliance requirements is fulfilling VERBIS registration and notification obligations. Those who do not comply with registration and notification requirements may face substantial sanctions. VERBIS imposes significant responsibilities on data controllers regarding the processing of personal data; data controllers must record relevant declarations related to their data processing activities in VERBIS.
Furthermore, data controllers who are real or legal persons with more than 50 employees annually or with total assets on the balance sheet exceeding 25 million TL must complete VERBIS registration and notification by June 30, 2020. Anyone who has not registered by the deadline may be subject to an administrative fine of up to 1 million TL. Compliance for data controllers requires more than VERBIS registration alone. In addition to VERBIS, data controllers must fulfill other KVKK obligations. Key elements that data controllers must pay attention to during the compliance process include the following.
- Fulfilling the obligation to inform data subjects and obtaining explicit consent when required.
- Observing the general principles of the KVKK.
- Terminating processing activities and fulfilling obligations when the purpose of processing ceases.
- Implementing necessary administrative and technical measures.
- Informing data subjects and responding to their requests.