Turkiye: Personal Data Protection Authority released guide to the Data Controllers Registry Information System (VERBIS)

On 7 October 2025, the Personal Data Protection Authority (KVKK) released guide to the Data Controllers Registry Information System (VERBIS). The guide complements the VERBIS system by presenting the framework of obligations in a question-and-answer format. It provides clarifications on the purpose and scope of the system, the obligations of data controllers, and the statutory basis under Article 16 of the Law on the Protection of Personal Data No. 6698. It addresses the registration requirements for natural and legal persons located in Turkey and abroad, the scope of exemptions defined by the Board, and timelines for registration. In addition, it explains the appointment of contact persons, entry of information on categories of personal data, processing purposes, storage periods, security measures, and transfers.