Turkiye: Personal Data Protection Board adopted Decision No. 2018/87 on exemption from data protection authority (VERBIS) registration obligation

On 19 July 2018, the Personal Data Protection Board adopted Decision No. 2018/87 within the framework of Article 16(2) of Law No. 6698 on the Protection of Personal Data. The Decision determined categories of data controllers exempt from the obligation to register with the Data Controllers Registry Information System (VERBIS). The exemption applied to natural or legal person data controllers with fewer than 50 employees annually and a total annual financial balance of less than TRY 100 million, whose main activity was not the processing of special categories of personal data. The exemption also applied to data controllers whose main activity was the processing of special categories of personal data with fewer than 10 employees annually and a total annual financial balance of less than TRY 10 million. The Decision established objective exemption criteria based on annual employee numbers, annual financial balance thresholds, and the nature of data processing activities.