Turkiye: Personal Data Protection Board adopted Decision No. 2025/1572 amending Decision No. 2018/87 on exemption from data protection authority (VERBIS) registration obligation

On 4 September 2025, the Personal Data Protection Board adopted Decision No. 2025/1572 amending Decision No. 2018/87 on exemption from the obligation to register with the Data Controllers Registry Information System (VERBİS). The Decision updated the wording of the exemption criteria concerning data controllers’ annual number of employees, total annual financial balance, and main activity involving the processing of special categories of personal data. The amendment was adopted pursuant to Article 16(2) of Law No. 6698 on the Protection of Personal Data and maintained the existing exemption thresholds. Following adoption, uncertainties arose regarding the interpretation of the annual financial balance criterion for data controllers not keeping books according to the balance sheet method.