2019 KVKK & GDPR November Newsletters Headings

Decision Summaries of the Month

For Information About the Important Decision Summaries of the Month

Click Here

Information Guide

For Information About the Information Guide of the Month

Click Here

Legislation Analysis

For Information About the Legislation Analysis of the Month

Click Here

Your Time is Running Out

What is VERBIS?

For Further Information About Data Controllers' Registry Information System

Click Here

2019 KVKK & GDPR November Newsletter Decision Summaries of the Month

  • Decision Regarding The Unauthorized Use Of The Cell Phone Number Of The Relevant Person by a Bank
  • Decision on the Failure of an Airline Company to Comply with the General Principles of the Law and the Right of the Data Subject to Apply to the Data Controller
  • Decision About an Operator Company
  • 50.000 TL Penalties to Sevinç Educational Institutions for Sending Short Message Without Data Processing Conditions
  • Decision on Users of Software and Programs That Allow Opportunity for Inquiry of Personal Data
  • Public Release by the Authority Regarding the Disclosure Obligation
  • Edenred - Data Breach Notification
  • Constitutional Court has Annulled the Article of the Law Stipulating Security Investigation and Archive Check Pursuant to Article 20 of the Constitution which Secures the Personal Data

2019 KVKK & GDPR November Newsletters Information Guide

Criteria to Be Considered in Determining VERBİS Obligation

Certain criteria have been announced by the Board with the decision no. 2018/88 regarding the declaration of companies to the Data Controllers' Registry (VERBIS obligation). Accordingly, in order to determine whether or not VERBIS obligation exists; if yes, to determine on which date the obligation starts, it has to be found out which of these criteria is met.

  • Annual Number of Employees
  • Total of Annual Financial Balance
  • Main Field of Activity
  • Being Resident Abroad

2019 KVKK & GDPR November Newsletters Legislation Analysis

Article - 11 Regulation on Data Controllers' Register

Obligations of data controller, DCR and contact person Article: 11

  1. In case of a legal entity, the data controller is the legal entity itself. The obligations of the legal entities residing in Türkiye as a data controller within the scope of the Law are fulfilled by the body that is authorized to represent and bind the legal entity pursuant to the provisions of the relevant legislation or the person(s) who are specified as per the relevant legislation. The body that is authorized to represent the legal entity may appoint one or more persons in respect of the obligations to be fulfilled in order to ensure the enforcement of the Law. This appointment does not release the legal entity from liability pursuant to the provisions of the Law.