2019 KVKK & GDPR September Newsletters Headings

Decision Summaries of the Month

For Information About the Important Decision Summaries of the Month

Click Here

Information Guide

For Information About the Information Guide of the Month

Click Here

Legislation Analysis

For Information About the Legislation Analysis of the Month

Click Here

Your Time is Running Out

What is VERBIS?

For Further Information About Data Controllers' Registry Information System

Click Here

2019 KVKK & GDPR September Newsletter Decision Summaries of the Month

  • Deadline for VERBIS Registration Has Been Extended
  • The European Court of Justice has ruled that Google only needs to comply with the right to be forgotten within the European Union
  • Youtube Will Pay a Penalty of 170 Million Dollars For Breach of Coppa Rules
  • Polish DPA imposes €645,000 fine for Personal Data Violation
  • Türkiye İş Bankası A.Ş. – Data Breach Notification
  • FER Gayrimenkul Geliştirme ve İnş. A.Ş. – Data Breach Notification
  • Furtrans Denizcilik Ticaret ve San. A.Ş. – Data Breach Notification
  • Zynga Game Ireland Limited - Data Breach Notification
  • Gardrops Elektronik Hizmetler ve Ticaret A.Ş. - Data Breach Notification

2019 KVKK & GDPR September Newsletters Information Guide

Obligation of Verbis Registration and Dcr Appointment for Data Controllers Resident Abroad

In the event that some or all of the personal data is transferred to the founder / partner foreign company residing abroad and the foreign company residing abroad uses this data for its own purposes, there is an obligation to register at the Data Controllers' Registry Information System (hereinafter referred to as “VERBIS”) for the foreign company. These transfers, in general, consist of recordings of all or part of the data of the employees, suppliers and customers of the legal entity in Türkiye to a registration system which is provided and managed by foreign partner. However, keeping only the personal data in a registration system by the foreign partner does not constitute a registration obligation of VERBIS and the foreign partner is required to use this data for its own purposes.

2019 KVKK & GDPR September Newsletters Legislation Analysis

Article-9/5 Transfer of Personal Data Abroad

Transfer of personal data abroad should be carried out in a different way from the normal course in some special cases, without prejudice to the provisions of the international convention. A different method is provided in the law to transfer these data abroad in special cases where contrary to Türkiye's or the interest of the person concerned. Information that Türkiye possess which are regarded as secrets, information on the property rights of persons, health data obtained for the purpose of mapping gene countries can be examples for the topics concerning Türkiye or the interest of the relevant persons. As it is seen, since these data and the scope of the interest are not limited, an assessment should be made according to concrete cases.