Data Controllers Registry Information System
VERBİS · The online registry of the Turkish Personal Data Protection Authority, where data controllers meeting certain conditions must register and declare the personal data they process.
- 01
Why it matters
Registration is mandatory for organisations above certain employee and financial thresholds or whose main activity is processing special categories of personal data; data controllers based abroad can be in scope too. Registration declares data categories, purposes, transfers and retention periods, which requires the organisation to map its own data inventory.
- 02
Example
A growing e-commerce company realises it has crossed the thresholds, first prepares an inventory showing which department processes which data and why, and then registers in VERBİS based on that inventory.
- 03
Common mistake
Registering once and never updating it. A new processing activity, a new transfer or a changed retention period must be updated in the registry too.
- 04
Related terms
Related services and guides
Let's talk about your project.
Tell us what you need; we will define the scope together.