ARTICLE
21 May 2026

VERBIS Registration Deadline Set To 5 June For Data Controllers Newly Subject To The Requirement Based On 2025 Accounts

P
Paksoy

Contributor

Paksoy is an Istanbul-based independent Turkish law firm with over 120 employees, offering legal advice and counselling to foreign investors and the Turkish business community. We provide a wide range of services to meet the needs of local and international businesses in almost every field, including corporate law, capital markets, mergers and acquisitions, competition law, banking and finance, tax, real estate and project development, project finance, energy and infrastructure, litigation and arbitration.
The Turkish Personal Data Protection Board has extended the VERBIS registration deadline to 5 June 2026 for corporate taxpayers whose 2025 balance sheet totals exceeded statutory thresholds. Data controllers meeting specific financial criteria based on their primary activities must complete registration within this timeframe or face administrative penalties under Turkish data protection law.
Turkey Privacy
Stéphanie Beghe Sonmez’s articles from Paksoy are most popular:
  • within Privacy topic(s)
  • with Senior Company Executives, HR and Inhouse Counsel
  • with readers working within the Business & Consumer Services, Law Firm and Construction & Engineering industries

With Decision No. 2026/1026 dated 13 May 2026, the Turkish Personal Data Protection Board extended the deadline for registration with the Data Controllers’ Registry (VERBIS) until 5 June 2026 for corporate taxpayers acting as data controllers whose obligation to register arose because their 2025 annual balance sheet totals exceeded the applicable thresholds.

Under the Regulation on the Data Controllers’ Registry, data controllers must complete their registration procedures within 30 days of becoming subject to the requirement. The Board clarified that, for data controllers becoming subject based on their 2025 annual balance sheet totals, this 30-day period starts from 30 April 2026, being the final submission date for the 2025 corporate tax return. As this period would otherwise expire on 30 May 2026, which is a public holiday in Türkiye, the deadline has been extended until 5 June 2026.

Accordingly, the above deadline applies to data controllers exceeding the following thresholds based on their 2025 annual balance sheet totals:

  • Data controllers established in Türkiye whose primary activity does not involve the processing of sensitive personal data and whose 2025 annual balance sheet total is TRY 100 million (approx. EUR 1,890,000) or more;
  • Data controllers established in Türkiye whose primary activity involves the processing of sensitive personal data and whose 2025 annual balance sheet total is TRY 10 million (approx. EUR 189,000) or more.

Failure to fulfil this registration obligation within the prescribed timeframe may result in administrative fines under Article 18 of Turkish Law No. 6698 on the Protection of Personal Data. Data controllers concerned are therefore advised to complete the necessary preparations without delay.

This extension applies only to the VERBIS registration obligation. Data controllers remain responsible for complying with their other obligations under the Law.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More