VERBİS is the registry where data controllers are registered within the scope of KVKK. It is managed by the KVKK Board.
VERBİS Registration Obligation
- Companies with 50+ annual employees
- Annual financial balance sheet 25 million TL+
- Companies that transfer data abroad
- Those who process special personal data
- Public institutions and organizations (according to scope)
Registration Process
- VERBİS account (verbis.kvkk.gov.tr)
- Preparing data inventory
- Filling the registration form
- Approval
- Obtaining the registration document
Data Inventory Components
- Categories of personal data processed
- Data subject groups of persons
- From which the data was received source
- Purpose of processing
- Domestic/international transfer
- Storage period
- Data security measures
Sanctions
- Failure to record: administrative fine (annual updated)
- Incorrect/incomplete notification: additional penalty
- Failure to update within the period
KVKK Board
The KVKK Board periodically imposes high administrative fines on companies that violate the VERBIS registration obligation.
KVKK expert lawyer is recommended.