VERBİS registration under the KVKK

Where this applies

This record is scoped to Türkiye. Scope is part of the claim: a rule that binds one part of a country does not bind the whole of it, and this library states the scope its sources state.

Instrument

Law No. 6698 (Kişisel Verilerin Korunması Kanunu), Art. 16(2)

Who it binds

Real and legal persons processing personal data in Türkiye

What it requires

Law No. 6698 (accepted 24 March 2016), Art. 16(2): "Kişisel verileri işleyen gerçek ve tüzel kişiler, veri işlemeye başlamadan önce Veri Sorumluları Siciline kaydolmak zorundadır" — real and legal persons processing personal data must register with the Data Controllers' Registry (VERBİS) before beginning to process data; the Personal Data Protection Board may grant exemptions from this duty. Law No. 7499 (2024) separately restructured cross-border data-transfer rules under Art. 9, without amending the Art. 16 registration duty itself.

Related records and requirements

• Data protection fee (ICO registration) (United Kingdom) — The ICO data protection fee is a statutory annual fee owed by organisations that process personal data (unless exempt) — a registration/fee duty to the authority, not a certificate.
• Data controller registration (Malaysia) — Malaysia's covered classes of data users must register as data controllers with the JPDP and display the registration certificate — limited to 13 legally specified classes.