Public Announcement on the Registration and Notification Period for VERBIS

As is known, the deadline for real and legal person data controllers processing personal data to fulfill their registration and notification obligation with the Data Controllers Registry ("VERBIS"), as stipulated under Article 16 of the Law on the Protection of Personal Data No. 6698, was set as December 31, 2021.

On the other hand, data controllers that became subject to this obligation after this date are required to complete their VERBIS registration and notification procedures within 30 days following the date on which they became subject to the obligation, pursuant to Article 8/2 of the Regulation on the Data Controllers Registry. You can access the terms and conditions regarding the VERBIS registration obligation in our article.

The Revenue Administration has determined April 30, 2026 as the deadline for the submission of corporate income tax returns for corporate income taxpayers for the year 2025. In this context, legal entity data controllers that are corporate income taxpayers and become subject to the obligation to register with VERBIS due to their 2025 financial balance sheet total (those whose main field of activity is not the processing of special categories of personal data but whose financial balance sheet total is TRY 100 million or above, or those whose main field of activity is the processing of special categories of personal data and whose financial balance sheet total is TRY 10 million or above) are required to complete their VERBIS registration and notification procedures within 30 days following the submission date of the corporate income tax return.

In the announcement published by the Personal Data Protection Authority on May 14, 2026, the following statements were included: "Although the last day of the relevant period is June 1, 2026 due to May 30, 2026 falling on a public holiday, considering that the final week of the 30-day period coincides with the Eid al-Adha holiday, and in order to prevent any inconvenience for data controllers, it has been decided, with the Board's Decision dated May 13, 2026 and numbered 2026/1026, that the deadline for corporate income taxpayer legal entity data controllers whose 2025 financial balance sheet total exceeds the thresholds specified in the Board's Decision No. 2018/87, as amended by the Board's Decision dated September 4, 2025 and numbered 2025/1572, and who therefore become subject to the obligation to register with the Registry, to fulfill their registration and notification obligation with the Registry shall be extended until Friday, June 5, 2026. Respectfully announced to the public."

Accordingly, corporate income taxpayer legal entity data controllers that become subject to the obligation to register with VERBIS due to their 2025 financial balance sheet total may fulfill their VERBIS registration and notification obligations by Friday, June 5, 2026.

You can access the relevant public announcement here. (In Turkish)