With Decision no. 2023/1154 dated 6 July 2023, the Turkish Data Protection Authority has amended the criteria for data controllers to be exempt from the requirement to register with the Data Controller Registry (VERBİS) pursuant to Turkish Personal Data Protection Law no. 6698 and secondary legislation. The decision was published in Official Gazette no. 32259 dated 25 July 2023 and entered into force on the same date.
The decision increases the exemption threshold based on the data controller’s annual balance sheet from TRY 25,000,000 to TRY 100,000,000 in view of current economic conditions in Turkey. Accordingly, as of 25 July 2023, data controllers established in Turkey whose number of employees is below 50 and whose annual total balance sheet is below TRY 100,000,000 are exempt from VERBİS registration, unless they process sensitive data as part of their main activity. Other exemptions previously granted to specific data controller groups, such as notaries public,
The above exemption criteria only apply to data controllers located in Turkey. Data controllers established abroad who process personal data collected in Turkey remain subject to VERBİS registration without any exemption
As announced on its website on 21 April 2022, the Turkish Data Protection Authority has started to impose fines on the data controllers who have failed to register with the Data Controller Registry. In the past year, the Turkish Data Protection Authority’s enforcement efforts have also been more specifically aimed at data controllers established abroad who target data subjects in Turkey. The failure to comply with the VERBİS registration requirement may result in the imposition of fines ranging from TRY 119,428 to TRY 5,971,989 (approx. EUR 4,000 to EUR 200,000) in 2023.
These monetary thresholds are subject to annual adjustment.
Data controllers who are not subject to registration remain under the obligation to comply with all other requirements of the Turkish data protection legislation.
Share
Related persons
You can contact us for detailed information.

Legal Information
This briefing is for information purposes; it is not legal advice. If you have questions, please call us. All rights reserved.
You May Be Interested In
29 April 2025
The Turkish Regional Court of Appeal in Ankara, 31st Civil Chamber, Confirmed That Preliminary Attachment Can Be Imposed on the Respondent’s Assets Pending Enforcement Proceedings
In proceedings for the enforcement of foreign arbitral awards, it is crucial to secure the enforcement of the award, in other words, to…
21 April 2025
New Communiqué on Green Asset Ratio of Banks Published
The Communiqué on the Calculation of Green Asset Ratio of Banks (the “Communiqué”) was published in the Official Gazette dated 11 April…
28 March 2025
Circular on the Prevention of Mobbing in Workplaces Has Been Published
On 6 March 2025, Presidential Circular No. 2025/3 on the Prevention of Mobbing at Workplaces (“Circular”) was published in the Official…
26 March 2025
Turkish Cybersecurity Law enters into force
The long-anticipated Cybersecurity Law No. 7545 came into force in Türkiye following its publication in the Official Gazette on 19 March…
24 March 2025
Recent Developments in Healthcare Legislation – Winter Issue 2025
Amendment to the Regulation on the Licensing of Medicinal Products for Human Use. An amendment to the Regulation on the Licensing of…
21 March 2025
Secondary Regulation on Crypto Assets Comes into Force!
Following the provisions introduced to the Capital Markets Law No. 6362 (“CML”) on crypto assets and crypto asset service providers…