What is VERBİS?
VERBİS (Veri Sorumluları Sicil Bilgi Sistemi) is the public Data Controllers’ Registry Information System maintained by Türkiye’s Personal Data Protection Authority under KVKK Article 16. Controllers within scope must register before processing personal data and declare, category by category, what they process, why, for how long, and any transfers — effectively a public summary of the company’s processing inventory.
Who must register
- Companies above the Board’s employee/turnover thresholds (currently 50+ employees or TRY 100M+ annual turnover), and all controllers whose main activity is processing special-category data;
- Non-resident controllers processing data of persons in Türkiye must register regardless of size and appoint a local representative — the trap for foreign SaaS;
- Registered entries must be kept current; changes are notified within 30 days.
Why it matters
VERBİS gaps are the easiest finding in any KVKK inspection and a standing item in M&A due diligence — the registry is public, so mismatch between VERBİS and reality is verifiable in minutes. Related: data controller, KVKK Authority.
Related practice areaData & Privacy (KVKK + GDPR) →