03 October 2018
REGISTRATION OBLIGATIONS HAVE STARTED: CONTROLLERS HAVE 12 MONTHS TO REGISTER:
As our readers may recall from our earlier coverage of the data controllers’ registry, Data Protection Board (“DPB”), with its decision numbered 2018/88 (“Decision”), had previously determined the timeline for data controllers’ obligation to register with the data controllers’ registry system, “VERBIS”. According to the DPB’s Decision, registration obligations for the data controllers below have started.
10 September 2018
DATA PROTECTION BOARD PUBLISHES THE LATEST ENFORCEMENT ACTIONS: CONTROLLER RECEIVES TRY 200,000 FINE:
The Turkish Data Protection Board (“DPB”), the decision making body of the Turkish Data Protection Authority (“DPA”), has recently published on its website a number of enforcement actions it has taken against the data controllers for the breach of the Turkish Personal Data Protection Law (“Data Protection Law”).
29 August 2018
DATA PROTECTION BOARD ANNOUNCES REGISTRATION OBLIGATIONS WILL START IN OCTOBER:
A series of decisions by the Data Protection Board (“DPB”) in relation to the obligation to register with the Data Controllers’ Registry (“Registry”) were recently published in the Official Gazette. The decisions set out new exemptions from registration obligations and provide the timeline for registration with the Registry.
25 June 2018
DATA PROTECTION AUTHORITY DECLARES THE CONTRACTUAL CLAUSES TO BE UTILISED IN CROSS-BORDER DATA TRANSFERS:
Turkish legislation on personal data protection continues to develop with the resolutions and declarations of the Turkish Data Protection Authority (“DPA”). The recent developments shed light on the transfer of personal data outside Turkey without relying on the explicit consent of the data subject and the data controllers who will be kept exempt from the obligation to register with the Data Controllers’ Registry (“Registry”).