Data Controllers Registry Information System (VERBİS)
One of the most significant obligations introduced under the Personal Data Protection Law (KVKK) is the registration with the Data Controllers Registry Information System (VERBİS). VERBİS is an online information system where real and legal persons processing personal data are required to register.
Through this registration, companies must transparently disclose to the public what personal data they collect, for what purpose they process this data, and how they protect it.
Who is Obligated to Register with VERBİS?
According to the KVKK, the following groups are under the VERBİS registration obligation:
-
Data controllers residing abroad.
-
Real and legal persons who employ more than 50 employees OR whose annual financial statement total exceeds 100 million TL.
-
All real and legal persons whose main area of activity is processing special categories of personal data.
Businesses falling into this scope may face high administrative fines if they fail to register within the specified deadlines.
How is VERBİS Registration Completed?
-
A preliminary application is made via the KVKK Authority’s website.
-
Entry into the VERBİS system is provided with the username and password given by the Authority.
-
The Data Inventory is created and entered into the system, covering:
-
What data is processed?
-
For what purpose is it processed?
-
How long is it stored?
-
With whom can it be shared?
-
-
Once the registration is approved, the information becomes public.
Importance of VERBİS Registration
-
Ensures Transparency: Creates trust among customers and employees.
-
Legal Compliance: Potential sanctions are averted by ensuring compliance with the KVKK.
-
Corporate Reputation: Establishes a company profile that values data security.
Penalty for Non-Registration with VERBİS
Pursuant to the KVKK, administrative fines ranging from 272,380 TL up to 13,620,402 TL for the year 2025 may be imposed on those who fail to fulfill their VERBİS registration obligation. Therefore, completing the process on time with expert support rather than postponing it is extremely important.
Frequently Asked Questions
$\checkmark$ Who should perform the VERBİS registration?
The company’s data controller or an authorized attorney/consultant can perform the registration.
$\checkmark$ Is it mandatory for small-scale businesses?
Registration is not mandatory for businesses with fewer than 50 employees and an annual financial statement total below 100 million TL.
$\checkmark$ Is VERBİS registration a one-time process?
It is mandatory to keep the registration up-to-date after the initial registration. Any changes in data processing activities must be updated in the system.