Verbis Registration Transactions Consultancy, Data controllers registry (VERBIS/Data Controllers Registry Information System) is a public registry kept by the Presidency of the Personal Data Protection Authority under the supervision of the Personal Data Protection Board. (You can find it at https://verbis.kvkk.gov.tr/.) 6698 p. According to Article 16 of the Personal Data Protection Law, “Real and legal persons who process personal data must register with the Data Controllers Registry (VERBIS) before starting data processing.”
Verbis Registration Transactions Consultancy
Before VERBIS registration, a planned and systematic study should be carried out and all kinds of information of the institutions should be revealed. Garanti KVK protects your business during the Verbis Registration Consultancy process, raises awareness about information security, and goes step by step with you in the creation of legal and technical infrastructures.
Making Compliance with Legal Legislation in the Process of VerbIS Registration Consultancy
The regulation on the Data Controllers Registry Information System (VERBIS) registration system was published in the Official Gazette dated 30.12.2017 and numbered 30286 and entered into force on 01.01.2018.
Real and legal persons within the scope of KVKK are obliged to collect their personal data under categories and to record the information they create in the VERBIS system. The information to be entered in Verbis is not the information of real persons, but only the information that is categorically included under the headings. VERBIS is open to the public. Citizens can check the information entered by the data controllers and forward this to the Data Controllers when they think that misregistration has been made. According to the response of the Data Controller, they can also file a complaint with the Personal Data Protection Authority.
Persons authorized by the institution may have the right to use the application after completing the VERBIS registration process.
Organizations acquire, process and store personal data to grow. And it wants to expand that pool even further. The larger the data, the greater the risks to its security. There are important technical and administrative measures to be taken, the management of this process requires a programmed plan.
In the process of compliance with Garanti KVK, whether there is an unlawful personal data processing in the Institution is determined by examining the inventory and personal data processing activities. At this point, the data controller observes the deficiencies that arise during the activities.
How Much is the VerbIS Penalty?
If the taxpayers do not register with Verbis until the last registration date of 30.06.2020 within the scope of the Law on the Protection of Personal Data and its practices, or if the registrations are illegal and not based on the law, the taxpayers will still face penalties.
Administrative fines are shown in the law as follows.
- For those who do not fulfill the obligation of disclosure stipulated in Article 10, 2020: Lower Limit: 9.012 TL- Upper Limit: 180.263 TL
- For those who do not fulfill their obligations regarding data security stipulated in Article 12 2020: Lower Limit: 27.037 TL- Upper Limit: 1.802.640 TL
- For those who do not fulfill the decisions given by the Board pursuant to Article 15, 2020: Lower Limit: 45.062 TL- Upper Limit: 1.802.640 TL
- For those who violate the obligation to register and notify the Data Controllers Registry stipulated in Article 16, 2020: Lower Limit: 36.050 TL- Upper Limit: 1.802.640 TL.
In the penalties imposed by the institution, “real gathering” is the basis, not “opinion gathering”, and thus, if the institution detects more than one violation regarding the same concrete incident, it may impose multiple penalties and the penalties may even exceed the upper limits.
What is Personal Data?
Personal data refers to all kinds of data belonging to natural persons that make the identity specific or identifiable. Personal data in the law; It is collected under two headings as general quality personal data and special quality personal data. The conditions to be complied with also vary depending on the nature of the personal data in question.
What is a Data Controller?
Data controller personal data;
- Determining the purposes and methods of processing,
- The natural or legal person responsible for the establishment and management of the data recording system.
