The Personal Data Protection Authority has extended the obligation to register data controllers, which are brought to businesses based on the number of employees and balance sheet size.
The deadlines for the obligation to register data controllers in the registry have been extended. Accordingly, the registration obligation of real and legal person data controllers with more than 50 annual employees and a balance sheet total of more than 50 million lira, and real and legal person data controllers resident abroad, has been extended to 31 December 2021.
Registration obligation of natural and legal person data controllers whose annual number of employees is less than 50 and whose annual financial balance sheet is less than 25 million lira and whose main field of activity is the processing of special personal data, and registration obligation of data controllers of public institutions and organizations and professional organizations that are public institutions. It has also been extended until December 31, 2021.
In accordance with Article 16 of the Personal Data Protection Law No. 6698, enacted in 2016, real and legal persons who process personal data are obliged to register with the Data Controllers Registry before starting to process data.
The validity period of this regulation was last extended until March 31, 2021.
Source: https://www.dunya.com/gundem/veri-sorumlusu-siciline-kayit-suresi-4uncu-kez-uzatildi-haberi-614549