With the Board's Decision dated 11/03/2021 and numbered 2021/238; Real and legal person data controllers with more than 50 employees or with an annual financial balance of more than 25 million TL, and natural and legal person data controllers residing abroad, with less than 50 employees annually and For real and legal person data controllers whose annual financial balance sheet is less than 25 million TL and whose main field of activity is to process special personal data, public institutions and organizations and professional organization data controllers with the nature of public institution, fulfill their obligation to register and notify in the Registry until 31.12.2021. How much time has been given.
In Article 16 of the Law on the Protection of Personal Data (Law) No. 698;
(1) Under the supervision of the Board, the Data Controllers Registry is kept open to the public by the Presidency.
(2) Natural and legal persons who process personal data must register with the Data Controllers Registry before starting data processing.” With the provision of the provision in paragraph (2) of the Provisional Article 1, “Data controllers must register with the Data Controllers Registry within the period determined and announced by the Board." clause.
An administrative fine from 20,000 Turkish lira to 1,000,000 Turkish lira is imposed on those who violate the obligation to register and notify in the Data Controllers Registry." In paragraph (3) of the same article with the provision ;
"In case the actions listed in the first paragraph are committed within the body of public institutions and organizations and professional organizations in the nature of public institutions, upon the notification of the Board, the civil servants and other public officials working in the relevant public institution and organization Actions are taken against those who work in professional organizations in the nature of public institutions in accordance with the disciplinary provisions and the result is reported to the Board.” The Board may impose administrative sanctions ex officio on data controllers who do not fulfill their obligation to register and notify.
In this context, administrative sanctions have been started to be imposed on data controllers who have not fulfilled their obligation to register and notify in the Registry, pursuant to Article 18 of the Law.
Conclusion:
In the KVKK Public Announcement, which clearly states the obligations of institutions and organizations with Verbis registration obligations to fulfill their registration obligations until 31.12.2021, it is also clearly stated that administrative sanctions will be imposed on data controllers.
It is very important for the data controllers to act in accordance with the verbis registration obligation, to complete the missing records, to take the necessary measures and to receive support if necessary, in order to avoid high penalties.
To reach the full announcement; KİŞİSEL VERİLERİ KORUMA KURUMU | KVKK | Kamuoyu Duyurusu (VERBİS)
