Postponement of registration deadline to Data Controllers Registry

Pursuant to Law No: 6698 on the Protection of Personal Data, all data controllers except those that meet certain exemption criteria have to register in the Data Controllers Registry (the “Registry”).

The Turkish Data Protection Authority (DPA) had earlier postponed the deadline to enrol in the Registry to June 30, 2020.

By its Decision No: 2020/482, dated June 23, 2020, the DPA announced that the deadline to enrol in the Registry had been postponed to:

• September 30, 2020 for controllers who have more than 50 employees per annum or whose annual financial statements exceed 25 Million Turkish Liras, as well as controllers who are not resident in Turkey,

• March 31, 2021 for controllers who have less than 50 employees per annum and whose annual financial statements do not exceed 25 Million Turkish Liras, but whose primary field of activity involve the processing of sensitive personal data, and

• March 31, 2021 for controllers who are public institutions or agencies.