How to Complete VERBİS Registration: A Full Guide

VERBİS (the Data Controllers Registry) registration is, for many organizations, the first visible step of KVKK compliance. We previously covered what VERBİS is; in this article we explain how to complete the registration, step by step.

This content is for general information only and does not constitute legal advice. Registration thresholds and deadlines are updated from time to time; rely on the official announcements of the Turkish Data Protection Authority for current values.

1. Do you have a registration obligation?

Not every data controller must register with VERBİS. The obligation is determined by criteria such as annual number of employees, annual financial balance total and the main field of activity. Some organizations may be exempt. Check the Authority's announcements for current thresholds.

2. Prepare your data inventory

The VERBİS declaration is fed directly from your data inventory. Your inventory must be complete in terms of processing purposes, data categories, recipient groups, retention periods and transfers. A registration made before this preparation will be inaccurate and incomplete.

3. Designate the data controller and contact person

In VERBİS you must define the data controller representing your organization and, where required, the contact person who will handle communication with the Authority. The contact person manages notifications and communication on behalf of the data controller.

4. Create the registry declaration

During registration, the following information is typically declared:

• The data categories processed (identity, contact, personnel, health, etc.).
• The processing purposes.
• The recipients / recipient groups the data is transferred to.
• The retention periods.
• The status of transfers to foreign countries.
• The administrative and technical measures taken.

This information must be exactly consistent with your inventory; inconsistency creates risk in an audit.

5. Keep the registration current

VERBİS registration is not a one-time task. When your data-processing activities change (a new system, a new transfer, a changed retention period), the registration must also be updated within the period set by the Authority. Comparing versions makes it easier to see what changed.

Making the process easier

The most tiring part of VERBİS registration is maintaining consistency between the inventory and the declaration by hand. Kivuz KVKK is a KVKK compliance software that generates VERBİS-ready registration data from your inventory and offers version comparison on changes. VERBİS registration is only one stage of the broader KVKK compliance process; to manage the whole on one platform, request a demo.