TURKEY DPR

Best Outsourced Service for Turkey Data Protection Representative Needs

Do I Need a Turkey Data Protection Representative (DPR)?

Personal Data Protection Law No. 6698 (the “DPL”) and the Regulation on Data Controllers’ Registry (“Regulation”) require data controllers in Turkey to be registered with the Data Controllers’ Registry (“VERBIS”). There are certain thresholds in terms of employee number and financial figures for local data controllers to be subject to registration requirements, but there are no thresholds or other conditions applicable to foreign data controllers, who must register if they process personal data in Turkey and act as data controller.

What are the Obligations of a Representative?

The representative will be the contact point for the controller for any communication. The representative will also be the contact point for data subject requests. The representative must be vested with the following authorities:

Receive and accept letters and notifications from the Data Protection Authority on behalf of the data controller

Convey the Authority’s requests to the data controller and the data controller’s replies to the Authority.

Receive requests from data subjects on behalf of the data controller and forward them to the data controller,

Transmit the the Controller’s answer to the subjects, and carry out the Data Controllers Registry Information System (VERBIS) acts on behalf of the controller.

How do you appoint a Representative?

An appointment letter must be signed by the authorized individuals of the data controller, notarized at the place of signing, and apostilled before the Representative can be appointed.

What happens if you do not appoint a representative?

In case that a data controller subject to VERBIS registration obligation fails to comply with this obligation and to reflect the updated data processing to the VERBIS form, an administrative fine for 2023 is between TRY 65,856 and TRY 3,293,126. The higher is the value of total assets shown in the financial statements of the data controllers who fails to comply with their obligations fines, the closer to the upper limit the sanction amount will be as a result of the algorithm used by the Board to determine the amount of fines to be imposed.

Benefits of our service as a KVKK representative

KVKK requires you to appoint a Data Protection Representative (DPR) if you are a company processing personal data of Turkish individuals. DPOsphere can provide you with this service while also providing you with a number of competitive benefits.

Contact Us

Turkish office assisted by our Turkish company to act as your DPR and to complete the VERBIS registration.

The contact person must be registered and be in charge of communicating with the Turkish data protection authority.

Using the DSAR and ROPA tool, manage all incoming data subject requests and manage ROPA and VERBIS.

4 Compelling
Reasons to Select
DPOsphere as Your
EU Representative

1

Specialised Lawyers and Specialists

We are an established GRC firm with a focus on data protection. Our lawyers and specialists are certified in a range of information security and data protection practices.

2

Years of Experience

We have a wealth of data protection experience and have worked closely with both Turkey regulatory bodies and data subjects for many years.

3

Truly Local

The data protection regulations of Turkey are thoroughly understood by our local team.

4

Additional Support

We answer any of your questions on Turkey data protection law, assist you in responding to inquiries from authorities and data subjects, and, if needed, may offer full support for establishing a data protection management system (DPMS).