The Decision Dated 23.06.2020 and Numbered 2020/482, Taken by the Personal Data Protection Board within the Context of the Corona Virus Measures

As is known, due to the Covid-19 pandemic which has serious negative effects in our Country as with all over the world, measures are taken in respect of the necessary matters and the relevant legal arrangements continue to be made in our Country.

In this context, as a result of the evaluations carried out on the requests conveyed to the Personal Data Protection Authority (“the Authority”) by the Union of Chambers and Commodity Exchanges of Turkey (“the TOBB”) and various sector representatives about the extension of the deadlines for registration with the Data Controllers’ Registry (“the Registry”) on the ground that some of the workplaces are physically closed or a remote/alternate working method is applied and that the data controllers could not therefore prepare personal data processing inventory and they could not fulfill in due time the obligation to register with the Registry; the Board has, in its decision dated 23.06.2020 and numbered 2020/482, resolved that the date determined to fulfill the obligation to register with the Registry is hereby extended to 30.09.2020 for the real and legal person data controllers and the real and legal person data controllers domiciled abroad, whose yearly number of employees is more than 50 or the yearly balance sheet total exceeds 25 million Turkish Liras and that this decision shall be published in the Official Gazette. 

The Board decision has entered into force as published in the Official Gazette dated 25 June 2020 and numbered 31166.

 Pursuant to the decision taken by the Personal Data Protection Board, it has been resolved that:

• the date determined to fulfill the obligation to register with the Registry is hereby extended to 30.09.2020 for the real and legal person data controllers and the real and legal person data controllers domiciled abroad, whose yearly number of employees is more than 50 or the yearly balance sheet total exceeds 25 million Turkish Liras;
• the date determined to fulfill the obligation to register with the Registry is hereby extended to 31.03.2021 for the real and legal person data controllers whose main field of activity is to process sensitive personal data and whose yearly number of employees is less than 50 or the yearly balance sheet total is less than 25 million Turkish Liras; and
• the date determined to fulfill the obligation to register with the Registry is hereby extended to 31.03.2021 for the public institution and organization data controllers.

References:

• https://www.resmigazete.gov.tr/eskiler/2020/06/20200625-2.pdf
• https://kvkk.gov.tr/Icerik/6750/VERBIS-E-KAYIT-SURELERININ-UZATILMASI-HAKKINDA-DUYURU