Public Announcement on the VERBIS Registration and Notification Period for Corporate Taxpayer Legal Entity Data Controllers Subject to Registration Based on the 2025 Financial Balance Sheet Total Has Been Published

The public announcement (“Announcement”) regarding the registration and notification periods for corporate taxpayer legal entity data controllers that are obliged to register with the Data Controllers’ Registry (“VERBIS”) based on their 2025 financial balance sheet total was published on the official website of the Turkish Personal Data Protection Authority on 4 May 2026.

The following matters were highlighted in the Announcement in summary:

• It was recalled that the Revenue Administration determined 30 April 2026 as the final date for the submission of tax returns for 2025 corporate taxpayers.
• Within this scope, it was stated that corporate taxpayer legal entity data controllers whose 2025 financial balance sheet total exceeds the thresholds specified in the decisions of the Turkish Personal Data Protection Board (“Board”) (TRY 100 million and above for those whose main field of activity is not the processing of special categories of personal data, and TRY 10 million and above for those whose main field of activity is the processing of special categories of personal data) must complete their Registry registration and notification procedures within 30 days following 30 April 2026.
• It was further stated that although the relevant 30-day period would normally expire on 1 June 2026, the Board decided to extend the deadline with its decision dated 13.05.2026 and numbered 2026/1026, in order to prevent any inconvenience to data controllers due to the last week of the period coinciding with the Eid al-Adha holiday.
• Pursuant to the decision, the deadline for the relevant data controllers to fulfill their VERBIS registration and notification obligations has been extended to Friday, 5 June 2026.

You can access the full text of the Announcement here.