TurkeyRegulation on the Data Controllers Registry (Resmî Gazete 30 December 2017, No. 30286)
Regulation on the Data Controllers Registry (Resmî Gazete , No. 30286), Arts. 5, 16 and 17
In force since .
A comprehensive regime rule binding public and private bodies.
- Audit expectation
- none
What it requires
- An app that is a data controller must register in Turkey's Data Controllers Registry before it starts processing personal data.
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The Regulation requires registration and the filing of information about processing; it requires no log of processing events, and the Registry itself is kept by the Authority.
- Kind
- None
- As of
What this law does
Article 5(1)(a) requires a controller to register in the Data Controllers Registry before it starts processing personal data. Article 5(1)(b) requires a controller not established in Turkey to register through a controller's representative before it starts processing. Article 5(1)(e) makes the controller responsible for the information it submits to the Registry being complete, correct, current and lawful.
Article 16(1) allows the Board to exempt controllers from the duty to register by reference to criteria that include the nature, number and purpose of the data, the field of activity and the retention period. Article 17(1) applies the administrative fine in Law No. 6698 Art. 18(1)(c) to a controller that breaches the registration and notification duty.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .