Legal advisory and advocacy services from various legal disciplines in Turkey

The Personal Data Protection Board (“Board”) has updated the exemption criterion specified in its decision dated 06.07.2023 and numbered 2023/1154, which regulates exemptions from the obligation of data controllers to register with the Data Controllers’ Registry Information System (VERBİS), through its decision dated 04.09.2025 and numbered 2025/1572, published today in the Official Gazette (“Update Decision”).

With the “Communiqué on the Keeping of Commercial Ledgers Not Related to the Accounting of the Enterprise in Electronic Format” (“Communiqué”), published in the Official Gazette dated 14 February 2025 and numbered 32813, the obligation to keep certain commercial ledgers in electronic format has been introduced for specific companies. The aim is to ensure the secure storage of ledgers in a digital environment, facilitate access and auditing, and reduce the need for notary procedures.

In its principle decision dated 10 June 2025 and numbered 2025/1072 (“Principle Decision”), the Personal Data Protection Board (“Board”) set out the principles regarding the processing of personal data in the context of sending verification codes via SMS to data subjects during the provision of products and services. The Principle Decision is published in the Official Gazette dated 26 June 2025 and numbered 32938 and on the official website of the Personal Data Protection Authority.