TBB Personal Data Protection Law Commission President Av. Hüseyin Köprülü provided information on KVKK and VERBİS records at Endüstri Radyo. Explaining the registration deadline and which companies are mandatory, Köprülü explained the obligations within this scope.
Speaking to Radio Industry Association of Bar Associations of Turkey Personal Data Protection Law Commission President Av. Hüseyin Köprülü provided information on companies' obligations under the law on protection of personal data.
MAIN FIELD OF ACTIVITY: SPECIAL QUALITY DATA
Stating that VERBIS registration is mandatory for companies with a financial balance of more than 25 million or with 50 or more employees, Köprülü, the companies whose main field of activity is special in the health field (pharmacy, hospital, psychologist, dietician, etc.) He stated that March 31, 2021 is the deadline for registration.
Making specific statements to Industry Radio, Köprülü said, “The main criterion here is that its main field of activity is special data. These, in turn, need to come to mind data such as people being harmed or discriminated against when hearing information such as health, sexual life, biometric and genetic data by other people. " said.
DO NOT LEAVE LIABILITIES
Stating that we cannot separate the obligations within the scope of the personal data protection law, Köprülü said that if data is processed in an organization, it is done as part of a data recording system, that is, by recording it in a book, camera or computer, it is what the data controller must do under the law.
Köprülü said, “To process data in accordance with the law, to ensure that the data is deleted after its expiry date or after obtaining express consent, not to transmit or transfer illegally to abroad, to inform the relevant persons and to exercise their rights, to fulfill the obligations related to data protection. and VERBIS registration is required for data controllers above certain obligations. " said.
Köprülü stated that VERBIS record is an obligation for some data controllers, but that all other obligations are valid for all data controllers and that there is no date for them.
Köprülü added that all data controllers must act in accordance with the law.