VERBIS Registration Deadline: Was It Extended? Current 2026 Dates

Deadline questions dominate VERBIS searches for a simple reason: the calendar is not fixed. Thresholds are revised by Board decisions and deadlines get extended by announcement, and every revision re-opens the same two questions — are we in scope now, and how long do we have? This page tracks the current answer and stays updated as the calendar moves.

The Current Position: 5 June 2026

The 2026 revision updated the registration scope: controllers with more than 50 employees OR an annual balance sheet above 100 million TRY, and organisations whose core business is processing sensitive personal data, fall within it — as do foreign-established controllers processing personal data in Turkey, with no size threshold. For controllers newly in scope, the registration deadline was extended by Board announcement to 5 June 2026. The full scope rules are covered in the who-must-register guide.

Who the Deadline Applies To

• Newly in-scope controllers: organisations brought into the obligation by the revised criteria — the announced deadline is theirs.
• Already-obliged controllers who never registered: the extension is not an amnesty; their obligation predates it, and registration should be completed without further delay.
• Controllers whose obligation starts later: crossing a threshold or changing activity triggers the standing rule — application within 30 days of the obligation arising, independent of any announced calendar.

If You Have Already Missed the Deadline

A passed deadline does not extinguish the duty; every unregistered month extends the exposure. Non-registration is an administrative offence with fines revalued annually, reaching into the millions of lira. The plan is short: confirm your scope position today, start the data-inventory work immediately — it is the precondition for a truthful declaration — and file the application without waiting for the inventory to finish, since the application step itself needs no inventory. The steps are laid out in the step-by-step registration guide. The one shortcut to avoid: filing a copy-paste declaration to look fast. A declaration that contradicts reality is a worse position than a late one.

The 2026 Calendar at a Glance

Situation	Applicable period
Controllers newly in scope under the revised criteria	5 June 2026 (extended by Board announcement)
Obligation arising later (threshold crossed, activity changed)	30 days from the date the obligation arises
Changes to registered information	Update within 7 days of the change

Will the Date Move Again?

History says extensions happen — this one continues an established pattern. Planning around "it will surely slip again", however, is a gamble: extensions arrive by announcement and are never guaranteed. The sound approach is to verify the current date against the Authority's official announcements and finish the preparation regardless of the calendar.

Spend the Extension on Preparation, Not Waiting

The most productive use of an extended deadline is the inventory work. Yamanlar Bilişim's VERBIS technical readiness inventory establishes the factual state of the declaration's four technical headings — systems, hosting locations, data flows, security controls — and hands your legal adviser a foundation to draft the entry on facts. The same exercise routinely surfaces security findings worth fixing whatever the registry says.

FAQ