Veri Sorumluları Sicili Hakkında Yönetmelik'in Getirdikleri Ve Yönetmelikte Dikkat Edilmesi Gereken Hususlar (The Issues Brought by the Regulation on the Data Controllers Registry and the Matters to be Considered in the Regulation)

Turkish Abstract: Kisisel verilerin korunmasi alaninin takipcileri tarafindan merakla beklenen ve ilk olarak 6698 sayili Kisisel Verilerin Korunmasi Kanunu’nda ongorulmus olan Veri Sorumlulari Siciline iliskin kapsamli duzenlemelere yer veren “Veri Sorumlulari Sicili Hakkinda Yonetmelik” 30 Aralik 2017 tarihinde 30286 sayili Resmi Gazete’de yayinlandi. Yonetmeligin yururluge giris tarihi ise 1 Ocak 2018 olarak belirlendi. Oncelikle belirtmek gerekir ki Veri Sorumlulari Sicili kavrami soz konusu Yonetmelikten once 6698 sayili Kanun’da zaten yer almaktaydi. Kanun’un 16. maddesine gore; “Kurulun gozetiminde, Baskanlik tarafindan kamuya acik olarak Veri Sorumlulari Sicili tutulur.” Boylece Kanun maddesiyle hem Kisisel Verilerin Korunmasi Kurulu’na Veri Sorumlulari Sicili tutulmasi, hem de kisisel verileri isleyen gercek ve tuzel kisilere sicile kayit olma bakimindan yukumluluk getirilmistir. Kanun’un ayni maddesinin 2. fikrasinda bu zorunluluga Kurul tarafindan istisna getirilebilecegine ve 3. fikrasinda da Veri Sorumlulari Siciline kayit basvurusunun hangi hususlari icermesi gerektigine yer verilmistir. Son olarak Kanun, ayni maddenin 5. fikrasiyla Veri Sorumlulari Siciline iliskin diger usul ve esaslarin yonetmelikle duzenlenecegini belirterek bugun inceleme konumuz olan Yonetmelik’in cikarilacagina dair ipucu vermistir. Veri Sorumlulari Sicili’ne kayit yukumlulugunun oneminin anlasilmasi adina Kanun’da ongorulmus olan yaptirimlara da deginmek gerekir. Kanun’un ‘Kabahatler’ baslikli 18. maddesinde; Veri Sorumlulari Siciline kayit ve bildirim yukumlulugune aykiri hareket edenler hakkinda 20.000 Turk lirasindan 1.000.000 Turk lirasina kadar, idari para cezasi verilecegi duzenlenmistir. Goruldugu gibi bu miktar oldukca yuksek olup; bu konuda dikkatli olunmasi gerekmektedir. Kanun’da konuyla ilgili son olarak Kurul’un gorev ve yetkileri baslikli 22. maddesinde Veri Sorumlulari Sicilinin tutulmasini saglamak Kurul’un; Baskanligin olusum ve gorevleri baslikli 25. maddesinde ise Veri Sorumlulari Sicilini tutmak Baskanligin gorevleri arasinda sayilmistir.English Abstract:: on the Registry of Data Controllers, which is highly anticipated by the followers of the field of personal data protection and first stipulated in the Law on Protection of Personal Data No.6698, was published in the Official Gazette numbered 30286 on December 30, 2017. effective date of the regulation was determined as January 1, 2018. First of all, it should be noted that the concept of Data Controllers Registry was already included in the Law No. 6698 before the Regulation in question. According to the 16th article of the Law; The Data Controllers Registry is kept publicly by the Presidency under the supervision of the Board. Thus, with the article of the Law, an obligation has been imposed on the Personal Data Protection Board in terms of keeping the Data Controllers Registry and the real and legal persons who process the personal data in terms of registering to the registry. In the second paragraph of the same article of the Law, it is stated that an exception may be made by the Board to this obligation and in the third paragraph, which matters should include the registration application to the Data Controllers Registry. Finally, the Law gave a hint that the Regulation, which is our subject of examination today, will be issued by stating that other procedures and principles regarding the Data Controllers Registry will be regulated by paragraph 5 of the same article. In order to understand the importance of the obligation to register in the Data Controllers Registry, it is necessary to mention the sanctions stipulated in the Law. In the 18th article of the Law titled Misdemeanors; It has been stipulated that those who violate the obligation to register and notify the Data Controllers Registry will be fined from 20,000 Turkish Liras to 1,000,000 Turkish Liras. As can be seen, this amount is quite high; it is necessary to be careful about this. Finally, in the Law, in article 22 titled the duties and powers of the Board, it is necessary to ensure that the Registry of Data Controllers are kept; In the 25th article titled Formation and Duties of the Presidency, keeping the Registry of Data Controllers is considered among the duties of the Presidency.