
Publication
Blue Bonds: Making a splash in the Capital Markets
In 2018, the Republic of Seychelles launched the first-ever “blue bond”, with the support of the World Bank Group and the Global Environment Facility.
Global | Publication | November 2019
This article was written by Ekin İnal, Partner at İnal Kama Attorney Partnership, affiliate firm of Norton Rose Fulbright in Turkey.
Data Controllers' Registry or VERBİS is a publicly available database kept by the Data Protection Board (the “Board”), the decision-making body of the Turkish Data Protection Authority (the “DPA”). Unless exempt from the requirement, all data controllers (individuals and legal entities) who process personal data in Turkey must be recorded with VERBİS prior to processing any personal data. The majority of data controllers must register by the end of this year. However, there are certain actions to be taken by the data controllers that must be taken into consideration to avoid any delays and possible penalties by the DPA.
Data controllers that fail to fulfil this obligation may be subject to an administrative fine in an amount between TL 20,000–1,000,000 (approx. US$3,600-180,000).
The following data controllers must complete their registration with VERBIS prior to the deadlines set forth below:
To the extent they process personal data, individuals must also register with VERBİS by the applicable deadline.
When assessing the registration obligation of foreign data controllers, the DPA has not taken into consideration the number of employees, annual financial statements or the scope of activities. These criteria apply to Turkish data controllers. The DPA has stated that it is required and sufficient that a foreign data controller processes personal data of data subjects resident/located in Turkey and there seems to exist no de minimis threshold for registration.
If a data controller becomes subject to the registration requirement after the deadlines listed above (as it fulfils the criteria), then it must register with VERBİS within 30 days upon fulfilment of the criteria. Exemption from the registration requirement does not relieve data controllers of other duties and obligations under the data protection legislation.
The registration process is similar for local and foreign data controllers, except that the foreign data controllers must first appoint a representative (veri sorumlusu temsilcisi) for VERBİS-related actions.
Below-listed information is required for VERBİS registration:
Publication
In 2018, the Republic of Seychelles launched the first-ever “blue bond”, with the support of the World Bank Group and the Global Environment Facility.
Publication
On 8 May 2025, the Court of Justice of the European Union (the CJEU) delivered its ruling in case C-581/23 (the Ruling), providing guidance on one of the conditions for an exclusive distribution agreement to benefit from the block exemption under Article 4(b)(i) of the 2010 Vertical Block Exemption Regulation (the VBER)1, notably the so-called ‘parallel imposition requirement’.
Publication
Antitrust authorities are increasingly aggressive in pursuing new theories of harm, pushing the boundaries of what amounts to an antitrust violation, and expanding the use of current legislation and regulation to fit a new era of issues.
Subscribe and stay up to date with the latest legal news, information and events . . .
© Norton Rose Fulbright LLP 2025