The data controller must fulfil the obligation to inform, take data security measures, respond to data subject requests and, if the conditions are met, register with VERBİS. A person processing data on behalf of the data controller is a data processor.
Related terms
Personal Data Protection Law (KVKK)Law No. 6698, which governs the protection of fundamental rights and freedoms in the processing of personal data and the obligations of data controllers.VERBİSThe Data Controllers' Registry Information System maintained by the Personal Data Protection Authority.Compliance auditAn examination of whether an organisation's activities are carried out in accordance with the relevant laws, regulations, contracts or internal rules.Compliance officerThe authorised person responsible for running the compliance programme for the prevention of money laundering and terrorist financing at an obliged entity.Compliance programmeThe full set of policies, procedures, controls, training and monitoring activities an organisation puts in place to ensure compliance with laws and internal policies.COSOThe organisation that publishes the most widely accepted frameworks for internal control and enterprise risk management, and the general name for those frameworks.
Last updated: October 22, 2026 · This definition is for general information only.