What Privacy of Medical Data means in a Turkish medical case
A review identifies the data controller, data categories, legal basis, purpose, recipients, cross-border transfers, security measures and response to the patient's request.
Consent is not the only possible legal basis, and a privacy complaint is distinct from a malpractice claim. Current KVKK rules and decisions should be checked.
Evidence that usually deserves early attention
Keep the relevant records in their original form, with dates and the issuing provider identified. This checklist helps organise an initial review.
- Privacy notice and consent records
- Data-access or correction request
- Identity of recipients and transfer trail
- Security incident and controller response
Official primary sources
Read the official text relevant to the treatment date and legal question. These sources explain the framework; they do not determine disputed facts in an individual case.
- Personal Data Protection Law No. 6698Personal Data Protection Authority
- Patient Rights RegulationRepublic of Türkiye Ministry of Health
- International Health Tourism and Tourist Health Regulation (26 April 2025)Republic of Türkiye Ministry of Health
Related glossary concepts
Questions patients often ask
Is explicit consent the only possible basis for processing health data?
No. Current KVKK Article 6 includes other specified conditions, including processing necessary to establish, exercise or protect a right. The purpose, applicable condition, safeguards and any transfer must be assessed separately.