Duty LXD-6826
Handles health records, in Turkey
Regulation on Personal Health Data (Resmî Gazete 21 June 2019, No. 30808)since 1 line
Regulation on Personal Health Data (Resmî Gazete , No. 30808), Arts. 2, 5, 6 and 11 · Read the law's page
- A health service provider must let its staff reach a person's health data only as far as the health service to be given requires.
Cybersecurity Law, Reporting and Cooperation Dutiessince 4 lines
Law No. 7545 (), Art. 7 · Read the law's page
- This binds any entity that uses information systems to provide services, collect data, or process data within the Cybersecurity Law's own broad scope, with no revenue or user threshold gating this particular duty; a separate, narrower certification and export-approval duty binds only cybersecurity product and service vendors and is not raised here.
- Report a detected vulnerability or cyber incident in the area of service provided to the Cybersecurity Directorate without delay; the Law's own text sets no numeric reporting clock.
- Provide the Cybersecurity Directorate promptly with any data, information, document, hardware, software, or other contribution it requests in connection with its duties.
- Where cybersecurity products, systems, or services are procured for use in a public institution or in critical infrastructure, source them only from a provider the Directorate has certified or authorized.