TurkeyRegulation on Personal Health Data (Resmî Gazete 21 June 2019, No. 30808)
Regulation on Personal Health Data (Resmî Gazete , No. 30808), Arts. 2, 5, 6 and 11
In force since .
A sensitive categories rule binding public and private bodies.
- Audit expectation
- none
What it requires
- A health service provider must let its staff reach a person's health data only as far as the health service to be given requires.
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
The Regulation limits access to health data and sets retention for a deceased person's data (Article 11(2)); it names no log of access or other processing events.
- Kind
- None
- As of
What this law does
Article 2(1) applies the Regulation to private-law persons and public-law legal entities that process personal health data, in their activities within the processes and applications run by the Ministry of Health. Article 6(1) limits the staff who provide a health service to a person's health data only as far as the health service to be given requires.
Article 5(4) requires a health service provider to take the physical, technical and administrative measures that keep unauthorized people out of counter and desk areas and stop people served at the same time from hearing or seeing one another's personal data. Article 5(5) requires a health service provider to partly de-identify or mask printed material that carries a patient's personal health data, such as test results. Article 11(2) requires the health data of a deceased person to be kept for at least 20 years.
When LexLint raises it
When your app profile says your app handles health records or processes personal data.
Back to the example · Lint your app
Page updated .