Doctors and Dentists with Private Practi

Doctors and Dentists with Private Practice

Responsibilities under the Law on Protection of Personal Data

As it is known, registration periods for Data Controllers Registry Information System ("VERBİS");

Natural and legal person data controllers with an annual number of employees more than 50 or annual financial balance totaling more than 25 million TL, and real and legal person data controllers residing abroad, and
Natural and legal person data controllers whose annual number of employees is less than 50 and annual financial balance is less than 25 million TL and whose main activity is special quality personal data processing.

The period determined for them to fulfill these obligations has been determined as 31.12.2021.

Along with both the Law on Protection of Personal Data (the "Law") and the Regulation on Personal Health Data, the procedures and principles regarding the protection of personal data in the field of health have also been determined.

Private and public hospitals, private health institutions, doctors and dentists with private practice, pharmacies, etc. organizations that process special quality personal data within the scope of their main activities are covered by the Law.

What Are Sensitive Personal Data?

Data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dressing, membership of association, foundation or trade-union, health, sexual life, criminal conviction and security measures, and biometrics and genetics are special categories of personal data.

It is prohibited to process sensitive personal data without the express consent of the person concerned.

However, personal data other than health and sexual life can be processed without seeking the explicit consent of the person concerned, in cases stipulated by law. Personal data relating to health and sexual life, on the other hand, can only be obtained by persons under the obligation of secrecy or authorized institutions and organizations for the purpose of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, without seeking the express consent of the person concerned. can be processed.

We would like to remind you that in the processing of special quality personal data, it is also required to take adequate measures determined by the Board.

What are the responsibilities of doctors?

During the acquisition of personal data, the data controller or the person authorized by the person concerned;

The identity of the data controller and, if any, its representative,
For what purpose the personal data collected will be processed,
To whom and for what purpose the processed personal data can be transferred,
The method of collecting personal data, the legal reason and
It is obliged to give information about the rights of the person concerned.

Data controller; to prevent unlawful processing of personal data, to prevent unlawful access to personal data, and to take all necessary technical and administrative measures to ensure the appropriate level of security in order to protect personal data.

In its own institution or organization, it has to make or have the necessary inspections made in order to ensure the implementation of the Law.

Data controllers and data processors cannot disclose the personal data they have learned to anyone in violation of the provisions of the Law and cannot use them for purposes other than processing. These obligations continue even after they leave the job.

If the processed personal data is obtained by others through illegal means, the data controller must notify the relevant person and the Board as soon as possible. The Board, on the other hand, may announce this situation on its website or by any other method it deems appropriate, if it deems necessary.

We would like to remind you that the deadline for fulfilling VERBIS registration obligations has been set as 31.12.2021. However, we state that this date is only valid for registration obligations and that the obligations regarding the legal measures that should be taken under the law have been continuing since 2018.