As many healthcare institutions start maintaining electronic
medical records, healthcare data security becomes one of the most
important aspects of data protection. The rapid growth in adoption
of technology across medicine has brought along and introduced some
gaps and legal concerns with health data protection, and thus paved
the way for regulatory rules and guidance in this field.
Regulation on Processing and Privacy of Personal Health Data[1] ("Previous Regulation") was the
first action taken by the Turkish authorities to regulate privacy
of personal health data. This regulation was published in the
Official Gazette of October 20, 2016. However, the Council of State
ceased the execution of with its decision numbered 2016/10500 E.
the Previous Regulation Even though an amendment to the Previous
Regulation was published in the Official Gazette of November 24,
2017, the Council of State explicitly stated that a new regulation
would need to be drafted in order to
