Personal Health Data Protection

The protection of personal data (including personal health data) is regulated under Personal Data Protection Law ("DPL") numbered 6698. The DPL provides legal reasons for the processing of personal data and for sensitive personal data (data relating to race, ethnic origin, political beliefs, philosophical beliefs, religion, denomination, or other faiths, clothing and attire, membership of an association, charity or union, criminal convictions, and security measures, as well as biometric and genetic data). Data processing conditions are more regulated and subject to the explicit consent of the data subjects, or such data may be processed if case processing is required by law. It must be noted that personal data relating to health or sexual orientation is protected more strictly than other sensitive data, as the scope of the additional legal grounds for processing is quite limited.