COMPREHENSIVE CHANGE IN E-PULSE AND HEALTH DATA!
Ministry of Health, Significant changes were made to the Regulation on Personal Health Data. e-Pulse security settings with the new regulation, Innovations have been introduced on issues such as access times to health data and access to child data of divorced families.
December 3rd 2025 published in the Official Gazette dated “Regulation Amending the Regulation on Personal Health Data” The rules regarding access and protection of citizens' health data have been updated..
NEW SECURITY AND ACCESS RULES IN E-NABIZ
One of the most striking regulations in the regulation, There were articles that redefined physicians' authority to access historical health data.
1. Physician Access Times Are Limited
Access to health data, basically the Personal Data Protection Law (KVKK) 6. limited to the processing conditions in the third paragraph of the article. In this context:
Family Physician: Can access without any time limit.
Examining Physician: Days receiving health care, including consultation and control examination period, will be able to access until the directly related transactions are completed..
Inpatient Physicians: The patient will have access until discharge.
Emergency Department Physicians: Limited to relevant healthcare services, The patient will have access until discharge.
2. Accessing Historical Data via SMS Code
Contacts, You will be able to restrict the viewing of past health data by physicians by making security settings on your e-Nabız accounts.. In this situation, For the physician to access historical data:
The code that will be sent to the phone number declared in the person's profile will need to be shared with the physician and entered into the system by the physician..
3. Security Setting Exception: Prisoners and Convicts
Situations that may prevent obtaining a code, such as detention or conviction, There will be no security settings checks. Health data of these people, The family doctor and all physicians he consults will have access under limited conditions..
ACCESS TO DATA OF CHILDREN AND DISABLED PEOPLE
Regulation, clarified access to children's health data in cases of divorce and access by caregivers of people with disabilities.
1. Child Data in Divorce
During Divorce Case: The party to whom the right of custody is given as a precautionary measure, will be able to access the child's health data.
After Divorce: The party granted custody will be able to access the child's health data.
Noncustodial Parent: In case of application to the General Directorate of the Ministry of Health, application will be evaluated. If it turns out positive, Inferences can be made regarding the child's health, location, Data stripped of data such as address or contact information may be shared with the requesting parent..
2. Caregiver Definition and Access
Regulation “caregiver” definition added. Moreover, Health data of people with a disability report, It has been stipulated that access can also be provided by defined caregivers..
OTHER IMPORTANT CHANGES
Data Request Time: Response time for requests for information or correction of personal health data 20 from day 30 brought up to day.
Registration Cancellation: Revocation of the authorizations of personnel who process personal health data unlawfully, “Necessary procedures are taken by the disciplinary authority.” changed to.
New Regulation, with publication date 3 December 2025 entered into force on.
3 December 2025 WEDNESDAY
Official Gazette
Number : 33096
REGULATIONS
From the Ministry of Health:
CHANGE IN THE REGULATION ON PERSONAL HEALTH DATA
REGULATION ON ITS CONSTRUCTION
ARTICLE 1- 21/6/2019 dated and 30808 Regulation on Personal Health Data published in the Official Gazette No. 1 The phrase "affiliated and related organizations" in the first paragraph of the first article has been changed to "affiliated and related organizations of the Ministry of Health"..
ARTICLE 2- Same Regulation 3 The third article has been amended as follows.
"ARTICLE 3- (1) This Regulation, 7/5/1987 dated and 3359 of the Basic Law on Health Services No. 3 first paragraph of the third article (f) clause and annex 19 to the article, 24/3/2016 dated and 6698 and the Personal Data Protection Law no. 1 Presidential Decree on the Presidential Organization no. 352 nci, 358 pearl and 508 It was prepared based on pearl ingredients.”
ARTICLE 3- Same Regulation 4 The following clause has been added to the first paragraph of the third article:.
“t) caregiver: Parent or guardian of the child or natural or legal persons authorized to be responsible for the child's care and supervision,”
ARTICLE 4- Same Regulation 5 The phrase "necessary for the provision of health services" in the third paragraph of the Article 6 has been amended as "envisaged by the processing conditions in the third paragraph of Article 1..
ARTICLE 5- Same Regulation 6 The second and third paragraphs of the article have been amended as follows:, The fourth paragraph has been rearranged as follows and the fifth paragraph has been amended as follows.
“(2) Law on people's health data 6 Only limited to the processing conditions in the third paragraph of Article 1.;
a) by the family physician with whom the person is registered, without any time limit.,
b) By the physician to whom the person applies to receive health care; Days receiving health care, until the procedures directly related to the healthcare service received, including the consultation or control examination period, are completed.,
c) by physicians working at the health service provider to which the person applies to receive health care.; Days receiving health care, until the procedures directly related to the healthcare service received, including the consultation or control examination period, are completed.,
ç) By physicians working at the health service provider where the patient is hospitalized, until the patient is discharged from the healthcare provider.,
d) People who entered through the emergency service, limited to relevant health services, until discharge by all physicians in the health facility where the emergency department is located.,
accessible.
(3) Health data of people who choose security settings through their e-Nabız account, Access is provided within the framework of its own security settings. Contact persons, are informed in detail about security settings and their consequences. The Ministry will not be responsible for any disruptions or damages that may occur in the provision of health services due to security settings and inability to view past health data.. The first sentence of this paragraph, of the second paragraph (ç) ve (d) In cases specified in the paragraphs of the Law 6 It is not applicable, provided that it is limited to the processing conditions in the third paragraph of Article 1.
“(4) Historical health data of people who do not want their health data to be accessed in cases with the security preferences offered, It can be accessed if the code sent to the phone number declared by the person in his/her profile is shared with the physician and entered into the system by the physician.”
“(5) Even if individuals have made their e-Pulse security settings in accordance with the fourth paragraph, in cases where they cannot access the code to be sent within the scope of the fourth paragraph due to situations such as detention and conviction, no security setting check will be made and the person's health data will not be subject to the Law. 6 Family physicians and all physicians they examine can provide access, provided that it is limited to the processing conditions in the third paragraph of Article 1.. "If these situations disappear, the person can choose security settings again."
ARTICLE 6- Same Regulation 7 The second paragraph of the article has been amended as follows and the third paragraph of the same article has been abolished..
“(2) Users authorized by the General Directorate upon the request of the unit chief can use this authority., of the law 6 "They may use it in accordance with the principles of personal data protection legislation, limited to the processing conditions in the third paragraph of Article 1."
ARTICLE 7- Same Regulation 8 The second paragraph of the th article has been amended as follows and the following paragraphs have been added to the same article..
“(2) "While the divorce case is ongoing, the party whose custody rights have been granted as a precautionary measure may access the child's health data."
“(3) In case of divorce, the party with custody rights can access the child's health data..
(4) If a mother or father who is not granted custody applies to the General Directorate regarding health data regarding their child, this application will be evaluated by the General Directorate.. If the application is positive; Location of the party or child to whom custody is granted, "Data that is free from data such as address or contact information and that can only make inferences about the child's health can be shared with the requesting mother or father."
ARTICLE 8- Same Regulation 9 The title of the first article has been changed to "Access to health data by patients' relatives and relatives of people receiving health services", "Regulation" in the first paragraph of the same article 18 The phrase "to the third paragraph of the th article" has been changed to "to the provisions of the Regulation" and the following paragraph has been added to the same article..
“(2) Health data of people with a disability report, It can also be accessed by caregivers.”
ARTICLE 9- Same Regulation 10 Article 1 has been repealed.
ARTICLE 10- Same Regulation 11 The phrase "20" in the second paragraph of the article has been changed to "30"..
ARTICLE 11- Same Regulation 13 The phrase "at the relevant health service provider" in the first paragraph of the third article has been changed to "in accordance with the rules published by the General Directorate"..
ARTICLE 12- Same Regulation 21 The phrase "authorities, if any, are cancelled" in the second paragraph of Article 1 has been changed to "necessary actions are taken by the disciplinary authority"..
ARTICLE 13- This Regulation shall enter into force on the date of its publication..
ARTICLE 14- The Minister of Health shall enforce the provisions of this Regulation..
