Kişisel Sağlık Verileri Yönetmeliğinin Yürütmesinin Durdurulmasına İlişkin Danıştay’ın 9.10.2018 Tarihli Kararına İlişkin Değerlendirme (Evaluation Regarding the Decision of the Council of State on the Suspension of the Execution of the Personal Health Data Regulation dated 9 October 2018)

Abstract

Turkish abstract: “Kisisel Saglik Verilerinin Islenmesi ve Mahremiyetinin Saglanmasi Hakkinda Yonetmelik” bircok kez tartisma konusu olmus ve deyim yerindeyse bir turlu yerine oturtulamamistir. Yonetmeligin ilk hali, 6698 sayili Kanun henuz yayinlanmisken, icerisinde yer alan bazi kavram ve tanimlar tam anlasilamamisken ve en onemlisi sik sik atif yapilan Kisisel Verileri Koruma Kurulu henuz goreve baslamamisken, dolayisiyla da Kurulun bu konuda gorusleri alinmadan yayinlanmis olmasi sebebiyle erken bir duzenleme oldugu yonunde elestirilmekteydi. Nitekim Yonetmeligin yurutulmesi Danistay tarafindan durdurulmus ancak bu dogrultuda bazi degisiklikler yapilarak Yonetmeligin degisiklik yapildigi haliyle tekrar yayinlanmistir. Yapilan degisikliklerle kisisel verilerin korunmasi mevzuatina uyumlu ve paralel duzenlemeler yapilmaya calisilmasi amacinin net bir bicimde ortaya kondugunu dusunuyorum. Bununla birlikte, Yonetmeligin degisiklik yapildigi halinin bile kisisel verilerin korunmasinin saglanmasi hakkinda birtakim ciddi tereddutler barindirdigini belirtmeliyim. Nitekim konuya iliskin bir onceki degerlendirme yazimda da her bir degisiklik ozelinde elestirilerimi ifade etmistim. Yonetmelik, degisiklik yapildigi haliyle de kisisel saglik verilerinin korunmasi bakimindan tatmin edici yenilikler getirememis olmasi sebebiyle Turk Tabipleri Birligi ve Turk Dishekimleri Birligi tarafindan Danistay’da dava konusu edilmistir. Nihayet, Danistay tarafindan Kisisel Saglik Verilerinin Islenmesi ve Mahremiyetinin Saglanmasi Hakkinda Yonetmelikte Degisiklik Yapilmasina Dair Yonetmelik’in yurutulmesinin durdurulmasina karar verilmistir. Buraya kadarki gelismeler bu sekilde olmakla birlikte, asagida soz konusu Danistay karari hakkinda, durdurulmasi istenen maddeler ve bu maddelerin kisisel verilerin korunmasi mevzuatina uygunlugu bakimindan ele alarak degerlendirmede bulunacagim. English abstract: The on the Processing of Personal Health Data and Ensuring Confidentiality has been the subject of many discussions and could not be put into place, so to speak. The first version of the regulation, Law No.6698, was criticized as an early regulation due to the fact that some concepts and definitions in it were not fully understood and most importantly, the Personal Data Protection Board, which is frequently cited, had not yet started to work, and therefore was published without the Board's opinions on this issue . As a matter of fact, the execution of the Regulation was suspended by the Council of State, but some changes were made in this direction and the Regulation was published again as amended. I think the amendments made it clear that the purpose of trying to make arrangements in line with the legislation on the protection of personal data and in parallel. However, I should state that even the amendment of the Regulation raises some serious hesitations about the protection of personal data. As a matter of fact, I have expressed my criticism for each change in my previous review article on the subject. The regulation, as amended, has been subject to a lawsuit at the Council of State by the Turkish Medical Association and the Turkish Dental Association since it could not bring satisfactory innovations in terms of protection of personal health data. Finally, it was decided by the Council of State to suspend the execution of the Regulation Amending the Regulation on Processing Personal Health Data and Ensuring Privacy. Although the developments so far have been in this way, I will make an evaluation about the said Council of State decision below, by considering the articles requested to be stopped and the compliance of these articles with the legislation on protection of personal data.