How to Obtain Medical Records from a Turkish Hospital as a Foreign Patient

Medical records can become one of the most important pieces of evidence after receiving treatment in Turkey.

A foreign patient may need the records simply to continue treatment after returning home.

In other situations, the documents may be required because surgery resulted in a complication, the patient suspects medical negligence, corrective treatment is required or a dispute has arisen with the hospital or clinic.

A British patient returning from cosmetic surgery in Istanbul may need the operative report before a surgeon in London can safely perform revision surgery.

A German dental patient may need implant records and radiological images before another dentist can determine what went wrong.

A patient who underwent bariatric surgery may need laboratory results, anaesthesia documentation and surgical reports after developing complications abroad.

In these circumstances, patients frequently experience the same problem:

They ask the Turkish clinic for their documents and receive only a one-page discharge summary.

Or the clinic sends several photographs but not the actual operative report.

Or staff say:

“We cannot give you the medical file because it is confidential.”

Sometimes a hospital simply stops responding after a complaint is made.

Foreign patients should know that Turkish law provides a clear starting principle:

A patient has the right to inspect medical records concerning his or her health and obtain copies of them.

Article 16 of the Turkish Patient Rights Regulation states that a patient may examine the file and records containing information concerning the patient’s health and obtain copies, either directly or through an authorised representative or legal representative.

This protection is not limited to Turkish citizens.

The Patient Rights Regulation applies broadly to public and private healthcare institutions and persons entitled to receive healthcare services.

International health-tourism patients also benefit from additional documentation rights under Turkey’s current International Health Tourism and Tourist Health Regulation.

Accordingly, a foreign patient who has already returned to the United Kingdom, Germany, France, the Netherlands, Belgium, Ireland, the United States, Canada, Australia, a Gulf country or another jurisdiction should not assume that returning to Turkey is necessary merely to obtain medical documentation.

This guide explains what medical records a foreign patient can request from a Turkish hospital, how the request should be made, what to do if the hospital refuses and why obtaining the complete file can be critical in a medical malpractice case.

Do Foreign Patients Have a Legal Right to Their Medical Records in Turkey?

Yes.

Article 16 of the Patient Rights Regulation provides one of the clearest legal foundations.

It states that the patient may inspect the file and records containing health information and may obtain a copy either directly or through:

• an authorised representative;
• or a legal representative.

The same provision also protects confidentiality by restricting access to those who are legitimately entitled to see the records.

This creates an important distinction.

The fact that medical information is confidential does not normally mean that the hospital can withhold the patient’s own records from the patient.

Confidentiality primarily protects the patient against unauthorised third-party access.

It is not generally a basis for denying the patient access to his or her own medical information.

Can a Turkish Lawyer Obtain the Records for a Foreign Patient?

Potentially, yes.

Article 16 expressly allows the patient to inspect the records and obtain copies through an authorised representative.

This is particularly useful for international patients who have already returned home.

A foreign patient may appoint Turkish counsel through an appropriate power of attorney.

Depending on the country and the circumstances, this may commonly be arranged through:

• a Turkish consulate;
• or an appropriate foreign notarial procedure followed by apostille or other authentication and Turkish translation where required.

The exact formalities should be checked for the particular country and scope of authority.

Once appropriately authorised, the lawyer may potentially contact the hospital formally and request the documents on behalf of the patient.

This can be especially useful where:

• the hospital stopped answering WhatsApp messages;
• a medical negligence claim is being considered;
• several different departments hold parts of the records;
• documents need to be preserved formally.

What Medical Records Should a Foreign Patient Request?

One of the most common mistakes is asking only for:

“my medical report.”

That phrase can be interpreted narrowly.

The hospital may send only a discharge summary.

But a discharge summary is rarely the complete medical record.

Where the patient needs a full understanding of the treatment, particularly for corrective treatment or legal review, the request should be much more specific.

Depending on the procedure, the patient should consider requesting one comprehensive file including:

• patient admission and registration records;
• initial examination records;
• medical history;
• consultation notes;
• preoperative assessments;
• laboratory results;
• blood test results;
• radiological reports;
• X-rays;
• CT scans;
• MRI records;
• ultrasound images and reports;
• preoperative photographs;
• informed-consent forms;
• patient information forms;
• anaesthesia consent documents;
• anaesthesia assessment;
• anaesthesia record;
• operative report;
• surgical notes;
• nursing observation notes;
• medication administration records;
• vital-sign monitoring;
• intensive-care records where applicable;
• consultation requests to other specialists;
• pathology results;
• implant information;
• medical-device information;
• prescriptions;
• postoperative follow-up notes;
• complication-management records;
• discharge summary;
• invoice and itemised treatment statement.

The exact list should be adapted to the procedure.

The Operative Report Is Particularly Important

For surgical patients, the operative report can be one of the most important documents.

It may explain:

• what operation was actually performed;
• surgical findings;
• technique used;
• complications observed during surgery;
• medical devices or implants used;
• surgical steps undertaken.

This becomes particularly important where the patient believes that the procedure actually performed differed from what was agreed.

For example, a patient may believe that one specific cosmetic operation was agreed but later suspect that an additional or different intervention occurred.

The operative record can help establish what happened.

Anaesthesia Records Should Not Be Forgotten

Foreign patients frequently request the surgeon’s report but forget the anaesthesia documentation.

This can be a serious omission where the complication involved:

• cardiac arrest;
• oxygen deprivation;
• blood-pressure problems;
• airway management;
• anaesthetic medication;
• recovery from anaesthesia.

Relevant records may include:

• anaesthesia pre-assessment;
• intraoperative anaesthesia chart;
• medication records;
• vital signs;
• recovery-room records.

A complete malpractice review may require evaluation by more than one medical specialty.

Ask for Radiological Images, Not Only Written Reports

This is particularly important.

A radiology report is not the same thing as the actual image.

For example, a patient may receive a written CT report but an independent specialist may need to review the original images.

Foreign patients should therefore request both:

the written radiology report

and

the underlying digital image where available.

Turkey’s International Health Tourism Regulation expressly requires qualifying laboratory/test results and radiological images paid for by the patient to be provided without charge upon request, subject to the specific exception concerning originals in forensic cases.

This can be especially useful for:

• orthopaedic disputes;
• dental treatment;
• implant placement;
• neurological cases;
• surgical complications.

International Medical Tourists Have Additional Documentation Rights

The International Health Tourism and Tourist Health Regulation, effective since 26 April 2025, creates specific documentation rights for patients receiving international health-tourism services.

Article 12 requires the healthcare institution to issue an invoice or sales receipt.

The provider must also prepare a document showing:

• a detailed breakdown of the healthcare services;
• and the unit prices.

In addition, certain documents must be provided free of charge when the patient requests them.

These include, depending on the circumstances:

• a list showing the type and quantity of medicines and consumable materials used by the healthcare facility and charged to the patient;
• laboratory tests and analysis results paid for by the patient;
• radiological images paid for by the patient;
• prescriptions for medicines and materials purchased outside the healthcare facility.

This is especially valuable where the patient is investigating both medical malpractice and overcharging.

Article 12 Does Not Mean These Are the Only Records a Patient Can Obtain

This distinction is important.

The International Health Tourism Regulation specifically lists certain documents that must be provided free of charge upon request.

That does not mean the patient has no right to request other medical records.

The broader right is found in Article 16 of the Patient Rights Regulation.

Under Article 16, the patient may inspect health-related files and records and obtain copies.

Accordingly, the international health-tourism rules and general patient-rights rules should be read together.

A hospital should not normally respond:

“Article 12 only lists laboratory tests and X-rays, so we do not have to provide your operative report.”

The patient’s broader record-access rights remain relevant.

Can the Patient Request Correction of Incorrect Medical Records?

Yes.

Article 17 of the Patient Rights Regulation gives patients the right to request that incomplete, unclear or incorrect medical and personal information in healthcare-provider records be:

• completed;
• clarified;
• corrected;
• brought into conformity with the patient’s final health and personal status.

The right also includes objections to medical reports and the ability to request a new report concerning the patient’s condition from the same or another healthcare institution.

This can be important where a patient discovers obvious inaccuracies.

For example:

• the record identifies the wrong procedure;
• an incorrect medical history is recorded;
• the patient’s personal details are wrong;
• a report states something inconsistent with the actual treatment.

Patients should distinguish, however, between correcting factual inaccuracies and attempting to rewrite a doctor’s genuine medical opinion simply because they disagree with it.

A disagreement may instead require an objection or independent medical report.

Why Hospitals May Ask for Identity Verification

A hospital may legitimately want to verify that the person requesting the records is actually the patient or an authorised representative.

This should not automatically be interpreted as obstruction.

Medical records contain health data, which are subject to heightened personal-data protection under Turkish law.

Current guidance from Turkey’s Personal Data Protection Authority treats health information—including appointments, medical tests, preliminary diagnoses, diagnoses and treatment information—as special-category personal data.

Healthcare providers must therefore balance two obligations:

the patient’s right of access, and

the obligation to prevent disclosure to unauthorised persons.

A hospital may reasonably request identifying information or evidence of representation before releasing sensitive records.

What Information Should a Foreign Patient Include in a Formal Request?

The request should be clear enough for the hospital to identify:

who is requesting the records,

which treatment is involved,

and

what documents are required.

Useful information can include:

• patient’s full name;
• nationality;
• passport number;
• date of birth;
• treatment date;
• hospital or clinic name;
• treating doctor;
• patient or protocol number if known;
• email address;
• address for correspondence;
• detailed list of requested records.

If the request is being made through a lawyer, appropriate power-of-attorney documentation should also be included.

For personal-data applications under Turkey’s data-protection framework, the application rules specifically contemplate foreign applicants supplying nationality, passport number or, where available, another identity number, together with contact details and the subject of the request.

Should the Request Be Made by WhatsApp?

WhatsApp can be useful as an initial communication channel.

But where records may later become evidence in litigation, relying solely on casual WhatsApp messages is often not ideal.

A stronger approach is a formal and provable request.

Depending on the hospital’s procedures and legal basis being used, this may involve:

• written application;
• registered electronic mail where available;
• secure electronic-signature channels;
• a previously registered email address;
• the healthcare institution’s designated data-protection or patient-rights application mechanism.

Turkish data-protection rules recognise several formal application methods, including written application, KEP, secure electronic signature, mobile signature and an email address previously registered in the data controller’s system.

The exact method should be selected based on the hospital and circumstances.

The important point is to preserve proof of:

• what was requested;
• when;
• from whom.

Can the Patient Use Turkish Data-Protection Law to Request Records?

Potentially, yes.

Medical records are also personal data.

Under Article 11 of Turkey’s Personal Data Protection Law, the rights of the data subject include obtaining information about personal data being processed.

The Personal Data Protection Board has expressly recognised that the right to information under Article 11 can encompass a right of access to the relevant personal data.

Article 13 provides a formal application procedure to the data controller.

The data controller must generally respond as quickly as possible and no later than 30 days, subject to the statutory rules concerning any additional cost.

This creates an additional route where an ordinary patient-record request is ignored.

However, the Patient Rights Regulation remains a very direct healthcare-specific basis for requesting copies of medical files.

How Long Does a Data-Protection Request Take?

Under the Turkish data-protection application framework, the data controller must generally respond:

as soon as possible

and

no later than 30 days.

The controller must either:

• accept the request;
• or reject it with an explanation;

and communicate the answer in writing or electronically.

Patients should distinguish this statutory data-protection response period from an assumption that hospitals are entitled to ignore ordinary medical-record requests for 30 days.

The Patient Rights Regulation independently recognises the right to inspect and obtain copies.

The 30-day rule becomes particularly useful where a formal KVKK data-controller application is made.

Are Medical Records Free?

The answer requires some nuance.

Article 16 of the Patient Rights Regulation establishes the right to inspect records and obtain copies.

The International Health Tourism Regulation separately identifies specified documents that must be supplied free of charge upon request, including certain medicine/material lists, laboratory results, radiological images and prescriptions.

Under the KVKK data-controller application framework, applications are generally resolved without charge, although a fee may arise where the transaction creates an additional cost according to the applicable tariff.

Therefore, patients should avoid assuming either:

“Every possible medical copy must always be supplied entirely free in every format,”

or

“The hospital can charge whatever it wants before giving me my records.”

The precise document, method and legal basis matter.

What If the Hospital Says the Records Are “Hospital Property”?

The hospital may have legal obligations to create and retain medical documentation.

That does not eliminate the patient’s right to inspect and obtain copies.

Article 16 expressly grants patients that right.

The hospital may retain the original record within its system.

The patient normally seeks a copy, not the destruction or transfer of the hospital’s original archive.

This distinction can resolve many misunderstandings.

The hospital keeps its official record.

The patient receives the information and copies needed for healthcare or legal purposes.

Can a Hospital Refuse Because the Patient Is Suing It?

A pending or anticipated dispute does not automatically eliminate the patient’s statutory right to medical records.

In fact, where malpractice litigation is being considered, obtaining and preserving records becomes particularly important.

A hospital that receives a record request after a complaint should continue to comply with its legal obligations concerning:

• patient access;
• data protection;
• medical record preservation.

The patient should preferably make the request in a formal, traceable manner.

Why Medical Records Are Critical in a Malpractice Claim

A medical malpractice case normally cannot be properly evaluated based only on the patient’s memory.

The court and experts may need to reconstruct events minute by minute or day by day.

Questions can include:

• What symptoms did the patient have before treatment?
• What diagnosis was made?
• Which tests were ordered?
• What risks were discussed?
• What operation was performed?
• What happened during surgery?
• When did the complication first appear?
• What were the patient’s vital signs?
• When was a specialist consulted?
• When did corrective treatment begin?

Medical records provide the evidence necessary to answer these questions.

Records Can Reveal Delayed Treatment of a Complication

Suppose a patient develops severe symptoms after surgery.

The hospital says:

“The complication was treated immediately.”

The records may show otherwise.

For example:

14:00 – patient reports severe pain.

15:00 – abnormal blood pressure.

17:00 – worsening symptoms.

22:00 – surgeon contacted.

02:00 – imaging performed.

04:00 – emergency revision surgery.

Whether that delay was medically acceptable may become a major issue for expert evaluation.

Without detailed records, the timeline can be difficult to establish.

Consent Forms Are Also Part of the Medical Evidence

Foreign patients should specifically request all:

• informed-consent forms;
• risk-information forms;
• procedure-specific consent forms;
• anaesthesia consent documentation.

This is important because a medical malpractice case can involve two separate questions:

Was the procedure technically negligent?

And:

Was the patient adequately informed before accepting the risk?

The contents, language and timing of the consent documentation can therefore be highly significant.

Ask When the Consent Form Was Signed

The date and time of consent can matter.

For elective surgery, a form signed shortly before anaesthesia may raise different questions from information provided days or weeks before treatment.

Foreign patients should therefore request records capable of showing when the relevant documents were created or signed where such information exists.

This can be particularly relevant in disputes involving:

• cosmetic surgery;
• bariatric surgery;
• invasive dental procedures;
• other elective operations.

What If the Records Are Incomplete?

The patient should identify exactly what is missing.

A useful response might say:

“Thank you for the documents provided. The operative report, anaesthesia chart, signed informed-consent form and postoperative nursing records are missing from the file supplied. Please provide those documents as well.”

This is much more effective than repeatedly asking:

“Please send everything.”

If the provider states that a document does not exist, preserve that statement.

The absence of records that would normally be expected may itself become important in subsequent litigation.

What If the Medical Records Contain Incorrect Information?

Use the correction rights under Article 17.

A patient can request completion, clarification or correction of inaccurate or incomplete information.

The request should identify:

• the specific record;
• the incorrect statement;
• what correction is requested;
• supporting documentation.

For example:

Incorrect: “Patient had previous rhinoplasty.”

Requested correction: “Patient had never undergone rhinoplasty before the procedure of 14 April 2026.”

Evidence can then be attached where available.

Can the Hospital Delete Records After a Dispute Starts?

Healthcare institutions are subject to record-keeping and personal-data retention rules.

Health information is treated as highly protected personal data, and providers must adopt measures against unlawful access and loss of data. The KVKK regime imposes security obligations on data controllers, while health-sector systems also require healthcare providers to maintain and transfer specified health data through the national framework.

Where litigation is reasonably anticipated, early preservation of evidence is particularly important.

A patient should therefore request records as soon as a serious complication or dispute becomes apparent.

What Is e-Nabız and Can It Help?

Turkey operates e-Nabız, a national personal health-record system maintained by the Ministry of Health.

Current Ministry information describes e-Nabız as the national personal health record system, and KVKK decisions note that it can contain information such as diagnoses, treatments and prescriptions from public and private healthcare services.

Where a foreign patient has access to the system, it can be useful for reviewing records that have been transferred into the national health-data framework.

However:

e-Nabız should not automatically be treated as a substitute for requesting the complete hospital file.

The hospital may hold additional documentation such as:

• detailed operative notes;
• signed consent forms;
• nursing observations;
• internal consultation records;
• other underlying clinical documentation.

A malpractice investigation should therefore focus on the complete medical file rather than relying solely on whatever appears in an online patient portal.

What If a Private Clinic Says It Has No Records?

This should be investigated carefully.

Healthcare providers have statutory obligations concerning health-data recording and reporting.

The Ministry’s personal-health-data framework states that healthcare providers are required to send specified records to central healthcare systems and refers to sanctions for providers that fail to maintain or report required records.

The exact records legally required can depend on the type of provider and procedure.

Nevertheless, a blanket statement such as:

“We do not keep any medical records”

should raise serious questions concerning regulatory compliance.

Can Relatives Obtain a Patient’s Records?

This requires greater caution.

Medical records belong to a sphere of confidential personal information.

A family relationship by itself does not necessarily give every relative unrestricted access.

For a living competent adult patient, the safest route is generally for the patient to make the request personally or formally authorise the representative.

The Patient Rights Regulation expressly permits access through an authorised representative or legal representative.

Hospitals may therefore legitimately require evidence of authority before releasing records to a spouse, parent, child or friend.

Why a Hospital May Refuse to Send Records to a Random Email Address

Again, confidentiality matters.

Health data are special-category personal data.

A healthcare institution risks violating Turkish data-protection law if it sends a patient’s complete medical file to an unauthorised email address.

For that reason, identity verification can be legitimate.

The patient should cooperate with reasonable verification while insisting on the substantive right of access.

The correct position is not:

“The hospital must email everything to anyone who asks.”

Nor is it:

“Medical confidentiality means the patient cannot receive the file.”

The correct balance is:

verified patient or authorised representative + secure access to the patient’s own records.

What If the Hospital Refuses the Request?

A refusal should be handled systematically.

First, ask the hospital to provide the refusal in writing, including its legal reason.

Second, refer specifically to the patient’s access right under Article 16 of the Patient Rights Regulation.

Third, if the patient received treatment under international health tourism, refer where applicable to Article 12 of the International Health Tourism Regulation and request the documents expressly covered by that provision.

Fourth, consider a formal personal-data application under KVKK rules.

Fifth, depending on the circumstances, regulatory, data-protection or judicial remedies may be considered.

A hospital that ignores a casual WhatsApp message is one situation.

A hospital that formally refuses a legally grounded written application is a different situation.

Can a Complaint Be Made Under Turkish Data-Protection Law?

Potentially.

Under the KVKK system, a person generally applies first to the data controller.

The data controller must respond as soon as possible and, in any event, within 30 days.

If the application is rejected, inadequately answered or not answered within the legal period, the relevant KVKK complaint mechanisms may then be considered subject to the applicable procedural deadlines and conditions.

For a healthcare records dispute, legal strategy should determine whether the strongest route is:

• patient-rights legislation;
• KVKK;
• healthcare regulator;
• litigation-related evidence procedures;
• or a combination of these.

How Should a Foreign Patient Request Records From Abroad?

A practical approach is to follow these steps.

Step 1: Identify the exact legal healthcare provider.

Do not rely only on the Instagram clinic name.

Find the hospital or clinic’s actual legal entity.

Step 2: Prepare the patient identification information.

Include full name, passport details and treatment date.

Step 3: Create a specific document list.

Ask for the complete clinical record rather than simply “my report.”

Step 4: Request both reports and original digital imaging where relevant.

Step 5: Request the signed consent documents.

Step 6: Request the invoice and itemised service statement if there is also a financial dispute.

Step 7: Send the request through a provable channel.

Step 8: Preserve the hospital’s response.

Step 9: Identify missing documents and send a supplementary request.

Step 10: If the provider continues refusing, consider formal Turkish legal action or a KVKK/data-controller application.

Should the Patient Tell the Hospital That a Malpractice Claim Is Being Considered?

There is no universal requirement to do so.

The patient already has a legal basis to request his or her own medical records.

Sometimes a neutral request is more efficient.

For example:

“I require my complete medical file for continuation of treatment in my home country.”

That is a perfectly legitimate reason.

If formal litigation is already being considered, Turkish counsel may prefer to make a more structured request designed to preserve evidence.

The strategy depends on the circumstances.

What Format Should the Records Be Requested In?

Where available, digital format is particularly useful for international patients.

This may include:

• PDF medical records;
• DICOM radiological files;
• digital photographs;
• electronic laboratory results.

A simple screenshot of a radiological image may not be equivalent to the original medical imaging file needed by another specialist.

Patients seeking corrective treatment should ask their new physician what technical format is required.

Should Medical Records Be Translated Into English?

The Turkish hospital may provide the original records in Turkish.

For ongoing treatment abroad, the patient may need an English, German, French or other translation.

For Turkish litigation, the Turkish originals are extremely important.

Do not discard them after translation.

The safest approach is generally to preserve:

the original Turkish record

and

the translated version.

For official legal proceedings, certified translation requirements may apply.

Records Needed for Cosmetic Surgery Cases

For cosmetic surgery, useful records can include:

• consultation notes;
• preoperative photographs;
• surgeon drawings;
• digital simulations;
• consent forms;
• operative report;
• anaesthesia records;
• postoperative photographs;
• follow-up records;
• complication records.

Preoperative photographs are particularly important because the legal analysis may require comparison between the patient’s original condition and the postoperative result.

Records Needed for Hair Transplant Cases

Hair-transplant patients should consider requesting:

• technique used;
• graft number;
• donor-area documentation;
• before-and-after photographs;
• persons participating in the procedure;
• consent documents;
• postoperative treatment information.

Hair transplantation in Turkey is subject to specific healthcare regulation, making accurate procedural documentation particularly relevant.

Records Needed for Dental Malpractice Cases

Dental treatment can require a very detailed file.

Useful records include:

• panoramic X-rays;
• CBCT scans;
• tooth-specific treatment records;
• implant brand and model;
• implant position records;
• prosthetic treatment details;
• laboratory information;
• extraction records;
• root-canal records;
• consent forms.

A foreign dentist attempting corrective treatment may need the original images rather than only a brief Turkish dental report.

Records Needed for Bariatric Surgery Cases

For bariatric procedures, request:

• preoperative evaluation;
• laboratory tests;
• endoscopy where applicable;
• surgical report;
• anaesthesia records;
• postoperative observations;
• leak-testing or imaging records;
• medication chart;
• discharge instructions;
• emergency readmission information.

Where leakage, infection, bleeding or thromboembolic complications are alleged, postoperative chronology can be particularly important.

Frequently Asked Questions

Can a foreign patient obtain medical records from a Turkish hospital?

Yes. Article 16 of the Patient Rights Regulation gives patients the right to inspect health-related files and records and obtain copies personally or through an authorised representative.

Does this right apply to private hospitals?

Yes. The Patient Rights Regulation covers public and private healthcare institutions.

Can I request my records after returning to the UK?

Yes. Returning abroad does not eliminate the underlying right of access. The request may be made personally or, where properly authorised, through a Turkish representative or lawyer.

Can my Turkish lawyer obtain the records?

Potentially, yes. Article 16 expressly allows access and copies through an authorised representative.

Does the hospital have to give me my operative report?

The patient’s general Article 16 right extends to files and records containing information concerning the patient’s health. A complete request should therefore expressly identify the operative report rather than requesting only a discharge summary.

Can I obtain CT, MRI or X-ray images?

International health-tourism rules expressly require qualifying radiological images paid for by the patient to be provided free upon request, subject to the specific forensic-case exception.

Can I obtain laboratory results?

Yes. International health-tourism rules specifically address laboratory test and analysis results paid for by the patient.

Can I obtain my consent forms?

Consent forms form part of the medical documentation that should be specifically requested when obtaining the treatment file. Article 16 provides the broader right to inspect and obtain copies of health-related records.

Can the hospital refuse because medical records are confidential?

Confidentiality protects medical information from unauthorised disclosure. It does not ordinarily remove the patient’s own Article 16 right to inspect and obtain copies of his or her medical records.

Why does the hospital want my passport?

Health records are sensitive personal data, so reasonable identity verification can be necessary before release. Formal KVKK application rules specifically contemplate foreign applicants supplying nationality and passport information.

What if the hospital refuses to answer?

A formal request should be considered. A patient may rely on Patient Rights Regulation Article 16 and, where relevant, use the KVKK data-controller application mechanism.

How long does a KVKK application take?

The data controller must generally respond as soon as possible and no later than 30 days.

Can I correct inaccurate medical records?

Yes. Article 17 allows patients to request completion, clarification and correction of inaccurate or incomplete medical and personal information.

Is e-Nabız enough?

Not necessarily. e-Nabız can contain important diagnosis, treatment and prescription information, but a complete hospital file may contain additional clinical documents that are not equivalent to what appears in an online health record.

Can family members request records?

For a competent adult patient, hospitals may require formal authority before releasing confidential health information to another person. Article 16 specifically recognises access through an authorised representative or legal representative.

Do I need the records before filing a malpractice case?

A lawsuit may have mechanisms for obtaining evidence, but obtaining records early is strongly advisable because they allow lawyers and independent medical experts to assess whether there is a viable claim and what evidence should be preserved.

Conclusion: Foreign Patients Have a Legal Right to Access Their Turkish Medical Records

A foreign patient should not leave Turkey believing that the hospital is the only party entitled to know what happened during treatment.

Turkish patient-rights law expressly recognises access to medical documentation.

Article 16 of the Patient Rights Regulation states that a patient may inspect files and records containing information concerning his or her health and obtain copies directly or through an authorised or legal representative.

This protection is particularly valuable for international patients.

After returning home, the records may be needed for:

continuing treatment,

revision surgery,

a second medical opinion,

an insurance claim,

or

a medical malpractice investigation.

Foreign patients should not make the common mistake of requesting only:

“my medical report.”

A serious medical or legal assessment may require much more.

Depending on the procedure, the patient should request the operative report, anaesthesia records, consent forms, laboratory results, radiological images, nursing observations, medication records, postoperative documentation and complication-management records.

International health-tourism patients have additional protections.

Under Article 12 of the International Health Tourism and Tourist Health Regulation, healthcare facilities must provide an invoice with a detailed breakdown and unit prices and, upon request, provide specified medicine and material lists, laboratory results, radiological images and prescriptions without charge.

The broader Article 16 right should be considered alongside those special health-tourism rights.

Patients also have the right to seek correction, completion or clarification of incomplete or inaccurate records under Article 17 of the Patient Rights Regulation.

Data protection does not eliminate these rights.

Medical records are indeed highly sensitive.

Current Turkish data-protection guidance treats health information—including tests, diagnoses and treatment information—as special-category personal data.

That is why hospitals may legitimately verify identity or representation before releasing documents.

But privacy protection should operate to protect the patient from unauthorised third-party access—not to prevent the patient from accessing his or her own information.

Where an ordinary hospital request is ignored, Turkish data-protection law can provide an additional formal mechanism.

Applications to the data controller must generally be answered as soon as possible and no later than 30 days, and formal application rules specifically address the information to be provided by foreign applicants.

The most practical approach for a foreign patient is therefore:

identify the legal healthcare provider,

make a detailed written request,

include sufficient identity information,

list the records individually,

preserve proof of the request,

and

follow up formally if documentation is missing.

If the hospital supplies only part of the file, identify the missing documents specifically.

If it refuses, request the legal reason in writing.

If necessary, an appropriately authorised Turkish lawyer can make the request and consider patient-rights, data-protection, regulatory or judicial remedies.

Foreign patients who suspect malpractice should act particularly quickly.

Medical records can determine whether an adverse outcome was an unavoidable complication or the result of:

incorrect treatment,

delayed diagnosis,

inadequate monitoring,

poor complication management,

or

lack of informed consent.

They can also establish the timing of events and identify the healthcare professionals involved.

For that reason, obtaining the complete medical file should often be one of the first steps taken after a serious complication.

If a Turkish hospital or clinic refuses to provide your surgical report, consent forms, medical images, laboratory results or other treatment records after you have returned abroad, Turkish law may provide several mechanisms for obtaining the documentation through the patient-rights and personal-data protection framework without requiring you to travel back to Turkey merely to make the request.

Legal Disclaimer

This article provides general information concerning access to medical records under Turkish law as of September 2026. It does not constitute individual legal advice.

The documentation available, application procedure, representation requirements and legal remedies may vary according to the healthcare provider, treatment, status of the patient and particular circumstances.

Where records are required for medical malpractice proceedings, continuing medical care or another legal dispute, individual advice should be obtained concerning the appropriate request and preservation strategy.