Protection and processing of sensitive and confidential data in medical-occupational contexts

On July 11, 2024, the Constitutional Court issued Ruling 59-19-IN/24 (the “Ruling”), declaring Ministerial Agreement 0341-2019, titled “Application of Occupational Medical Records” (the “Agreement”), unconstitutional. The Court found that the Agreement and its related forms violated privacy and personal data protection rights.

From the Ruling, we highlight the following:

• The Constitutional Court reviewed whether the State’s actions had a legitimate aim and whether the Agreement met the requirements of proportionality, suitability, and necessity when limiting workers’ rights to privacy and data protection.
• The Ruling determined that there is no proportionality between the constitutionally valid aim and the challenged regulation, as it is contradictory and inappropriate to require workers to provide sensitive data (such as sexual orientation, gender identity, and religion).
• Based on these grounds, considering that the Agreement creates an illegitimate limitation on workers’ rights, and given that this information is not directly related to the performance of the worker’s duties or the specific needs of the job, the Constitutional Court declared the Agreement unconstitutional.
• From the publication of the Ruling in the Official Gazette (which has not occurred as of the date of this bulletin) and until the adoption of new regulations on the application and management of Occupational Medical Records, occupational physicians, public or private entities, as well as the national health authority, will not be able to request workers to provide data related to sexual orientation and gender identity. Data concerning religious beliefs will be optional.