Yes, you can request the removal of surgery photos that you believe were shared without your consent. First, save screenshots, the link, the date, and the account details, then submit a written request to the doctor, clinic, or organization that published the data. If your health condition, surgical process, or identity can be understood from the photos, the issue may involve not only deleting an image but also the processing of personal and health data.

The outcome of your request will depend on the consent form you previously signed, the purpose for which the photos were taken, whether you can be identified in the images, who shared them, and the regulations in force. Rather than assuming a definite outcome or an automatic guarantee of deletion, you should submit your request clearly, specifically, and in writing.

Consent and Health Data in Surgery Photos

Before-and-after surgery photos may be linked to you under certain circumstances, even if your face or distinctive physical features are not visible. When assessed together with the file name, caption, date, clinic information, type of surgery, or your social media account, a photo may reveal your identity. If the image provides information about your health condition or the medical procedure performed, it may also qualify as health data.

In Turkey, the rules under the Personal Data Protection Law (KVKK) are important when personal data is processed, stored, and shared. Whether explicit consent was obtained is assessed according to the purpose, channel, duration, and content covered by that consent. A photo taken for educational purposes within a clinic may not always be considered to have the same permitted use when published on social media for advertising or promotional purposes.

A general statement in a consent form, such as “the photos may be used,” may not clearly indicate on which platforms or for what purposes the images may be shared. However, the legal effect of the form depends on its wording, how it was presented to you, the signing process, and the scope of the specific use. This is not a definitive legal conclusion, but a framework to consider when preparing your request.

Blurring the photos or covering the face does not, by itself, ensure anonymity in every case. If the body area, surgical scar, tattoo, date, caption, or links to previous posts can be used to identify you, the risk of re-identification may remain.

Written Removal Request for Unauthorized Sharing

Do not limit your initial request to a phone conversation. Create a written record by using email, the organization’s official application channel, a secure patient portal, or another method through which you can prove delivery. It may be appropriate to direct the request not only to the doctor who shared the photo but also to the clinic or healthcare organization, as the data controller may differ from one case to another.

  • Identify yourself and explain the reason for your request: Clearly state which procedure the photo relates to, that the image belongs to you, and that you believe you either did not provide valid consent for the sharing or that the consent you provided did not cover this use.
  • Describe the content: Include the platform where the post appears, the account name, the date of the post or video, the link if available, and the distinguishing features of the image.
  • Make your request specific: Ask for the removal of the image, its caption, and links where the same content has been republished; request that the post not be used again; and ask for information about the purpose and legal basis for processing the data and the parties with whom it was shared.
  • Request written confirmation: Ask in writing whether the content has been removed, whether copies or planned campaign uses remain, and which department is reviewing your request.
  • Specify a response timeframe: Ask for your request to be reviewed under the applicable rules and the organization’s official procedures. Check the official deadlines yourself or seek legal advice if necessary.

Instead of using angry or threatening language or making claims you cannot verify, list only the facts you can observe. A structure such as, “I saw this photo posted on this account on this date; I did not provide clear and valid consent for this use; I request its removal and information about the processing” creates a more traceable record.

Evidence and Security Checks Before Applying

Document the current situation before requesting removal. If the content is deleted, it may become more difficult to show what was published in any later application. When collecting evidence, do not unnecessarily republish the photo or post your screenshots on publicly accessible platforms.

  • Take a screenshot of the post or page, ensuring that the account name, date, caption, and visible link information appear in the same image whenever possible.
  • Save the link to the content and any copies on other platforms in a separate file.
  • Prepare documents such as the surgery date, correspondence, or patient records showing that the photo belongs to you only to the extent necessary.
  • If you are asked to send an identity document, ask which information is genuinely necessary; consider covering unnecessary fields and using a secure transfer method.
  • Keep proof that your request was sent, delivered to the other party, and answered.

You may also report the violation to a social media platform. When using the platform’s reporting channel for personal data, privacy, or unauthorized image sharing, attach the same evidence. A report to the platform may not replace the application you submit to the data controller in Turkey; it is safer to follow these two processes separately.

KVKK and Other Options if You Receive No Response

If the doctor or clinic rejects your request, provides an incomplete response, or does not assess it appropriately, check who reviewed the application and how it was handled. You may request further clarification through the organization’s data controller and, where available, its data protection or patient rights department.

Under rights provided by the KVKK, you may be able to ask whether your data is being processed, request information about the purpose of processing, ask which parties have received the data, and, depending on the circumstances, request its deletion or destruction. Exercising these rights does not automatically lead to the same outcome in every case. Legal retention obligations, the preservation of medical records, evidentiary needs, or other legal grounds may affect the assessment.

If you do not receive a satisfactory result from your application to the data controller, you can check the current application requirements and deadlines of Turkey’s Personal Data Protection Authority through official sources. An application to the Authority is generally assessed together with the content of the prior application submitted to the data controller and the response received; current procedures and required documents should be confirmed through official channels.

The use of photos in an advertising campaign, on a website, or on a social media account may also raise separate considerations relating to commercial communications, consumer transactions, professional ethics, or personality rights. If the content constitutes a serious privacy violation, it may be appropriate to seek case-specific advice from a lawyer practicing in Turkey or from a qualified adviser in your own country.

Risks Requiring Particular Attention

Do not make assumptions about the consent form you signed: Consenting to treatment or surgery may not automatically mean that you gave unlimited permission for the photos to be used for promotional purposes. However, a proper assessment requires reviewing the text you signed and the explanations provided to you.

Distinguish between the photo and the complete medical file before requesting deletion: Requesting removal of a photo from advertising or social media is different from requesting the deletion of medical records that are necessary for the safe provision of healthcare. Clearly specify which image and which use your request concerns.

Consider removal and prevention of further sharing together: Instead of asking only for the existing post to be deleted, also ask whether the same image has been used on the website, in advertising materials, presentations, or third-party accounts. You may state in writing that you do not consent to future use; the legal effect of this statement depends on the specific circumstances.

Do not disclose the content yourself: Republishing the photo to protest the doctor’s post may expose it to more people and cause it to remain in search results for longer. Store the evidence securely and with limited access.

Related Questions You May Ask After This Issue

  • How can I find out for what purposes my health data is processed in Turkey and with whom it is shared?
  • How can I assess the scope of the surgery photo consent form I signed?
  • If a clinic does not respond to my data deletion request, which official application routes should I review?