AI Phone Assistant for Clinics: Bookings and KVKK

An AI phone assistant for clinics is a voice agent that answers reception calls in Turkish for booking, rescheduling, cancelling and confirming appointments, and handles administrative questions such as directions and opening hours. It does not give medical advice: medical questions go to healthcare professionals and emergencies to 112, Turkey’s emergency number. Because health data is a special category of personal data under KVKK, Turkey’s data protection law, keeping the information the assistant collects to a minimum, informing callers properly and clarifying your legal basis with a lawyer are an integral part of the setup.

In this article we look at why clinic reception lines get overloaded, which call flows an assistant can take on, what it must never do, what to watch for under KVKK and a checklist for rolling it out.

Why do reception lines get overloaded?

A clinic’s reception desk does two jobs at once: it looks after the patient standing in front of it and answers the phone. At opening time, around lunch and at the end of the day the two collide, and whoever picks up has to choose between keeping the patient at the desk waiting and letting the phone ring.

Most incoming calls are also alike: booking an appointment, moving one, asking where the clinic is and how late it is open, finding out what to bring to a visit. The answers are known, yet each call eats into the reception team’s time. Calls that come in after hours often go unanswered altogether. We look at the impact of missed calls and how to measure it in a separate article.

What can the assistant take on?

Booking appointments

A typical booking flow has these steps:

1. The assistant greets the caller with the clinic’s name and asks what they need.
2. It finds out which department or service the appointment is for and, if the clinic allows it, asks for a preferred doctor.
3. It takes the preferred date and time and confirms it by repeating the date back.
4. It collects the minimum personal information needed for the booking, such as full name and a contact number.
5. If your booking system is connected, it checks availability and creates the appointment; if not, it passes the request to the reception team, who confirm the new time.
6. It closes the call with a short summary.

Rescheduling and cancellations

On rescheduling calls, the assistant first finds the existing appointment and then takes the new preference. If the calendar is connected, it offers available times; if not, it passes the request to reception together with the existing booking details and the new preference. For freed-up slots to be offered to other patients, cancellations need to reach the calendar quickly.

Reminder and confirmation calls

Reminder calls before an appointment are one of the most common ways to prevent forgotten visits. The assistant calls the patient, reminds them of the appointment, confirms attendance and takes a new preference from anyone who wants to change. These calls are planned as an outbound campaign.

One point deserves attention here. Article 6 of Turkey’s Regulation on Commercial Communication and Commercial Electronic Messages (in Turkish) states that prior consent is not required for notifications about matters such as an ongoing subscription or membership, collections, updating information, purchases and deliveries; however, under the same article, such notifications may not promote any goods or services. Whether an appointment reminder falls within this scope depends on what the call says, and adding a promotion for a new service or a campaign announcement to a reminder can change the nature of the call. Keep reminders strictly informational and ask your legal adviser about borderline cases.

Common administrative questions

Questions about the address and directions, parking, opening hours, contracted insurers and the documents to bring to a visit can be answered with wording the clinic has approved. Keeping this information up to date is the foundation of the assistant’s accuracy.

What the assistant must not do

The most important line to draw when setting up a clinic phone assistant is the one between administrative and medical work.

• No medical advice. Assessing symptoms, questions about medication and dosage, treatment options and interpreting test results are not the assistant’s job. These questions go to the healthcare professionals who know the patient.
• No triage decisions. The assistant should not try to decide whether something is urgent. The order of appointments follows the administrative rules the clinic sets, not a medical assessment.
• No delay in an emergency. Write a clear rule for phrases that signal an emergency: the assistant tells the caller to dial 112 without delay and transfers the call to your team if needed. Test this rule regularly with different phrasings.
• No sharing of sensitive information. Test results, diagnoses or treatment details should not be shared over the phone by the assistant.

KVKK: why health data needs extra care

This section is general information, not legal advice. Before you go live, review your clinic’s situation with a lawyer who specialises in KVKK.

Health data is a special category of personal data

Article 6 of Law No. 6698 on the Protection of Personal Data (KVKK, in Turkish) lists data concerning a person’s health as special category personal data. Under the same article, as amended by Law No. 7499 in 2024, processing special category data is prohibited as a rule, but it is possible with the data subject’s explicit consent or where one of the other cases listed in the article applies. One of those cases is where processing is necessary for the provision of medical diagnosis, treatment and care services by persons under a duty of confidentiality or by authorised institutions. The article also requires the adequate measures determined by the Personal Data Protection Board to be taken when processing special category data.

Which details on a booking call count as health data (for example, the department a patient is booking with, or symptoms the caller describes), which legal basis applies and whether explicit consent is needed all depend on your clinic’s structure and processes. These questions should be answered by your legal adviser, not by your software vendor.

Informing callers

Article 10 of the Law requires data subjects to be informed, when their data is collected, about the identity of the data controller, the purpose of processing, to whom and why the data may be transferred, the method and legal basis of collection, and their rights. Article 5 of the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform (in Turkish) sets out the principles to follow when this is done orally, in writing, by voice recording or through a call center. Some of them:

• The legal basis must be stated clearly.
• The notice must use understandable, clear and plain language.
• Where processing relies on explicit consent, informing and obtaining consent must be done separately.
• The burden of proving that the notice was given lies with the data controller.

In practice, many businesses play a short notice at the start of the call and tell callers where to find the full privacy notice on their website. Check with your lawyer whether this approach is sufficient for your clinic. We also recommend telling callers clearly that they are speaking with an AI assistant; transparency builds trust.

Data minimisation: ask only what you need

Article 4 of the Law requires personal data to be relevant, limited and proportionate to the purpose for which it is processed. For a clinic phone assistant, the implication is clear: it should collect only what the booking requires. It should not ask about the details of a complaint, and if the patient starts describing symptoms, it should politely say this is not needed and return to the booking step.

Retention and deletion

The same article requires data to be kept only as long as the relevant legislation provides or as long as necessary for the purpose, and Article 7 provides for data to be deleted, destroyed or anonymised once the reason for processing no longer exists. Practical suggestions for KVKK and call recording:

• Set separate retention periods for audio recordings, transcripts and summaries based on purpose.
• Restrict who can access recordings and transcripts by role, and turn on two-step sign-in for team accounts.
• Ask your infrastructure providers where they process data; transfers abroad are subject to Article 9 of the Law.
• Article 12 states that you are jointly responsible for security measures with providers who process data on your behalf; set up your contract accordingly.

Handover scenarios

A good clinic assistant knows when to hand over. Write the following scenarios into the agent’s instructions from the start:

At handover, the operator receives the call with the details the assistant has collected and a short summary; this is called a warm transfer. The patient does not have to explain everything again.

Rollout checklist

Go through this list before and after you go live:

• Have you classified recent calls by reason?
• Have you limited the assistant’s scope in writing and explicitly excluded medical topics?
• Have you written the emergency rule and tested it with different phrasings?
• Have you reduced the information collected to the minimum the booking requires?
• Are the short notice and the full privacy notice ready, and has your lawyer approved them?
• Have you clarified which legal basis you rely on and whether explicit consent is needed?
• Are retention periods and a deletion process defined for recordings, transcripts and summaries?
• Are access rights restricted and two-step sign-in turned on?
• Is your contract with the provider in place, and do you know where data is processed?
• Are handover rules, queues and the after-hours flow ready?
• Is the content of reminder calls limited to information?
• Have you made test calls from different age groups, accents and noisy places?
• Are you reading call transcripts regularly in the first weeks and updating the instructions?

How Speakline works for clinics

We build Speakline in Turkey and, for clinics, we focus on administrative workflows. Our voice agent answers clinic calls in Turkish, takes booking requests and logs changes, and is configured not to give medical advice. If your booking system is connected, it checks availability; if not, it passes the request to your reception team.

With outbound campaigns you can run reminder and confirmation calls, and numbers in outbound campaigns can be checked against İYS records. When a person is needed, the call moves with a summary to the reception queue in our call center, and your team picks it up from a browser-based operator desk. Calls can be recorded and stored with their transcripts, and we support playing a KVKK notice to callers on recorded calls. Team accounts can be protected with two-step sign-in. You can port your clinic’s existing number or keep using the line you have with your carrier.

If you would like to talk about how it would fit your clinic’s workflow, get in touch.