Collecting patient photos on WhatsApp: the workflow and the GDPR

You cannot quote a hair transplant properly without seeing the head. Photos are how a case moves from a vague 'how much?' to a real assessment. They are also sensitive health data, which means the way you collect and store them matters as much as the way you use them.

The photos a case actually needs

For most assessments the surgeon needs three clear views, and patients rarely send the right ones on the first try without guidance.

• The frontal zone and hairline, from the front.
• The vertex, or crown, from above and behind.
• The back donor area, so the available supply can be judged.

A clean collection workflow

The workflow that works is simple: tell the patient exactly which photos to take and how, collect them in one thread, and attach them to the patient's record so the surgeon reviews a complete case, not scattered images. Done by hand this is slow and easy to drop. Done well it is quick and consistent.

The compliance part you cannot skip

Under the GDPR and Turkey's KVKK, patient photos are special-category health data. That means explicit consent before collection, encryption in transit and at rest, controlled hosting, data minimisation, and a way for patients to exercise their rights. The consumer WhatsApp app is not built for this. We cover the detail in is WhatsApp GDPR and KVKK compliant for patient data.

Doing it well on WhatsApp

An AI agent can guide the patient through exactly which photos to send, centralise and format them, and attach them to the record, all over WhatsApp's end-to-end encryption with data encrypted at rest in the EU. That is how EVED OS, the operating system for hair transplant clinics, handles photo collection: its AI agents guide the patient, read the photos and note the Norwood stage for your team, and the CRM keeps them on one patient record, so the case arrives pre-qualified on compliant infrastructure.

See the full product on the EVED OS for hair transplant clinics page, or start your free 7-day trial.