Understanding the Protection of Personal Information (POPI) Act

Drickus Maartens • October 1, 2019

While the Protection of Personal Information (POPI) Act doesn't replace the HPCSA’s existing guidelines on safeguarding confidential patient data, POPI does affect all private and public organisations that process information such as names, addresses, email addresses, health information and employment history. 

Some of the obligations placed on the medical practice under POPI are: 
  • To only collect information for a specific purpose
  • To apply reasonable security measures to protect the information collected
  • To ensure all information collected is relevant and up to date
  • To only hold as much information as is required, and only for as long as it is needed
  • To allow the subject of information to see it upon request.
Consent
Consent under POPI has to be specific, voluntary and informed. The burden of proof to show that consent was given falls on the practiceso it is advisable to keep some sort of record of consent given by a patient.

Preserving the information
All medical practices are expected, by law, to implement reasonable technical and organizational measure to ensure the information is protected from loss, damage, unauthorized destruction and unlawful access thereto.

An example of a foreseeable risk would be an employee within a medical practice accessing private and personal information without being made aware that the information is to be kept strictly confidential at all times.

Dealing with an information leak
In the event of information being leaked, the practice will need to notify both the patient and the Information Regulator that the information has been accessed, in writing. The patient also needs to be advised about protective steps which could be taken. 

When notifying the patient ensure that the following information is given:
  • The possible consequences of the disclosure
  • A description of the measures which will be taken to rectify the leak of information
  • The identity of the individual who had unauthorised access to the information must be disclosed. 
Failure to comply with POPI
Failure to comply with POPI can lead to a complaint being lodged against a healthcare practitioner with the Information Regulator, or receiving a civil claim for payment of damages. One of the very serious implications can even be criminal prosecution which, if convicted, could result in a fine of up to R10 million, a prison sentence of up to 10 years, or even both.

It is therefore extremely important for all people, companies and organisations handling health related information to assess their practice policies for handling health related and personal information.

Information supplied by Van Rhyns Attorneys
Paediatric Nephrologist Prof Rajendra Bhimma
March 11, 2025
Paediatric Nephrologist Professor Bhimma was recently awarded the Fellowship to acknowledge his extensive work in research, community-based outreach and teaching of paediatric nephrology, among others.
Prof Bhekifa Dube
March 7, 2025
Netcare congratulates Professor Bhekifa Dube on his invitation to join the European Society for Vascular Surgery's clinical practice guidelines committee. His selection as the only specialist from the continent highlights the significance of this achievement on the global stage.
Rare Disease Day on 28 February 2025
February 28, 2025
The lives of millions of South Africans with a litany of rare diseases can be vastly improved, and even saved, by addressing challenges in identifying, studying and treating their conditions. With Rare Disease Day on the 28th of February 2025, the Rare Diseases Access Initiative (RDAI) is driving an evolution of the country’s healthcare, through innovative strategies to better care for over 4.2million people living with an estimated 7000 rare diseases. “As our healthcare system faces significant changes in the years ahead, it is vital that we also advocate for people living with rare diseases in South Africa, especially those with limited healthcare access,” said Kelly du Plessis, CEO of Rare Diseases South Africa (RDSA), a member of RDAI. “As part of our ongoing research and awareness efforts, RDAI has conducted an initial analysis of the incidence and prevalence of rare diseases within the country.” This research will assist in improving access to healthcare, policy development, and patient advocacy, while giving critical insight into the challenges faced by patients. “According to research, some rare diseases affect fewer than 1 in a million people, while others, such as Down syndrome, cystic fibrosis, and haemophilia, have a more recognisable prevalence,” says Dr. Helen Malherbe, RDAI lead researcher on rare disease prevalence data. “Many conditions are undetected, underdiagnosed or misdiagnosed, with too many having no information available about them at all.” The RDAI was formed in 2019 to promote a more favourable environment for those impacted by rare diseases in South Africa. Participants include Ampath, the Board of Healthcare Funders (BHF), Discovery Health, Genetic Counsellors South Africa (SASHG), the Government Employees Medical Scheme (GEMS), Health Funders Association (HFA), Medihelp, Medscheme, North-West University (NWU), Rare Diseases South Africa (RDSA), the South African Medical Association (SAMA) and The South African Medical Technology Industry Association (SAMED). The Council for Medical Schemes (CMS) participates as an observer. In the same year, Rare Disease International signed a memorandum of understanding with the World Health Organisation leading to an international rare disease policy framework. In 2021, the United Nations General Assembly moved to adopt a resolution recognising 300 million people living with rare diseases worldwide. “A general lack of awareness and delayed diagnosis remain major hurdles for those affected by rare diseases. Policymakers and healthcare stakeholders need to prioritise access to treatment, diagnosis, and support for rare disease patients,” says Bada Pharasi, CEO of IPASA, “Through this initiative, working collaboratively with stakeholders at every level of the healthcare supply chain, we can bring real and meaningful change to those affected, including family members and care givers, through smart and efficient strategies.” The globally agreed definition of a rare disease is any medical condition with a specific pattern of clinical signs, symptoms, and findings that affects fewer than or equal to 1 in 2000 persons in a population. “Most are genetic, and some are inherited and passed down in families,” Malherbe says. “Some affect only the patient’s genetic recipe, while others may be acquired during life due to infection, trauma, or environmental effects. For many, the cause is still unknown. “These conditions mainly affect children, as they are largely incurable and many are life-threatening. Some require specialised and co-ordinated care, some have limited and expensive treatment options, while others have no information or effective treatments at all,” she adds. The RDAI is calling for a patient-centred care model built on equitable access, transparency and efficiency. Naturally, this model calls for the open participation of patients, the healthcare industry, health professionals, and the Government. “The most critical elements are robust diagnosis standards, improved access to treatment, data collection and management, co-ordination of care, measurement of outcomes and ongoing collaborative research,” du Plessis says. “We need to establish rare disease advisory committees, map gaps and opportunities, establish system requirements, create a roadmap and plan a phased implementation with clear timelines.” The RDAI states that these policy development steps would be a start in quantifying the disease burden and defining standards of care. This would be followed by building and strengthening the capacity to facilitate appropriate diagnosis, treatment, continuity and data monitoring. Thoneshan Naidoo, Chief Executive Officer of the Health Funders Association noted that, “We appreciate the unique opportunity provided by RDAI which enables stakeholders across the industry to work together and identify strategies that improve equitable access to the appropriate diagnosis, treatment and healthcare services for rare disease patients, in an affordable and sustainable manner, taking account of the other pressing needs across the healthcare system.” “True innovation in healthcare is only possible through partnerships and joint advocacy efforts that raise awareness and improve access to treatment. Our long-term goal is the development of a rare diseases policy framework and guidelines for coordinated care,” says Pharasi. “Our members are united in the commitment to unlocking improved patient outcomes and improving access to services and robust health needs assessment facilities.” he concludes. About RDAI The Rare Diseases Access Initiative (RDAI) is dedicated to advocating for improved healthcare access, policy development, and patient support for those affected by rare diseases in South Africa. The initiative brings together key healthcare stakeholders, including pharmaceutical associations, funders, genetic specialists, and patient advocacy groups, to drive impactful change. About RDSA Founded in 2013, Rare Diseases South Africa (RDSA) is a non-profit organisation advocating to ensure that people living with rare diseases and congenital disorders experience greater recognition, support, improved health service and better overall quality of life. Started out of personal need following the diagnosis of organisation founder, Kelly du Plessis' son, it became evident that there was a lack of awareness and support for rare diseases in general in South Africa. About IPASA The Innovative Pharmaceutical Association South Africa (IPASA) is a voluntary trade association representing 24 leading pharmaceutical companies committed to research, development, and innovation. Our mission is to drive healthcare advancement by advocating for policies that improve patient access to safe, high-quality, and affordable medicines.
Gastroenterologist Dr Barbara Makumbi explains the toll acid reflux can take on your health
February 26, 2025
Gastroenterologist Dr. Barbara Makumbi discusses common risk factors and offers tips for managing reflux and the longer-term condition known as gastroesophageal reflux disease (GORD).
Netcare St Anne’s Hospital emergency department now has both trauma and emergency  specialists.
February 19, 2025
From treating trauma injuries caused by wildlife, road accidents and sports, to heart attacks, stroke, or the sudden onset of other concerning medical symptoms – the emergency department at Netcare St Anne’s Hospital never sleeps.
Making sense of self-harm
February 10, 2025
As many as one in ten teenagers may self-harm, often in secret, concealing the scars or evidence of their injuries. As Teen Suicide Prevention Week approaches, Netcare Akeso is highlighting the often-hidden struggle of self-harm among young people.
Dr Prinitha Pillay is a radiation and clinical oncologist
February 4, 2025
With one in four South Africans affected by cancer, either directly or through a loved one’s diagnosis, the importance of regular screenings cannot be overstated.
Melanoma awereness
January 27, 2025
This SunSmart Skin Cancer Awareness Month, oncologists Dr Sylvia Rodrigues and Dr Karen Motilall stress the importance of sun protection and regular screening for melanoma in South Africa's sunny climate.
Vitamin D is crucial for maintaining strong bones and a healthy immune system.
January 17, 2025
Vitamin D is crucial for maintaining strong bones and a healthy immune system. Dr Jay Narainsamy, an endocrinologist and specialist physician, explains why too much can negatively impact your health.
Dr Neville Vlok highlights health issues that could disrupt holiday celebrations
December 22, 2024
As the holiday season kicks off, it’s all too easy to get caught up in the festive spirit and overlook potential medical emergencies. Dr Neville Vlok, a specialist emergency medicine physician practising in the emergency department at Netcare Unitas Hospital, highlights four health issues that could disrupt even the most carefully planned holiday celebrations.
More Posts
Share by: