The Protection of Personal Information Act, 2013 (POPIA) imposes minimum standards on the way personal information is collected, stored, used, disclosed, and deleted. The healthcare sector handles some of the most sensitive information including physical and mental health records of patients.
Medical practitioners also have obligations in handling personal information under the National Health Act, 2003 and the guidelines issued by the Health Professions Council of South Africa under the Health Professions Act, 1974.
This fact sheet sets out practical guidelines to assist medical practitioners to comply with their obligations under POPIA and should be read with the Guidance Note for POPIA Compliance by Institutions and Individual Practitioner Healthcare Providers attached to this fact sheet.
Read more here in these documents provided by iTOO: