Health Record Rights Index · country brief · this country's data as of October 2, 2026

Who holds the health record in South Africa?

In 2026, South Africa scores 43 out of 100 for how much say a person has over their own health record. It is tied for 80th of 198 countries and territories, and could rank anywhere from 57th to 102nd allowing for scoring error, in the Weak band (25 to 44). Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026.

Doctors, hospitals and insurers decide. Its strongest right, compared with the typical country, is rules for AI in your care (48 out of 100, against 30 for the typical country). The furthest behind is one record across your care (33 out of 100, against 38 for the typical country).

South African patients have strong paper rights under POPIA and the National Health Act, but records stay in each provider's or province's own system.

Published · updated · this country's data as of October 2, 2026 · research tool, not legal advice

overall score · Weak band, 25 to 44
43/100
rank among 198 countries and territories; likely 57th to 102nd, allowing for scoring error
Tied for 80th
confidence in our evidence
Medium
strength of our evidence (DTI™)
89/100 (Gold)

Questions people ask

Can I see my health record in South Africa?

In 2026, getting your full record scores 40 out of 100 in South Africa; the typical country scores 40 to 45. POPIA section 23 and PAIA give a right to your record within 30 days, but providers may charge a prescribed fee and no national patient portal was found. Scored as statutory right (45) minus 5 for the fee. Source: gov.za, November 26, 2013, and the other sources below.

Who controls health records in South Africa?

In 2026, doctors, hospitals and insurers hold the keys to your health record in South Africa. Control over who sees it scores 42 out of 100 in South Africa; the typical country scores 30. The National Health Act needs written consent to disclose records outside care, and POPIA lets you ask which third parties saw your data. But providers share for care without asking, and no system shows patients who opened their record. Source: gov.za, July 23, 2004, and the other sources below.

How does South Africa compare?

In 2026, South Africa scores 43 out of 100, against 39 for the typical country. This brief compares it with Eswatini (43 out of 100), Seychelles (43 out of 100) and Rwanda (44 out of 100). Source: the ranking of all 198 countries and territories.

Eight rights, compared with Eswatini, Seychelles, Rwanda and the typical country

Scores out of 100, by right
Getting your full record20%4040 · 40 · 50
Control over who sees it20%4235 · 42 · 30
Privacy and security15%6055 · 45 · 52
One record across your care15%3350 · 52 · 46
Protection from sale and ads10%5042 · 40 · 50
Doctors see it when treating you10%3245 · 50 · 34
Your say over research use5%5046 · 46 · 50
Rules for AI in your care5%4825 · 20 · 55

Black dot: South Africa. Hollow dots: Eswatini, Seychelles, Rwanda (scores out of 100 on the right, same order). Gray line: the typical country of all 198. Overall: South Africa 43 out of 100. Scores move in steps of about 5 points, so read a rank with its likely range.

What would South Africa need to change to score higher?

South Africa sits in Weak (25 to 44); Mixed starts at 45. Its two weakest rights, compared with the typical country and weighted by how much each counts, are one record across your care (33 out of 100, against 38 for the typical country) and doctors see it when treating you (32 out of 100, against 33 to 34 for the typical country). Our scoring rules give more points for:

  • One record across your care: Family doctors, hospitals, labs, pharmacies, insurers and public health all linked to one record that is used across the country.
  • Doctors see it when treating you: Doctors who treat you able to see your full record from other providers, with your consent and emergency rules in place.

Which laws give health record rights in South Africa?

  • Protection of Personal Information Act 4 of 2013 (POPIA): Health is special personal information; access right; opt-in electronic marketing; breach notice; fines up to R10 million.
  • Promotion of Access to Information Act 2 of 2000 (PAIA): Access to records held by public and private bodies, 30-day deadline, special rules for health records.
  • National Health Act 61 of 2003: Record keeping, confidentiality, written consent for disclosure, research authorisation, offences for record misuse.

Doctors, waits and private care context, not part of the score

Doctors per 10,000
7.7 2024
Nurses and midwives per 10,000
41.5 2024
Private insurance + out-of-pocket
52.0% 2023
Record reaches private care?
no
"no shared record exists across hospitals or between public and private care."

Real cases

  • November 26, 2025 · Juta MedicalBrief (reporting an Information Regulator decision) Pathology lab fined after failing to tell patients their data was exposed
  • July 22, 2025 · SABC News Provincial health department says lost and misplaced files have harmed patients' care

Who to contact in South Africa

Not legal advice. Laws, offices and websites can change, so check with the office itself before you rely on anything here.

For South Africa, we list 2 official offices to contact about your health record, as of :

See South Africa on our country by country page, with a link to each office's page and what it says

Compare South Africa

Cite this brief

In 2026, South Africa scored 43 out of 100 for how much say a person has over their own health record, tied for 80th of 198 countries and territories (could be 57th to 102nd), in the Weak band. Who holds the keys: doctors, hospitals and insurers. Source: Health Record Rights Index, SuperTruth, this country's data as of October 2, 2026, https://healthrecordrights.com/brief/south-africa/

The 22 sources for South Africa

Each source appears once, under the first right it supports. Titles are shown as our research agents recorded them, usually in the page's own language; text in square brackets is our machine translation. Links were checked on the date shown.

Getting your full record (4 sources)

  1. “Protection of Personal Information Act 4 of 2013 (Government Gazette 37067)”

    gov.za (law or regulation) · Title in English

    Dated November 26, 2013 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record; Control over who sees it; Privacy and security; Protection from sale and ads; Your say over research use

    https://www.gov.za/sites/default/files/gcis_document/201409/3706726-11act4of2013protectionofpersonalinforcorrect.pdf

  2. “Promotion of Access to Information Act 2 of 2000”

    Department of Justice consolidated copy (law or regulation) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.justice.gov.za/legislation/acts/2000-002.pdf

  3. “HPCSA Guidelines on the Keeping of Patient Records, Booklet 9 (mirror copy)”

    hpcsa-blogs.co.za (other) · Title in English

    Dated September 2016 · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.hpcsa-blogs.co.za/wp-content/uploads/2022/08/Booklet-9-Guidelines-on-Patient-Records.pdf

  4. “NHI Chief Directorate: Health Systems Digital Information”

    National Department of Health (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Getting your full record

    https://www.health.gov.za/nhi-cd-hs/

Control over who sees it (2 sources)

  1. “National Health Act 61 of 2003 (Government Gazette 26595)”

    gov.za (law or regulation) · Title in English

    Dated July 23, 2004 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Protection from sale and ads; Doctors see it when treating you; Your say over research use

    https://www.gov.za/sites/default/files/gcis_document/201409/a61-03.pdf

  2. “Discovery Health: Permission to make certain information available to a third party (HealthID consent form)”

    discoveryhealthmedicalscheme.co.za (other) · Title in English

    Dated October 1, 2024 · Link checked October 2, 2026 (opened)

    Used for: Control over who sees it; Doctors see it when treating you

    https://discoveryhealthmedicalscheme.co.za/wcm/discoverycoza/assets/medical-aid/application-forms/2024/permission-to-make-certain-information-available-to-a-third-party.pdf

Privacy and security (3 sources)

  1. “Regulations relating to the Processing of Data Subjects' Health Information by Certain Responsible Parties, 2026 (Gazette 54268, Notice 7198)”

    gov.za (law or regulation) · Title in English

    Dated March 6, 2026 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://www.gov.za/sites/default/files/gcis_document/202603/54268gon7198.pdf

  2. “Information Regulator: Enforcement notice issued to Dis-Chem due to contravention of POPIA”

    inforegulator.org.za (regulator) · Title in English

    Dated September 1, 2023 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://inforegulator.org.za/wp-content/uploads/2020/07/FINAL-MEDIA-STATEMENT-ENFORCEMENT-NOTICE-ISSUED-TO-DISCHEM-PHARMACIES-LTD.pdf

  3. “Information Regulator refers National Department of Health to the Enforcement Committee over COVID-19 data”

    inforegulator.org.za (regulator) · Title in English

    Dated February 20, 2023 · Link checked October 2, 2026 (opened)

    Used for: Privacy and security

    https://inforegulator.org.za/wp-content/uploads/2020/07/Media-Statement_Information-Regulator-Refers-NDOH-to-the-Enforcement-Committee.pdf

One record across your care (4 sources)

  1. “National Department of Health Annual Report 2024/25”

    health.gov.za (government guidance) · Title in English

    Dated September 19, 2025 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.health.gov.za/wp-content/uploads/2025/11/NDoH-2024-25-Annual-Report-_-19-September-2025.pdf

  2. “Minister of Health reply to question NW2014 on hospital and PHC electronic records”

    PMG (government guidance) · Title in English

    Dated May 28, 2026 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://pmg.org.za/committee-question/37900/

  3. “Minister of Health reply to question NW4495 on EHR use in public hospitals and clinics”

    PMG (government guidance) · Title in English

    Dated August 1, 2025 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://pmg.org.za/committee-question/31734/

  4. “The 2024 CMS Industry Report is now available”

    Council for Medical Schemes (regulator) · Title in English

    Dated December 4, 2025 · Link checked October 2, 2026 (opened)

    Used for: One record across your care

    https://www.medicalschemes.co.za/the-2024-cms-industry-report-is-now-available/

Protection from sale and ads (2 sources)

  1. “Regulatory challenges of digital health: mental health applications and personal data in South Africa”

    Frontiers in Pharmacology (other) · Title in English

    Dated April 30, 2025 · Link checked October 2, 2026 (opened)

    Used for: Protection from sale and ads

    https://www.frontiersin.org/journals/pharmacology/articles/10.3389/fphar.2025.1498600/full

  2. “Adequacy decisions”

    European Commission (international body) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Protection from sale and ads

    https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

Doctors see it when treating you (2 sources)

  1. “About the National Health Laboratory Service”

    nhls.ac.za (government guidance) · Title in English

    No date recorded · Link checked October 3, 2026 (opened)

    Used for: Doctors see it when treating you

    https://www.nhls.ac.za/about-us/

  2. “NHLS TrakCare Lab WebView results viewer”

    trakcarelabwebview.nhls.ac.za (government guidance) · Title in English

    No date recorded · Link checked October 2, 2026 (opened)

    Used for: Doctors see it when treating you

    https://trakcarelabwebview.nhls.ac.za/trakcarelab/RDdefault.htm

Your say over research use (2 sources)

  1. “South African Ethics in Health Research Guidelines, 3rd edition v3.2”

    NHREC, National Department of Health (government guidance) · Title in English

    Dated 2024 · Link checked October 2, 2026 (opened)

    Used for: Your say over research use

    https://knowledgehub.health.gov.za/system/files/elibdownloads/2026-08/NDoH-2024-v3.2-master-signed.pdf

  2. “ASSAf POPIA Compliance Framework for Researchers and Research Institutions”

    univen.ac.za (other) · Title in English

    Dated May 1, 2025 · Link checked October 3, 2026 (opened)

    Used for: Your say over research use

    https://www.univen.ac.za/wp-content/uploads/2026/09/2025_ASSAf_POPIACompliance-Framework.pdf

Rules for AI in your care (3 sources)

  1. “SAHPRA Communication to Stakeholders MD08-2025/2026: Regulatory requirements of AI/ML-enabled medical devices”

    sahpra.org.za (regulator) · Title in English

    Dated September 26, 2025 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.sahpra.org.za/wp-content/uploads/2025/09/MD08-20252026_-SAHPRA-Communication-to-Industry-AI-Medical-devices_Acknowledgements.pdf

  2. “Cabinet approves withdrawal of AI policy”

    SAnews (government guidance) · Title in English

    Dated June 5, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://www.sanews.gov.za/south-africa/cabinet-approves-withdrawal-ai-policy

  3. “Minister of Health reply to question NW3043 on AI and digital health”

    PMG (government guidance) · Title in English

    Dated July 9, 2026 · Link checked October 2, 2026 (opened)

    Used for: Rules for AI in your care

    https://pmg.org.za/committee-question/39322/

Something wrong on this page? Tell us.

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI · Follow changes

SuperTruth Inc. · 24 S. 24th St., Philadelphia, PA 19103, USA · +1 215 918 4140 · supertruth.ai
Something wrong? Tell us · Questions or a briefing: supertruth.ai/on-the-record#contact · Full index: healthrecordrights.com
OECD: Organisation for Economic Co-operation and Development (38 mostly high-income countries). DTI™: the Data Trust Index, which grades the evidence behind each score. SuperTruth makes it and publishes this index. Everything here comes from public information: laws, government and regulator pages, court decisions, published news, WHO, OECD and World Bank data. Full sources: https://healthrecordrights.com/brief/south-africa/#sources. SuperTruth built this index and sells health data verification products; no one paid to be included. Research tool, not legal advice. Our scores and our own words are CC BY 4.0; quoted law and source titles stay with their owners.