South Africa
National Health Act compliance, made simple
11 yes/no questions for health care providers and establishments: records, confidentiality and consent, complaints, the duties of private health establishments, and standards. You get a score for each area and a list of gaps with what to do about each one.
ComplianceDesk gives you 7 pre-built National Health Act controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving National Health Act compliance stops being a spreadsheet exercise.
Take the free self-assessment: a score for each area and a list of gaps to close.
What is National Health Act?
11 yes/no questions for health care providers and establishments: records, confidentiality and consent, complaints, the duties of private health establishments, and standards. You get a score for each area and a list of gaps with what to do about each one.
- Official name
- National Health Act
- Status
- Partly in force. Reports say the Act is not yet in force in full. Check which provisions apply.
Who it applies to
- Whether it applies to you depends on your size, activities and licences. Use the free "Which laws apply to me?" checker, or read the first section of the self-assessment.
- Answer Not applicable throughout if you are not a health care provider or health establishment.
What you have to do
Records, confidentiality and consent
A business should be able to show that it can answer yes to these: Do you keep a record for each user of your health services, in line with the Act and the National Archives and PAIA rules it refers to? Do you keep patient information confidential, and disclose it only with consent, by law or where the Act allows? Do you get informed consent before treatment, explaining the patient's condition, options, benefits and risks in a language they understand? Do you protect health records against loss, theft and unauthorised access, with controls for both paper and electronic files?
Establishments, standards and complaints
A business should be able to show that it can answer yes to these: If you run a health establishment, do you meet the duties the Act puts on private health establishments and keep the registrations, licences and certificates you need? Do you meet the national norms and standards for health establishments, and are you ready for an inspection by the Office of Health Standards Compliance? Do you have a clear and fair complaints procedure for users, and a record of complaints and what you did? Do you manage health care waste safely and with licensed contractors?
People and wider duties
A business should be able to show that it can answer yes to these: Are your practitioners registered with their statutory councils, with current registration and any required indemnity cover? Do you follow the laws that apply to an employer and to a health business, such as the OHS Act, labour laws, and the rules for medicines and medical devices where you sell or use them? Have you looked at how the National Health Insurance Act 2024 could affect your services and funding, and watched for its commencement?
How to comply, step by step
- Records, confidentiality and consent. Keep patient files securely, with an agreed retention period. Check the retention periods that apply to your profession and the Act. Train staff on confidentiality. Health information is special personal information under POPIA, so see the POPIA assessment. Use a consent form and a record of the explanation, and check practice in emergencies and for children and people who cannot consent. Apply access control, backups and a breach plan to patient data.
- Establishments, standards and complaints. List the registrations required (council, provincial licences, certificates) and track their renewal dates. Check the current norms and standards for your type of establishment, and run a yearly self-audit. Display how to complain, keep a log, and review the log for patterns. See the NEMA assessment, and keep waste manifests.
- People and wider duties. Verify registrations on the councils' registers each year and keep proof. See the OHSA and BCEA assessments, and check the SAHPRA rules for medicines and devices. Follow Department of Health announcements and take advice on contracting and funding arrangements.
Sources and review status
Compiled from the public sources below. It is not legal advice and has not been reviewed by a lawyer. Last researched 2026-11-01. This is general information, not legal advice. Laws change, so check the current text and the regulator's notices before relying on it.
Every National Health Act control, organised for you
The real control library ComplianceDesk seeds the moment you activate National Health Act — 7 controls across 4 categories.
Facility Licensing & Standards
- NHA-1.1 Health establishment licensed/certified
- NHA-1.2 Infection prevention and control measures documented
Patient Records & Confidentiality
- NHA-2.1 Patient record-keeping and confidentiality controls
- NHA-2.2 Patient record retention period observed
Practitioner Registration
- NHA-3.1 Practitioners registered with the relevant statutory health council
Consent & Patient Rights
- NHA-4.1 Informed consent process documented
- NHA-4.2 Patient rights charter communicated
Frequently asked questions
How can I check where my business stands on National Health Act?
Take the free self-assessment. It scores each area, lists your gaps with what to do about each one, and does not say you are compliant. You can save the result to ComplianceDesk to turn each gap into a task with an owner and a due date.
Is this guide written by a lawyer?
No. It was assembled from the public sources listed below and has not been reviewed by a lawyer. Treat it as a starting point and check the current law before relying on it.
How many controls does ComplianceDesk track for National Health Act?
7, organised into 4 categories, ready to assign to an owner as soon as you activate the framework.
Can I track National Health Act alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up National Health Act in ComplianceDesk?
Activating National Health Act instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Other South Africa frameworks
See your full compliance picture
193 frameworks, one system of record.