Medical Compliance SA
HPCSA-compliant CPD ledger, POPIA-for-Health, SAHPRA scheduled-medicines register, SHA-256-hashed evidence chain and a one-click HPCSA-inquiry evidence pack. Discipline-aware from day one.
Regulators
- HPCSA — Health Professions Council of South Africa — Practitioner registration, annual practising fee, CPD, ethical rules, disciplinary inquiries.
- SAHPRA — SA Health Products Regulatory Authority — Scheduled-substances registers (S1–S6), Good Pharmacy Practice, medical-device oversight.
- National Department of Health — National Health Act, facility licences, health-records retention, Radiation Control Directorate.
- Information Regulator (POPIA) — Special personal information (health data) processing, breach notification, Operator agreements.
- Council for Medical Schemes — Scheme audit protocols, PMBs, ICD-10 & tariff-code discipline.
- Department of Employment & Labour — OHSA 85 of 1993, needle-stick incidents, IPC, COIDA.
What the engine tracks
- Discipline-aware requirement engine — a psychologist sees different items than a dentist
- HPCSA-compliant CPD ledger (60 CEUs incl. 10 ethics per rolling 24 months, Cat 1/2/3 tagged, HPCSA-portal export)
- POPIA-for-Health — patient-record retention clock (adults 6yrs, minors to 21, obstetric 21yrs), s26/s27 lawful basis, 72-hour breach workflow
- SAHPRA S1–S6 scheduled-medicines register with cold-chain excursion alerts
- One-click HPCSA-inquiry evidence pack (bound, page-numbered, hash-chain stamped PDF)
- Medical scheme audit-prep templates — BHF, Discovery Vitality, Momentum, Bonitas, GEMS
- Locum & credential vault with live HPCSA / SANC / SAPC status
- POPIA Operator / BAA agreement generator for labs, billing bureaus, cloud EHR vendors
- Multi-site + multi-practitioner rollup (Clinical tier)
- RBAC with clinical separation — Practice Manager · Clinician · Locum · Receptionist · External Auditor
- Adverse event & M&M register + peer-review workflow (Clinical tier)
- Signed monthly compliance statement — SHA-256 hash-chain PDF accepted by advisors and scheme auditors
What is included
- Discipline-aware requirement engine
- HPCSA registration & CPD ledger
- POPIA-for-Health module (not generic POPIA)
- Tamper-evident evidence vault (SHA-256 hash chain)
- Regulator change feed (HPCSA, SAHPRA, DoH) filtered to your discipline
- SAHPRA scheduled-medicines register (S1–S6) — Practice tier
- HPCSA-inquiry evidence pack — Practice tier
- Multi-site rollup + RBAC + M&M register — Clinical tier
Penalties
- Health Professions Act 56 of 1974, s41 — unprofessional conduct: Reprimand · fine · suspension · removal from the register
- POPIA Act 4 of 2013, s107 — offences: Up to R10 000 000 fine or 10 years imprisonment
- Medicines & Related Substances Act 101 of 1965, s29 — offences: Up to R10 000 or 10 years per contravention (scheduled substances)
- National Health Act 61 of 2003, s89 — general offences: Up to R100 000 or 5 years
- OHSA 85 of 1993, s38 — offences: Up to R100 000 or 2 years (needle-stick, IPC breaches)
Frequently asked
Which practitioners is Medical Compliance SA built for?
Every HPCSA-registered field: GPs, medical specialists (physicians, surgeons, gynaecologists, paediatricians, psychiatrists, radiologists, pathologists, anaesthetists), dentists & dental therapists, physiotherapists, psychologists, occupational therapists, dieticians, chiropractors, biokineticists, speech-language therapists, audiologists and optometrists — plus SAPC-registered pharmacists and pharmacist's assistants, SANC-registered nurses and midwives, and DoH / OHSC-licensed health establishments (day clinics, private hospitals, group practices). The discipline picker in Medical Compliance SA auto-scopes the requirement engine to your regulator on day one.
How is this different from generic POPIA software?
Medical Compliance SA ships POPIA-for-Health. That means the retention clock knows adult records = 6 years from last consultation, minors = until age 21, obstetric = 21 years. The lawful-basis register defaults to s26/s27 (special personal information). The breach workflow starts a 72-hour timer with a pre-drafted Information Regulator notification. Generic POPIA tools don't do any of that.
Will HPCSA accept the CPD ledger in an inquiry?
Yes — the ledger tracks 30 CEUs per 12 months (5 ethics) — 60 CEUs incl. 10 ethics per rolling 24 months, with each CEU valid 24 months from the activity date, tagged by Cat 1/2/3, records the accredited provider ID, and exports in the HPCSA CPD portal format. Every certificate uploaded is SHA-256 hashed and entered in the immutable audit log, which serves as supporting evidence in a s41 inquiry.
How does the SAHPRA scheduled-medicines register work?
S1 through S6 columns, receipt-dispense-balance per batch, expiry alerts, twice-daily cold-chain temperature log with min/max/excursion flags, and a DoH-inspector-ready PDF. Meets the recording obligation of Medicines Act s22A(15).
Can I run a group practice with multiple sites and practitioners?
Yes — on the R1,200 Clinical tier. You get a portfolio dashboard showing which room / branch is red, per-practitioner HPCSA & CPD status, consolidated waste and cold-chain across sites, plus role-based access (Practice Manager / Clinician / Locum / Receptionist / External Auditor). Auditors get read-only share links with expiry.
What is the HPCSA-inquiry evidence pack?
One-click bound, page-numbered PDF: your registration history, complete CPD ledger with certificate hashes, scope-of-practice log, patient-complaints register, and full incident timeline. It ships with a cover-letter template and is stamped with our SHA-256 hash chain. Practice and Clinical tiers.
Does Medical Compliance SA give medical or clinical advice?
No. Medical Compliance SA is a compliance management platform. It disciplines the paperwork, deadlines, evidence and audit trail that HPCSA, SAHPRA and the Information Regulator require. It does not diagnose, treat or advise on patient care.
How is Medical Compliance SA priced?
By feature depth, not headcount. Essentials R199/mo (solo practitioner core: HPCSA, CPD, POPIA-for-Health, complaints register, evidence vault). Practice R799/mo (adds SAHPRA S1–S6, cold chain, waste, OHS/IPC, calibration, locum vault, Operator Agreements, evidence pack, scheme audit templates). Clinical R1,200/mo (adds multi-site rollup, RBAC, adverse-event & M&M register, peer review, radiation control, signed monthly statement).