In early 2026, nothing about South Africa’s healthcare laws dramatically changed on paper. There were no sweeping new Acts signed, no headline-grabbing legislative overhauls. Yet, across private practices, pharmacies, and digital health platforms, something has definitely shifted.
The long established rules are being revisited and enforced.
At the centre of this shift is the Medicines and Related Substances Act, a decades-old piece of legislation that governs how medicines are prescribed, dispensed, and regulated. For years, parts of the system operated in a grey zone, especially as telehealth, digital prescriptions, and platform-based care models rapidly expanded. Now, regulators are closing that gap.
A System Under Pressure
The acceleration didn’t happen in isolation. It’s the result of converging pressures: the rise of telemedicine, growing concerns about overprescribing, and a series of data-related controversies that exposed weaknesses in healthcare systems.
The South African Health Products Regulatory Authority (SAHPRA) has responded by tightening oversight, less through new law, and more through active enforcement of existing rules. At the same time, the Health Professions Council of South Africa (HPCSA) has reiterated ethical guidelines that many practitioners had begun to interpret loosely in the digital era.
The message is becoming clear: convenience cannot come at the expense of compliance.
Telehealth’s Reality Check
During the pandemic, telehealth surged out of necessity. Virtual consultations became normal, and in many cases, prescribing followed suit. But what began as an emergency response has evolved into a permanent feature of healthcare delivery. Regulators are now drawing firmer boundaries.
Under current guidance, prescribing medication without a prior in-person consultation remains restricted, particularly for higher-schedule drugs. The concern isn’t just procedural, it’s clinical. Without a verified practitioner–patient relationship, the risk of misdiagnosis, inappropriate treatment, and medication misuse increases.
For practices that built their models around speed and accessibility, this creates friction. For regulators, it restores a line they believe should never have blurred.
The Digital Record Becomes Legal Evidence
At the same time, clinical notes and patient records, once a back-office function, are now at the frontline of compliance.
The intersection between the Medicines Act and the Protection of Personal Information Act (POPIA) has elevated expectations around data integrity, security, and traceability. It’s no longer enough to keep records; practices must be able to demonstrate:
- Who prescribed a medication
- When it was prescribed
- On what clinical basis
- And how that information is securely stored
Recent data breach incidents in public healthcare settings have only intensified scrutiny. Regulators are increasingly interested in whether systems can produce clear audit trails, not just whether records exist.
In this environment, fragmented or manual systems are more than inefficient, they’re a liability.
Supply Chains Under the Microscope
Beyond the consultation room, enforcement is extending into the supply chain. Recent negative press around SAHPRA’s delayed action in dealing with reports of breaches in Good Manufacturing Practice (GMP) violations and the negative press around exposes on Carte Blanche, have seemingly spurred a drive to enforce GMP.
SAHPRA has continued efforts to address long-standing backlogs in medicine registration, while simultaneously cracking down on unregistered and improperly imported products. This is particularly relevant in an era where patients can access treatments through informal online channels or cross-border suppliers.
The risk is twofold: compromised patient safety and erosion of regulatory control.
For providers, the implication is straightforward but critical. Every medicine recommended, dispensed, or administered must be fully traceable to a compliant, registered source.
Scope Matters Again
Another quiet shift is happening within multidisciplinary practices. As collaboration between healthcare professionals becomes more common, so too does the risk of scope-of-practice overreach.
The Medicines Act, alongside HPCSA regulations, clearly defines who may prescribe and who may dispense. In modern practice environments, where administrative systems, shared patient records, and integrated workflows blur traditional roles, those boundaries can become less obvious.
Regulators are now paying closer attention.
For independent health professionals, this doesn’t just mean staying within scope clinically, it means ensuring that the systems and processes around them don’t inadvertently facilitate non-compliant activity.
From Legal Framework to Operational Reality
What makes this moment significant is not the introduction of new rules, but the transition from theoretical compliance to enforced accountability.
For years, many practices operated under the assumption that compliance was a checklist, something to be addressed periodically. Today, it is continuous, embedded, and increasingly visible.
The implications are practical:
- Telehealth workflows must align with prescribing rules
- Patient records must be secure, complete, and auditable
- Medication sourcing must be verified and compliant
- Roles within practices must be clearly defined and adhered to
In short, compliance is no longer separate from operations. It is operations.
A Turning Point for Private Practice
For South Africa’s private and allied health sector, this shift presents both a challenge and an opportunity.
Practices that rely on outdated systems or informal processes may find themselves exposed as enforcement tightens. But those that invest in EZMed and use the easily implementable & compliant workflows stand to benefit, not only by reducing risk, but by building trust with patients and partners in an increasingly regulated environment.
Because while the law hasn’t changed much in recent months, its presence has.
And in healthcare, that difference is everything.