| Diagnosis, treatment & continuity of care |
Clinical notes, psychometrics, medication, risk assessments |
POPIA § 11(1)(c) – performance of obligations in the patient’s interest; § 34(1)(b) competent-person consent |
| Medical-aid reimbursement & debt recovery |
ID, membership number, ICD-10 codes, invoices |
POPIA § 11(1)(c); Medical Schemes Act |
| Secure back-ups (SA + EU/US/CH) |
Encrypted replicas of entire record |
POPIA § 57 + Standard Contractual Clauses |
| Teaching / research (de-identified) |
Redacted case material |
POPIA § 27(1)(d) – opt-in only |