The Firebreak.

There is a truth that has become impossible to ignore in 2026. The world is producing more data than at any point in human history, and it is also stealing more of it than at any point in human history.

Last year, South Africa ranked among the most targeted countries on the African continent for cybercrime. Medical and health data remains the most valuable category of stolen information on the dark web, fetching prices that dwarf stolen credit card details, because medical records do not expire. A stolen bank card can be cancelled. A stolen health record carries a person's chronic conditions, medication history, and fitness for duty status for life.

For our clients, this is not an abstract concern. Your workers' occupational health records sit at the intersection of employment law, privacy law, and personal dignity. A breach is not simply a regulatory failure. It is a betrayal of the people who trust you with their bodies and their livelihoods.

This is the context in which I want to tell you what we have been building.

The weight of the data we hold

Care Net Consultants processes occupational health assessments across four fixed clinics and sixteen mobile units, serving industries from construction and mining to food handling and transport. Every assessment generates a clinical record: hearing test results, lung function readings, blood pressure, vision, glucose, the full picture of a worker's occupational fitness at a point in time.

Multiply that across thousands of workers, dozens of clients, and fourteen years of operation, and you begin to understand the weight of what we hold on behalf of the people we serve.

We did not take that weight lightly before. But the truth is that the tools available to us two years ago were not adequate for the threat environment of today. My Clinic Online, which we built and own outright, has been systematically redesigned from the inside out to address that gap. Not to tick a regulatory box. Because it is the right thing to do for your workers and for you. Securing worker records for forty years is something a partner takes very seriously. We do fail at times, and we promise to always take feedback and improve.

What POPIA requires and what it actually means

The Protection of Personal Information Act came into full effect in July 2021. Most South African businesses treated it as a compliance project: draft a policy, appoint an information officer, file a notification with the Regulator, and move on.

We treated it as a design problem.

POPIA, at its core, establishes eight conditions for the lawful processing of personal information. The two that matter most in the occupational health context are consent and purpose limitation. A worker's medical information may be collected with their informed consent, and not otherwise. It may be used for the specific purpose for which it was collected, and for nothing else. It may be held for as long as necessary and no longer. And it must be protected with appropriate security measures.

That sounds straightforward. In practice, it requires completely rethinking how a medical record is created, stored, accessed, and eventually destroyed.

What we have changed in My Clinic Online

Digital consent at the point of assessment

Previously, worker consent for medical data processing was captured on paper consent forms, which were filed, scanned, and stored separately from the clinical record. Under the new MCO architecture, consent is captured digitally at the point of assessment, linked directly to the worker's record, and time stamped. If a worker's data is ever queried under a POPIA access request or an audit, the consent record is immediately retrievable. No paper trail to hunt down. No filing cabinet to search. The record is the consent, and the consent is the record.

This matters for you as an employer because your exposure under POPIA is shared. If your service provider cannot demonstrate that your workers consented to their data being processed, the liability does not sit with us alone.

Role based access control

Not everyone who works at Care Net Consultants needs to see every record. Under our updated access architecture, clinical records are accessible on a strict need to know basis, determined by role and by client assignment. A practitioner at the Brackenfell clinic cannot access records from the Midrand clinic unless that access is specifically authorised. An administrator processing a booking cannot view the clinical findings. The principle is minimum necessary access, which is the standard POPIA and global data protection frameworks require.

Audit trail and access logging

Every access to a worker's record in My Clinic Online is now logged: who accessed it, when, from which device, and what action was taken. If a record is viewed, downloaded, or modified, that event is captured. This serves two purposes. First, it allows us to detect anomalous behaviour early. Second, it gives you, as the client, a complete and verifiable access history if a worker ever raises a complaint or a regulator ever asks.

Expiry alerts and certificate integrity

A medical fitness certificate that has expired is worse than no certificate at all. It exposes the employer to liability under the OHS Act if an unfit worker is harmed. MCO now alerts the Care Net client team and, where configured, the worker directly, when a certificate is within 30 days of expiry. No certificate expires unnoticed. No audit catches you short.

Data minimisation in reporting

Clients are entitled to know whether a worker is fit, conditionally fit, or referred. They are not entitled to the specific clinical findings that informed that determination, which are confidential to the worker and the treating practitioner without the necessary consent. Our report architecture has been restructured so that client facing outputs contain the data the client is permitted to receive, and nothing more. The clinical detail stays in MCO, accessible to the clinical team and to the worker, and is not transmitted to the employer as a matter of course.

What is in the pipeline

We are not finished. These enhancements are in development and will be released in the months ahead.

Worker data access requests (POPIA Section 23)

Under Section 23 of POPIA, every person has the right to request access to their personal information held by an organisation. Workers will soon have access to a worker app where they can view their own clinical information in confidence.

Automated data retention management

POPIA requires that personal information be retained for as long as necessary for the purpose for which it was collected, and no longer. We are building an automated retention engine within MCO that will flag records for review when the relevant retention period has elapsed, based on the type of assessment, the industry, and the applicable legislative retention requirement. This removes the single most common POPIA compliance failure: records held indefinitely because no one remembered to delete them.

Two factor authentication on the client portal

In a world where credential theft is the most common entry point for a data breach, a username and password alone is no longer sufficient. Two factor authentication is available on the MCO client portal today, and I would encourage every client to switch it on now: a code sent to a registered device or an authenticator application, alongside your password. Over the months ahead it will become a requirement for every login as the portal moves to fully encrypted access.

Quotes and bookings that know who you are

We are also building solutions to improve our service delivery. Quote automation and booking automation are both in beta. They will save you a great deal of time: once you have authenticated yourself, most of your details pre-populate, and your service level agreement is pulled through so that we are accurate when we quote you, or when you hold a group agreement with us.

A free Medical Surveillance Matrix

We are building a free Medical Surveillance Matrix to help you understand the health risk exposures your workforce carries. The free version is a guide. It is not verified by our Occupational Medical Practitioner, and it should not be filed as a compliance document. For a signed off version that you can place in your audit file, our pricing guide sets a fee determined by the time our OMP spends making sure the matrix is accurate and defensible. The OMP then signs the document and places their practice number on it, so that your health risk matrix is legally compliant. This will be the most affordable solution on the market, and it will help you understand everything about medical surveillance and your company's health risk exposures.

Why this is about more than compliance

I have been in occupational health long enough to remember when a worker's medical record was a cardboard folder in a filing cabinet. I have watched that record move to a spreadsheet, then to a basic database, and now to a platform that can tell you, in real time, which of your workers across all your sites are due for reassessment in the next ninety days.

At every step of that journey, the fundamental question has not changed. Who is responsible for what is in that record? Who is responsible for keeping it safe? Who is responsible for using it honestly and for the purpose the worker agreed to when they gave their consent?

The answer has also not changed. We are. Together.

That is what partnership means in practice. Not a service level agreement. Not a vendor relationship. A shared commitment to the people whose data we hold and whose health we are entrusted to protect.

My Clinic Online is the infrastructure of that commitment. POPIA is the legal framework. But the reason we are doing this, the real reason, is that the workers who come through our clinics and our mobile units deserve to know that their most personal information is handled with the same care and dignity with which we conduct their assessments.

That is the standard we are building toward. And we are not done yet. Expect updates, and a full digital transformation that will in time include solutions to manage employee health and wellness. Look out for it.

Warm regards,
Barteld Bakker
Founder and Managing Director, Care Net Consultants
Your Partner in Workplace Health

Spring Day was also launch day for our new website. It was built for the same reason the rest of this edition exists: to put useful things within reach. On carenetconsultants.co.za you will now find free guides and tools, access to the legislation that governs your medical surveillance programme, and the Health Risk Assessment Matrix described in the letter above. Like anything planted in spring, it will keep growing through the year. Tell us what you want to see there.

Three of these belong on your site, not on a poster

Heart Awareness Month. Blood pressure is measured at nearly every periodic assessment we conduct, and it is the reading most often flagged. High blood pressure has no symptoms a worker can feel, which is why it is picked up at a medical rather than reported at the clinic door. If your assessment reports show a rising share of conditionally fit outcomes tied to blood pressure, that is a workforce signal, not a string of unrelated cases, and it is worth a conversation with our clinical team about what a wellness intervention could look like.

Deaf Awareness Month. Noise induced hearing loss is permanent, cumulative, and entirely preventable. Audiometry at baseline and at each periodic assessment is how a shift is caught early, before it becomes a claim. Hearing protection that is issued but worn incorrectly, or removed for conversation in the noise zone, does not protect. September is a good month to walk the noise zones and look.

Eye Care Awareness Month. Vision assessment is often treated as the quick part of a medical, but for drivers, forklift operators, crane operators, and anyone reading gauges or fine print under poor light, it is the part that decides whether they are safe at the controls. A worker whose vision has changed since baseline needs to know, and so does the person who allocates their duties.

World Suicide Prevention Day falls on 10 September. Mental health at work is not an assessment outcome, and we do not pretend it is. It is a culture. The most useful thing an employer can do this month is make sure that every worker knows where to turn, and that turning there carries no penalty.

Educational spotlight: why accredited training is not interchangeable with generic training

Health and safety training is easy to buy and hard to defend. The difference sits in accreditation. Training delivered under a SETA accredited provider is assessed against registered unit standards, moderated, and recorded on the National Learner Records Database. A generic course, however well presented, produces an attendance certificate and nothing behind it.

That distinction matters in three places. In a Department of Employment and Labour inspection, where the inspector asks not whether training happened but whether it was competent. In an incident investigation, where an employer who can show accredited, recorded competence is in a materially different position from one who can show a sign in sheet. And in the Compensation Fund, where the employer's record of due diligence shapes the outcome. Care Net Consultants offers MSHEQ SETA accredited health and safety training for exactly this reason. Ask your account manager for the September and October training calendar.

A note on assessing women in industrial work

Many reference values used in occupational health were built on male working populations. Lung function norms, protective equipment sizing, manual handling limits, and heat stress thresholds all carry that history. When a female worker in construction, food handling, or manufacturing is assessed against a male default, the result can be a fitness decision that is technically complete and practically wrong. Our practitioners apply sex specific reference ranges where they exist and fit test protective equipment on the person wearing it. If you employ women in physically demanding or exposure heavy roles, ask us to review whether your programme reflects that.

Non diagnostic notice. The health information in this newsletter is educational. It does not diagnose any condition and does not replace an assessment by an occupational health practitioner. Fitness decisions for any worker are made by a registered practitioner on the basis of an assessment.