top of page
Search

Understanding Sick Leave and Medical Privacy in South Africa

Updated: Dec 27, 2025

Key Points


  1. Right to Medical Privacy

  2. Every South African has a constitutional right to privacy. This right includes the confidentiality of medical information. blog.seesa.co.za+1

  3. Employers must respect this right. They should avoid demanding unnecessary medical details from employees on sick leave.


  4. Sick Leave Entitlements and Employer Proof Demands

  5. Under the Basic Conditions of Employment Act (BCEA), employees are entitled to paid sick leave. This typically amounts to six weeks over a 36-month cycle. Employers may require a medical certificate if an absence exceeds two consecutive days or occurs more than twice in an eight-week period. Department of Labour+2Labour Guide+2

  6. For shorter absences, an employer cannot automatically demand broad medical information. The focus should be on proof of incapacity, not a full medical history.


  7. What Employers May and May Not Request

  8. Employers may ask for a certificate stating that the employee was unfit to work for the specified period.

  9. However, they should not demand full medical diagnoses, treatment details, or medical records beyond what is reasonably required. Consent from the employee or a specific lawful basis is needed for processing sensitive medical data. blog.seesa.co.za+1

  10. The processing of health data is governed by the Protection of Personal Information Act (POPIA) and other relevant privacy rights. LegalWise


  11. Practical HR Risk Areas Highlighted

  12. If an employer collects excessive medical information, uses it improperly, or fails to secure it, they risk breaching privacy laws.

  13. Employers need clear policies on sick leave. They should specify what information may be requested, how medical certificates will be treated, and how medical data is stored and used.

  14. Transparency and consistent treatment are key to avoiding discrimination or unfair treatment claims.


  15. Tips and Good Practice

  16. Request a medical certificate only when legally permissible. This typically occurs after two days of absence or repeated absences.

  17. Limit information to what is necessary: “unfit for duty” for a defined period, not a full diagnosis.

  18. Ensure employee consent where required, or rely on a lawful basis for processing medical information under POPIA.

  19. Secure medical data properly. Restrict access and clearly define retention periods.

  20. Keep sick leave policies and procedures documented and communicated. This includes how medical certificates are handled and how absenteeism will be managed.


Why This Matters


For employers in South Africa, there's a delicate balance between managing absenteeism and respecting employees’ rights to medical privacy. Mismanagement of medical information can lead to legal exposure under labour law and privacy regulations. For employees, it’s crucial to understand their sickness entitlements. They do not automatically have to divulge detailed medical history when taking sick leave.


Conclusion


Understanding the nuances of sick leave and medical privacy is essential. It helps create a respectful workplace where both employers and employees feel secure. By following the guidelines outlined above, we can foster a culture of trust and compliance. This approach not only protects rights but also promotes a healthier work environment.


As we move forward, let’s ensure that we prioritize both the well-being of employees and the legal obligations of employers. This balance is vital for a thriving workplace.


---wix---

---wix---

 
 
 

Comments


bottom of page