The Consumer Protection Act (CPA) | Applicability to Healthcare Services and Products

by | Oct 28, 2025 | Medical Malpractice Insurance

South Africa’s Consumer Protection Act (CPA) governs transactions between “suppliers” and “consumers” of goods and services. In the healthcare context, patients are generally consumers and healthcare providers (doctors, hospitals, clinics) are suppliers. The Act applies to most medical services and products provided to patients (subject to limited exclusions, e.g. transactions with organs of state or between large juristic persons above certain thresholds[1]). A “service” under the CPA includes any work performed for a consumer (e.g. consultations, treatments, surgeries)[2]. A “supplier” includes any health practitioner or establishment that provides such services[2]. Likewise, “goods” include any items supplied to patients – notably medicines, blood products, medical implants or devices, consumables, foods or beverages used in care[3].

The CPA creates statutory rights and obligations in these transactions. Most relevant to healthcare providers are: (a) Section 54 (consumer’s right to quality service), (b) Section 61 (strict liability for damage caused by goods), and (c) Sections 48–51 (contractual fairness and exclusion clauses). We summarize each and clarify common misconceptions:

Services – Section 54 (Right to Quality Service)

Under Section 54, when a supplier undertakes to perform services, the consumer has a statutory right to:

  • Timely and proper performance – services must be completed promptly, with notice of any delays[4].
  • Expected quality – services must be performed in “the manner and quality that persons are generally entitled to expect”[5]. For healthcare this means competent medical care consistent with accepted standards.
  • Suitable goods for service – if the service requires goods (e.g. implants, dressings, medicines), those goods must be free of defects and of a quality generally expected[6].
  • Return of patient property – any patient property (e.g. clothing, prosthesis) must be returned as well or in as good a condition as received[7].

If a supplier breaches these standards, Section 54(2) gives the patient remedies: the patient may require the supplier either to remedy the defect in the service or to refund a reasonable portion of the fee paid, proportional to the failure[8]. In practice, this could mean redoing a botched procedure or refunding part of the consultation/hospital fee.

Clarification: Section 54 creates an implied quality warranty in any healthcare contract. It is not a no-fault or strict-liability rule that automatically holds providers liable for all adverse outcomes. A patient must still show that the service fell below the expected standard (analogous to proving negligence). The CPA remedies under s.54 are more like a statutory contractual guarantee: if the care is substandard (for example, a surgery is improperly performed), the patient can enforce these statutory remedies[4][8]. But the CPA does not eliminate the need to prove fault for medical malpractice. In other words, a doctor is not automatically liable for any injury just by virtue of CPA; traditional fault-based negligence still underpins a damages claim. The CPA service rights supplement, rather than replace, the common-law duty of care. In short: medical negligence claims remain fault-based, although patients have additional relief if service quality is defective.

Example: If a patient suffers harm because a surgeon was negligent, the patient can sue in delict (ordinary malpractice action requiring proof of fault). Alternatively (or additionally), the patient could argue the surgical “service” failed to meet the expected quality under s.54, and seek the prescribed remedy (e.g. re-operation at no cost, or partial fee refund). The remedies differ: s.54 does not provide general damages for injury, but it does empower the patient to demand correction or compensation linked to the service defect[8].

Goods (Product) Liability – Section 61 (Strict Liability)

Section 61 imposes strict product liability on anyone in the chain of supply of goods. It provides that the producer, importer, distributor or retailer of any goods is liable for harm caused by those goods if the goods were unsafe, had a defect/failure/hazard, or had inadequate warnings[9]. Crucially, this liability is “irrespective of whether the harm resulted from any negligence” on the part of the supplier[9]. In plain language, if a medical product (e.g. implant, medication, equipment) is defective or lacks proper instructions and injures a patient, the supplier(s) can be held liable even if they were not at fault. Moreover, all persons in the chain are jointly and severally liable[9].

Section 61(2) specifically extends liability to healthcare providers who supply goods during services. It states that a “supplier of services who, in conjunction with the performance of those services, … supplies, installs or provides access to any goods, must be regarded as a supplier of those goods”[10]. For example, if a surgeon implants a defective prosthesis or administers a contaminated drug, the surgeon (and hospital) are treated as distributors/retailers of the good. They can be sued under s.61 just like the manufacturer or importer.

Types of harm covered: Section 61(5) defines “harm” broadly to include death or injury, illness, damage to any property (movable or immovable), and any economic loss resulting from those (e.g. loss of earnings due to injury)[11]. This encompasses the usual range of personal injury and property damage claims.

Defences/Exceptions: Section 61(4) provides defenses: no liability arises if, for instance, the defect was solely due to compliance with a regulation[12], or if the alleged defect did not exist when the supplier supplied the goods. A supplier can also avoid liability if it is unreasonable to expect them to have discovered the defect (e.g. a small retailer selling a sophisticated imported device might not be held liable)[13]. Claims must generally be brought within three years of the injury or discovery of facts[14].

Strict liability effect: In practice, this means a patient injured by a faulty medical product need only prove that (a) the product was defective/unsafe/inadequate and (b) this caused their harm. They do not need to prove negligence or intentional fault on the supplier’s part[9]. For example, if a patient’s implanted pacemaker explodes or a medication has a hidden toxicity, the manufacturer/distributor can be liable under CPA s.61 even if they were fully compliant with testing regulations. (Note however that if the device was altered negligently after supply, that may affect liability.)

Courts have confirmed this strict liability interpretation. In Pieterse and Others v Organic Synthesis (Pty) Ltd (North Gauteng, 2024), the High Court emphasized that “each…producer, importer, distributor and retailer is jointly and severally liable” for harm from an unsafe product, and “plaintiffs need not prove wrongfulness and negligence” under s.61[9]. That case involved a defective household gel heater, but the principle applies equally to medical products. In short: under the CPA a faulty medical good can be the basis of a no-fault damages claim against suppliers[9].

Contrast with services: Unlike s.54 (services), Section 61 imposes no-fault liability. A doctor is not strict-liable for surgical error (that is a service issue, not goods). But if the error was caused by a defective implant or instrument, then Section 61 can be invoked (the doctor is treated as a supplier of that good)[10][9]. Thus doctors and hospitals must be mindful of product risk separate from medical negligence.

Exclusionary Clauses (Sections 48–51)

The CPA places strong limits on contract terms that try to exclude liability. In healthcare, many patient forms historically attempted to waive the hospital’s or doctor’s liability. The CPA generally forbids waiver of consumer rights, especially in personal-injury cases:

  • Section 48 prohibits any contract term that is unfair, unreasonable or unjust. In particular, a supplier may not require a consumer to waive any rights or to assume liability on terms that are unfair[15]. A term that exonerates the supplier from liability for patient harm is typically “excessively one-sided” and unfair under s.48(2) criteria, especially for personal injury (Regulation 44(3) presumes any clause excluding supplier liability for death/personal injury is unfair)[16][15].
  • Section 51 specifically bans prohibited terms. Any clause whose effect is to waive or deprive the consumer of a CPA right, or to exempt the supplier from CPA duties, is void[17]. Crucially, s.51(1)(c)(i) declares void any clause that limits or exempts the supplier from liability for gross negligence[18]. (Section 51(1)(c)(ii) similarly voids any consumer assumption of risk for those grossly negligent losses[18].) By implication, any clause attempting to immunize a hospital or doctor from any harm to a patient is highly suspect. If a contract disclaims liability for ordinary negligence, it may not explicitly violate s.51, but it will almost always be deemed unfair under s.48 or presumed unfair by regulation.
  • Section 49 (Notice): Even if a term somehow survived, s.49 requires that any notice or agreement clause that limits supplier liability or imposes indemnities on the consumer must be conspicuously highlighted and acknowledged[19]. For healthcare, this means a hospital cannot hide a waiver clause in fine print; it must be drawn to the patient’s attention (e.g. by bold type and signature)[19]. But even prominent notice cannot override the absolute prohibitions above.

Key takeaway: Any standard disclaimer in a hospital or clinic form (“We do not accept liability for any injury or death”) is likely unenforceable. Gross negligence exclusions are flatly void[18]; even ordinary negligence exclusions will generally be struck down as unfair[15][18]. In practice, patients can still pursue claims for malpractice or product harm despite signing consent forms. Providers should ensure contracts do not contain prohibited waiver language – and if any risk disclosures are given, they must meet CPA formatting rules (plain language, conspicuous, consumer acknowledgment)[20][19].

Summary of CPA Liability Standards

  • Medical Negligence Claims (services): CPA does not dispense with the need for fault. A doctor injured patient through negligence still requires proof of breach of duty, wrongfulness and fault (as in ordinary delict law). The CPA’s Section 54 ensures patients can enforce quality standards contractually, but it doesn’t create a strict liability tort for medical treatment.
  • Product Liability (goods): CPA introduces true strict liability for goods. Healthcare professionals can be held liable for damage from defective medical products they supply, even if they were not negligent[9]. Thus the standard for goods is stricter than for services.
  • Burden on Supplier vs. Consumer: In a product claim, the consumer (patient) must still establish defect, but need not show negligence. In a service claim, the patient must show the service was not to expected standard – effectively showing fault.
  • Joint and Several Liability: If multiple parties in the supply chain (e.g. manufacturer, distributor, hospital) are liable under s.61, any one can be held responsible for the full damages[9]. They may then seek contribution among themselves, but the patient’s recovery isn’t limited.

Case Law: Pieterse v Organic Synthesis (2024)

In Pieterse and Others v Organic Synthesis (Pty) Ltd and Others [2024] ZAGPPHC 1142, the court dealt with a Section 61 product liability claim. The judgment reiterates that each producer/importer/distributor/retailer is strictly liable for harm from an unsafe product, and plaintiffs need not prove negligence[9]. The Court confirmed joint-and-several liability under s.61 and emphasized that claims for injuries caused by defective products are properly brought under the CPA’s product-liability provisions[9]. This case underscores the CPA’s application to personal injury and confirms that patients (here, consumers) can use s.61 to seek compensation for a defective medical product, without alleging fault by the supplier.

The High Court also noted that, when suing under s.61, plaintiffs need not allege compliance with the Act’s internal dispute procedures (section 69)[21] – a procedural point clarifying that CPA product liability claims can be pursued in court like traditional civil claims.

Practical Implications and Risk Management

Insurance and Indemnities: The CPA has significant insurance implications. Medical indemnity insurers and risk advisers advise that healthcare providers should ensure professional indemnity policies cover CPA exposures, especially product liability[22]. In practice, this means malpractice insurance should include cover for claims arising from defective medical products and strict-liability losses. Providers may also negotiate indemnity or warranty agreements with suppliers of medical goods (manufacturers, importers, distributors) to shift risk. For example, a hospital purchasing implants can seek contractual indemnities from the device maker for CPA-type claims[23].

Liability Clauses: All indemnity or exemption clauses in patient agreements must be reviewed. Any clause purporting to relieve the provider from liability for negligence or product failure is either void or must meet the strict notice requirements[18][19]. Providers should remove or carefully re-draft any overly broad waivers. If a specific risk must be consented to (e.g. high-risk surgery), the risk must be clearly explained and consent obtained in writing, but this will not escape CPA obligations – it simply documents informed consent.

Quality Control and Documentation: Suppliers of goods (including doctors acting as suppliers when they provide implants or devices) must follow manufacturers’ instructions and quality standards. Thorough documentation is essential. Maintain complete records of patient interactions, consents, procedures, instructions given, and quality checks (e.g. batch numbers, expiration dates of medicines/devices). This can help demonstrate that services met expected standards or that goods complied with regulations and labeling requirements. Good documentation also supports compliance with s.22 (plain-language information): any explanation of procedures or risks should be in understandable terms[20].

Patient Consent and Communication: Always obtain informed consent for treatments, explaining risks, benefits and alternatives. Although a signed consent cannot waive statutory rights, clear communication remains best practice (ethically and legally) and may mitigate disputes. Use plain, clear language in all patient agreements (as the CPA requires[20]). Ensure any fees are transparently explained, since consumers have a right to price information. If offering any voluntary refund/guarantee for services, that should be documented and compliant with CPA refund provisions.

Claims Handling and Complaints: If a patient raises a complaint under the CPA (e.g. invoking Section 54 or 61), cooperate by offering remedies as stipulated by the Act (repair service or partial refund for defective service; recall defective goods; etc.). Remember that the CPA also gives consumers alternative dispute resolution options (e.g. Consumer Commission, Tribunal) before or during court proceedings. Familiarity with these processes (section 69 of the CPA) can guide early resolution, though a patient is not strictly required to use them before going to court (as affirmed in Pieterse[21]).

Ongoing Education: Keep up with CPA developments and case law (e.g. any appeal decisions or new judgments). Engage legal or professional advice when in doubt. Healthcare industry groups (e.g. SAMED, medical defense organisations) often publish guidelines on CPA compliance. Regulators or trade associations may issue CPA-related advisories, especially concerning medical devices or consumer contracts.

Summary CPA Checklist for Healthcare Providers:

– Recognize patients as “consumers” with CPA rights[2].
– Perform services to the standard the average patient expects[4].
– Supply medical products that are safe, properly labeled and used according to protocol[6].
– Never rely on simple contract disclaimers to escape liability – review all patient agreements for CPA compliance[18][15].
– Ensure informed consent and risk disclosures are given in clear language, but accept that legal liability still follows statutory rules.
– Maintain (and provide patients) information in plain language as required by law[20].
– Carry adequate professional indemnity insurance, explicitly including product liability risks[22].
– If defective products are involved (e.g. implants, drugs), consider regulatory obligations (e.g. recall/safety notices) and respond promptly to any patient injuries.

By following these steps and understanding CPA provisions, healthcare professionals can manage their risk while ensuring compliance with consumer-protection laws. The CPA imposes stricter consumer rights in healthcare transactions, but it does not remove the need for skilled, careful practice. Proper quality control, communication, documentation and insurance remain the cornerstones of minimizing liability under both common law and the CPA.


Sources: Text of the CPA (s.54, s.61, s.48–51 etc.)[4][8][24][10][18][15]; scholarly analysis[22]; and the Pieterse High Court judgment[9][21]. These authorities provide the legal foundation for the above clarifications.

[1] [20] Consumer Protection Act, 2008 (Act No. 68 of 2008) > Chapter 1 : Interpretation, Purpose and Application > Part B : Purpose, policy and application of Act > 5. Application of Act

https://api.acts.co.za/consumer-protection-act-2008/5_application_of_act.php

[2] [3] [22] [23] The Consumer Protection Act: No-fault liability of health care providers

http://www.scielo.org.za/scielo.php?script=sci_arttext&pid=S0256-95742011001100011

[4] [5] [6] [7] [8] Consumer Protection Act, 2008 (Act No. 68 of 2008) > Chapter 2 : Fundamental Consumer Rights > Part H : Right to fair value, good quality and safety > 54. Consumer’s rights to demand quality service

https://api.acts.co.za/consumer-protection-act-2008/54_consumer_s_rights_to_demand_quality_service.php

[9] [21]  Pieterse and Others v Organic Synthesis (Pty) Ltd and Others (61861/2017) [2024] ZAGPPHC 1142 (14 November 2024) – LawLibrary

https://lawlibrary.org.za/akn/za-gp/judgment/zagpphc/2024/1142/eng@2024-11-14

[10] [11] [12] [13] [14] [24] Consumer Protection Act, 2008 (Act No. 68 of 2008) > Chapter 2 : Fundamental Consumer Rights > Part H : Right to fair value, good quality and safety > 61. Liability for damage caused by goods

https://api.acts.co.za/consumer-protection-act-2008/61_liability_for_damage_caused_by_goods.php

[15] Consumer Protection Act, 2008 (Act No. 68 of 2008) > Chapter 2 : Fundamental Consumer Rights > Part G : Right to fair, just and reasonable terms and conditions > 48. Unfair, unreasonable or unjust contract terms

https://api.acts.co.za/consumer-protection-act-2008/48_unfair_unreasonable_or_unjust_contract_terms.php

[16] When can parties exclude liability? | Dunsters Attorneys Cape Town

https://www.dunster.co.za/blog/exclusions-of-liability/

[17] [18] Consumer Protection Act, 2008 (Act No. 68 of 2008) > Chapter 2 : Fundamental Consumer Rights > Part G : Right to fair, just and reasonable terms and conditions > 51. Prohibited transactions, agreements, terms or conditions

https://api.acts.co.za/consumer-protection-act-2008/51_prohibited_transactions_agreements_terms_or_conditions.php

[19]  Consumer Protection Act, 2008 – Citations – LawLibrary

https://lawlibrary.org.za/akn/za/act/2008/68/eng@2015-03-13/provision/chp_2__part_G__sec_49

Maud Letzler

Maud is a senior legal professional with over 18 years’ experience across the healthcare, medical, and insurance sectors. A qualified Legal Counsel and Advocate, she specialises in regulatory compliance, medical malpractice, professional indemnity, and complex litigation. Maud has advised Boards, executive teams, insurers, brokers, and healthcare professionals on risk management, cross-border legal matters, and emerging regulatory developments, including POPIA, GDPR, informed consent, and healthcare legislation. She has represented clinicians before regulatory bodies and courts, acts as a mediator and arbitrator, and is a published author on medical and contract law. Her work is grounded in practical, future-focused legal insight that protects professionals while supporting sustainable business outcomes.