The ward or unit corridor
What goes wrong: a call is answered late and nobody can say how late, because the record is a light that somebody cancelled at a wall. Resolution: presence per room, line along the corridor. Evidence: call-to-arrival time per event, by ward, shift and hour — which is what turns a service-standards claim into a measurement. This is the backbone of a nurse call system with response evidence.
The patient or resident room
What goes wrong: routine checks are recorded at the end of a shift from memory, and an incident later turns on whether a check actually happened. Resolution: presence — one reference point per room is enough, and deliberately so. Evidence: attendance recorded by presence rather than by a signature. Boundary to hold: presence, not position within the room, and never a continuous trace of an occupant in their own home — the Older Persons Act gives a resident of a residential facility an express right to privacy, and POPIA's minimality condition points the same way.
External doors, gates and lift lobbies
What goes wrong: a resident with dementia leaves through a propped-open door, or follows a visitor out. Nothing is pressed and nothing alarms. Resolution: line, at each boundary. Evidence: a timestamped boundary crossing with or without an accompanying staff tag, plus a door-held-open alert to maintenance. This is the core of wander management, and the reason to monitor the exit rather than the person.
The emergency unit and after-hours reception
What goes wrong: a staff member faces an aggressive patient or visitor with no button in reach, and no way to say where they are. Resolution: area — an emergency unit is open-plan and the responder needs a place, not a zone. Evidence: duress alarms with location, response times and a reviewable incident record. Why it matters: regulation 17 of the norms and standards regulations requires systems to protect users, healthcare personnel and property from security threats and risks, and regulation 20 imports the Occupational Health and Safety Act, whose section 8 places a general duty on the employer to provide a safe working environment as far as is reasonably practicable.
Night shift across a quiet building
What goes wrong: one or two staff cover a large area between 22:00 and 05:00, and the gap between something happening and anyone knowing is at its widest. Resolution: presence broadly, line at boundaries. Evidence: an escalation ladder that records who was called, when, and what happened when the first responder did not acknowledge. An alarm nobody owns is an alarm nobody answers.
Mobile equipment: pumps, wheelchairs, monitors, beds
What goes wrong: a shift starts with a search. Meanwhile the maintenance register describes a fleet whose actual locations nobody has verified in months. Resolution: presence per zone — knowing an infusion pump is in ward 3 is operationally sufficient; knowing which corner is not worth the reference points. Evidence: a live register of where each item is, feeding maintenance scheduling and the regulation 13 requirement that medical equipment be available and functional in line with the essential equipment list. This is what most people mean by hospital asset tracking, and it is usually the first project a facility runs because it pays back quickly and touches no personal information at all — our equipment tracking guide covers what to tag and which technology suits each item class. Also see asset tracking for the identification-at-a-checkpoint alternative, which is cheaper where you only need to know that an item passed a point.
The equipment store and the clean utility
What goes wrong: stock and devices leave without a record, and par levels are guesses. Resolution: line at the door, presence inside. Evidence: in-and-out events per item, which is usually enough to end the argument about where things go.
Theatre and procedure rooms
What goes wrong: turnaround time is reported as an average that nobody can reconstruct, and a delayed list has no attributable cause. Resolution: presence per room, line at the corridor. Evidence: occupancy and turnaround intervals measured continuously rather than sampled. Boundary to hold: this measures the room, not the surgeon — a distinction that matters for both POPIA and for whether staff cooperate with the system at all.
Outpatients, waiting halls and queues
What goes wrong: waiting times are estimated from a clipboard sample, if they are measured at all. Resolution: area in the hall, line at the entrance. Evidence: dwell time by zone, continuously — which speaks directly to regulation 22's requirement to monitor waiting times. Boundary to hold: patients are not staff; the case for tagging outpatients is much weaker, and a zone-counting approach without individual identification often answers the question with far less exposure.
Pharmacy, medicine store and vaccine fridges
What goes wrong: a fridge fails overnight, or during an outage, and the loss is discovered in the morning. Resolution: none — this is a temperature problem, not a location problem. Evidence: continuous temperature with an alarm that reaches a person in time to act, and an unbroken record afterwards. This is environmental monitoring, and the honest thing to say is that a location system adds nothing here.
Laundry and linen
What goes wrong: the linen pool shrinks every year and the laundry's invoice cannot be independently verified. Resolution: none — item-level identification at a counting point beats continuous location by a wide margin on cost. Evidence: per-item counts at each custody change. See our linen tracking guide; this is an RFID job, not an RTLS one.
Contractors, agency staff and visitors
What goes wrong: a contractor is somewhere in the building and, in an evacuation, nobody knows where or whether they left. Resolution: line at entry and exit, presence in permitted zones. Evidence: a live on-site roll and an accurate muster list. Boundary to hold: visitors and contractors are data subjects too, and a short retention period plus a clear notice at the desk is the whole of the compliance work here.
Plant rooms, generators and the comms room
What goes wrong: a generator does not start, a UPS battery has aged out, and the discovery happens during the outage rather than before it. Resolution: presence at most, for access records. Evidence: plant status and power monitoring — which is building management territory. In South Africa this is not peripheral: the location system itself, its gateways and its server all need to ride through an outage, which is a design item at survey. See load shedding protection.
Grounds, gardens and the perimeter of a village
What goes wrong: the real boundary of a retirement village is a garden gate or a path, not the front door of a building. Resolution: line at each real boundary. Evidence: boundary crossings outdoors, with equipment specified to survive weather. Practicality: this is where battery-powered reference points earn their place — a five-year cell and a sealed housing on a gatepost, reporting over a long-range radio link, with no trenching across a landscaped site.
The map on one table
| Area |
Failure mode |
Resolution |
Evidence produced |
| Ward / unit corridor | Late call answered, unrecorded | Presence + line | Call-to-arrival time per event |
| Patient / resident room | Checks recorded from memory | Presence only | Attendance by presence |
| External doors, gates, lifts | Unaccompanied exit | Line | Boundary crossing + accompaniment |
| Emergency unit / reception | Staff assaulted, no button in reach | Area | Duress alarm with location |
| Night shift, whole building | Long gap before anyone knows | Presence + line | Escalation ladder record |
| Mobile equipment | Shift starts with a search | Presence | Live location register |
| Equipment store / clean utility | Stock leaves unrecorded | Line + presence | In / out events per item |
| Theatre / procedure rooms | Turnaround unattributable | Presence + line | Occupancy and turnaround intervals |
| Outpatients / waiting hall | Waiting time estimated | Area + line | Dwell time by zone |
| Pharmacy / vaccine fridges | Overnight excursion | None — temperature | Continuous temperature record |
| Laundry and linen | Pool shrinks, billing unverifiable | None — RFID counting | Per-item counts per handover |
| Contractors / visitors | Unknown who is on site | Line + presence | Live roll and muster list |
| Plant / generator / comms room | Backup fails when needed | Presence (access only) | Plant and power status |
| Grounds and village perimeter | Real boundary is outdoors | Line | Outdoor boundary crossings |
Two things this map deliberately does not claim
It is not an argument for covering everything. Read the table again and note how much of it is "presence" and how much is "none". A facility that instruments its boundaries, its corridors and its equipment zones — and leaves the rest alone — has bought the outcomes without buying the surveillance, and that is also the easier system to defend under POPIA's minimality condition.
It is not clinical monitoring. Some wearable tags can sense a pulse or detect that a wearer has not moved, which is useful as a trigger to send someone to look. None of it is a substitute for clinical observation or a medical device, we do not present it as one, and anything offered as clinical measurement in South Africa falls under a different regulatory regime entirely.
Where to go next: nurse call vs location systems if you are still choosing between approaches, the nurse call and staff safety solution for how a project runs, the POPIA guide for the compliance design, or healthcare and retirement living for the wider picture.