For most of the last three years, South Africa’s cannabis market has run on an unspoken bet: move fast, sell now, and treat compliance as a problem for later. It was, for a while, a good bet. Enforcement was thin, the commercial rulebook didn’t exist, and a displayed SAHPRA cultivation or export licence could be made to look to the public like something it was not: permission to retail cannabis from a shopfront.
That bet is now being called in.
The South African Health Products Regulatory Authority has spent the past several months doing something the market didn’t fully price in: visibly enforcing the law it already has. Recent enforcement activity with SAPS has included cannabis-shop raids in Durban and Pretoria, with broader cannabis-related policing reported elsewhere. SAHPRA has been explicit that a cultivation or export licence is not a public dispensary licence, and that there is no generic “SAHPRA-licensed dispensary” status permitting cannabis sales to the public outside the lawful medicinal access framework. Separately, SAHPRA has warned that some operators are presenting falsified licences altogether. Industry press has estimated the informal grey-zone retail segment to be worth billions of rand, which helps explain why a market of that scale can no longer be treated as regulatory background noise.
There’s a simple economic logic to what’s happening, and it’s usually left implicit, so it’s worth stating plainly. Building a fully licensed, pharmaceutical-grade cannabis operation in South Africa, including cultivation, GMP-aligned manufacturing and packaging, and pharmacy-level dispensing, takes years and tens of millions of rand. Opening a shopfront and calling it a dispensary takes weeks and a lease. For as long as enforcement stayed theoretical, that asymmetry favoured the fast movers: why spend years building the hard version when the easy version sells into the same demand at the same price? Enforcement changes the arithmetic. It doesn’t just raise the cost of getting caught. It raises the value of the licences the slow, expensive route actually produces, because those licences are suddenly one of the few things standing between an operator and a raid.
That distinction is easy to lose in the general noise around “medical cannabis” as a catch-all category, so it’s worth being precise about what the law actually requires. Section 21 of the Medicines and Related Substances Act allows SAHPRA, on application by an authorised healthcare practitioner, to authorise access to an unregistered medicine for a specific patient. For domestic patient access to unregistered cannabis medicines, it remains the practical legal route: patient-specific, practitioner-led and case-by-case. It is not a category label a business can adopt by describing itself as “medical.” It is a named-patient authorisation that has to be requested, granted and fulfilled against that specific patient, every time.
What that means in practice is that a compliant supplier’s job doesn’t end at the loading dock. Every unit that leaves a facility like Bassani Health’s is already tied to a named patient’s Section 21 authorisation before it ships; that part of the chain is, by design, not optional and not discretionary. Where the industry still has a real, acknowledged gap is what happens after that: whether the collection point on the other end actually reserves that entire script for the patient it was authorised for, or whether it quietly finds its way into general stock. SAHPRA’s own recent commentary on prescription “misuse” suggests the regulator is already looking at exactly this handoff point. Supplier compliance is only one half of the chain. The next stress-point is distribution and dispensing, and it looks like the next place enforcement is headed.
Bassani Health has spent several years building the version of this business that doesn’t have a shortcut: a SAHPRA cultivation licence, a Section 22C(1)(b) Manufacture and Packer licence, a Department of Health Manufacturing Pharmacy Licence, and SAPC pharmacy ownership accreditation; the full chain from seed to named-patient supply, held by one operator rather than assembled after the fact through partners and workarounds. That isn’t a marketing claim; it’s a licensing reality that takes years to replicate and can’t be improvised once a regulator starts asking questions.
“Compliance was never the shortcut. It was the moat. We built Bassani for the day the market stopped asking who could move fastest and started asking who could prove every step of the chain.” Michael Stringer, Chief Executive Officer, Bassani Health
The regulatory backdrop makes that patience look better with time, not worse. The Hemp and Cannabis Commercialisation Policy, the framework meant to finally open up a proper commercial layer for cannabis in South Africa, was expected to move toward Cabinet during 2026. Public implementation remains unclear. An overarching Cannabis Bill that would consolidate the current patchwork of legislation is not expected in Parliament before mid-2027. In other words: for at least the next year, and likely longer, for domestic patient access to unregistered cannabis medicines, Section 21 remains not a transitional inconvenience but the practical legal route. The operators who built for that reality early are the ones a slower-than-promised regulatory timeline continues to reward.
That dynamic is already starting to reshape how the market organises itself. Operators who don’t want to spend years replicating a licence stack from scratch are increasingly looking to plug into infrastructure that already exists and is already compliant, rather than build their own. Bassani Health expects to have more to say on that front in the weeks ahead. For now, the clearer signal is the one SAHPRA itself has been sending: the grey zone was never actually free. The bill is just arriving later than some operators priced in.
