South Africa Tightens Direct Marketing Rules in Crackdown on Spam Calls

South Africa has introduced sweeping new rules governing direct marketing, requiring businesses to register before contacting consumers and strengthening protections against unsolicited marketing communications.

The new Consumer Protection Act Amendment Regulations, 2026, published by the Minister of Trade, Industry and Competition, establish a stricter compliance framework aimed at reducing spam calls, text messages and other forms of unwanted direct marketing.

Under the regulations, all organisations and individuals engaged in direct marketing must register with the National Consumer Commission’s (NCC) Opt-Out Registry before conducting marketing activities. Registration must be renewed annually, and businesses are also required to regularly cleanse their marketing databases to remove consumers who have opted out of receiving promotional communications.

The reforms also require marketers to clearly identify themselves in every communication by providing accurate contact details, including their name, electronic and physical addresses. Businesses that fail to register or continue marketing to consumers who have opted out risk breaching the Consumer Protection Act and could face regulatory penalties.

The National Consumer Commission says the new framework is designed to give consumers greater control over how their personal information is used for marketing while improving accountability across the direct marketing industry. Registration of marketers and consumers on the Opt-Out Registry is expected to commence through the NCC’s electronic platform, creating a central mechanism for managing marketing preferences.

Analysis

The amendments represent one of South Africa’s most significant consumer privacy reforms in recent years, shifting direct marketing from a largely reactive opt-out model to a more structured compliance regime.

For businesses, the changes go beyond consumer protection. The regulations introduce ongoing operational obligations—including annual registration, monthly database cleansing and enhanced record-keeping—that require closer coordination between compliance, legal, marketing and data governance teams.

The rules also complement existing obligations under the Protection of Personal Information Act (POPIA), meaning organisations must ensure both consumer protection and data privacy requirements are met when conducting electronic marketing campaigns.

Compliance takeaway

Businesses conducting direct marketing in South Africa should review their marketing governance frameworks, register with the NCC when required, implement regular database cleansing procedures, maintain accurate consent and opt-out records, and ensure all marketing communications comply with both the Consumer Protection Act and POPIA.

The reforms signal a tougher regulatory approach to unsolicited marketing and reinforce the need for strong data governance, consumer consent management and ongoing compliance monitoring.