South Africa’s government has restructured the rules for direct marketing, effective April 15, 2026. Entrepreneurs, estate agents, SMEs and sales-driven businesses must comply with the new legal framework or face fines of up to R1 million or 10 percent of annual turnover, whichever is higher.
The Consumer Protection Act Amendment Regulations 2026, gazetted by the Minister of Trade, Industry and Competition under section 120(1)(a) of the Consumer Protection Act 68 of 2008, do not ban cold calling.
They regulate it, replacing a fragmented, largely unenforceable patchwork of marketer-by-marketer opt-out systems with a centralised, NCC-administered compliance machine that experts say is long overdue and that entrepreneurs ignore at their peril.
At the centre of the new framework is a National Consumer Commission-administered opt-out registry, which replaces the fragmented, marketer-by-marketer opt-out approach previously in place.
Consumers can now register a pre-emptive block on a single, central registry to prevent unwanted electronic communications from all direct marketers, rather than having to opt out individually from each one.
For South Africa’s estimated 2.9 million small and medium-sized businesses, the backbone of an economy where SMEs account for approximately 34 percent of GDP and employ over 60 percent of the formal private sector workforce, the amendments arrive as both a warning and an opportunity.
The entrepreneurs who move quickly to embed compliance into their operations will find themselves competing in a cleaner, more trusted market. Those who don’t will face enforcement proceedings before the National Consumer Tribunal that carry consequences capable of shutting a small business down.
Rowan Terry, Legal Counsel at TPN Credit Bureau, and Clare Laurent of SBL Law, who jointly authored the most comprehensive practitioner analysis of the amendments to date, are unequivocal about the scope of who this affects.
“If you are calling potential sellers, landlords, or buyers, or employing the use of any other methods of direct marketing, you are a direct marketer,” they state. “This triggers a set of ongoing compliance obligations, not just a once-off requirement.”
The obligations are specific, time-bound and non-negotiable. Every direct marketer must now formally register with the National Consumer Commission annually, submitting company registration details, a VAT number, contact information, and supporting documentation including tax clearance certificates and BBBEE certificates.
The prescribed fees are fixed (an initial registration fee of R2,574, an annual renewal fee of R1,930.50 and a database cleansing fee of R0.12 per data entry). Registration is not informal, it requires completion of Annexure P in the prescribed form.
But registration is only the beginning. Businesses must cleanse their databases monthly against the NCC block list. They must not market to any consumer who has registered a pre-emptive block. All electronic communications must clearly identify the agency, including name, electronic address, physical address and contact number. Communications from unidentifiable senders are prohibited.
The monthly cleansing obligation is the operational nerve centre of the new regime and the provision most likely to catch entrepreneurs off-guard.
Unlike POPIA’s annual review cycles, the CPA amendments demand that every marketing contact list be checked against the National Opt-Out Registry every 30 days without exception.
For a sales-driven property agency or financial services business running thousands of contacts, this is not a minor administrative task. It is a recurring compliance function that requires dedicated process, designated responsibility and enforceable internal controls.
In short, responsibility for curbing unsolicited direct marketing has been translated into a functioning compliance machinery anchored by the NCC. For marketers, this demands immediate operational change. For consumers, it finally offers a single, effective mechanism to say, “Do not call me — I’ll call you.”
The enforcement pathway is equally structured. A consumer who receives an unwanted marketing call or message may file a complaint directly with the National Consumer Commission.
The NCC may investigate and issue a compliance notice directing the business to stop the prohibited conduct and take corrective action. If the business fails to comply, the matter escalates to the National Consumer Tribunal for enforcement proceedings and it is at that stage that the financial penalties land.
The Tribunal may impose the greater of R1 million or 10 percent of the offending supplier’s annual turnover. For a small estate agency or fintech startup running lean margins, either figure can be existential.
Terry and Laurent are careful to contextualise one of the most common misconceptions circulating among business owners since the amendments came into effect.
“The common misconception is that consumers must register to be protected,” they note. “That is not correct. Even if a consumer is not on the registry, they can still directly instruct you to stop contacting them and as a direct marketer, you must comply with this request.”
The obligation to immediately honour a direct opt-out request, to record it, remove the contact from the database and cease all future communication applies regardless of whether the consumer has formally registered on the National Opt-Out Registry.
The broader entrepreneurial significance of these amendments extends well beyond the property sector where the Terry-Laurent analysis is primarily focused.
For years, the direct marketing space has been overcrowded, with the new CPA regulations representing a hard reset that levels the playing field between large corporates with dedicated legal and compliance departments and the independent entrepreneurs and SME owners who have historically operated in a grey zone of informal prospecting practices.
The amendments shift the landscape from informal marketing practices to regulated, accountable engagement. For property practitioners and business owners across South Africa, the message is clear: you can still cold-call, but you must register as a direct marketer, cleanse your database monthly and respect both registry blocks and direct opt-out requests.
This amendment doesn’t hinder your business, it strengthens it by aligning your practices with consumer rights and building long-term trust.
For Africa’s entrepreneurial community more broadly, South Africa’s move reflects a continental trend toward formalising and dignifying consumer rights within the commercial ecosystem.
Nigeria enacted its Consumer Protection Framework in 2019. Kenya strengthened its Consumer Protection Act in 2023. Ghana, Rwanda and Mauritius have all moved to modernise consumer protection legislation within the past four years.
South Africa’s 2026 amendments are the most operationally detailed and compliance-intensive iteration of this trend on the continent to date, a signal to entrepreneurs across Africa that the era of informal marketing practices is closing and that the businesses built to last are the ones that earn consumer trust rather than simply pursue consumer data.
The regulations came into immediate effect on April 15. There is no grace period. The compliance clock is already running.
