South African businesses that use email, SMS or other direct marketing channels should treat list hygiene as an operational priority after the National Consumer Commission launched the National Opt-Out Registry on 7 October 2026.

The registry gives consumers a government-administered way to block unwanted direct marketing communication. The NCC says direct marketers must register and cleanse their marketing lists monthly before running campaigns. Registration for marketers opened on 15 September 2026 and runs until December 2026, followed by a list-cleansing phase from December 2026 to April 2027. Consumer blocking is scheduled to begin from May 2027. Read the NCC announcement via the South African Government.

What marketers should do now

The immediate task is not to wait for May 2027. Businesses should use the registration window to identify every source of contact data, document how permission was obtained and create a reliable process for removing people from future campaigns.

  • Separate consent from general enquiries: a person who downloaded an article, requested a quotation or made a purchase has not automatically agreed to every future marketing message.
  • Record the permission trail: retain the date, channel, wording and purpose connected to an opt-in.
  • Maintain suppression lists: an unsubscribe or objection should stop the relevant communications across teams and platforms.
  • Review old data: imported spreadsheets and dormant contact lists should not be treated as campaign-ready without checking their source and status.

The registry does not replace POPIA duties

The Information Regulator has specifically warned that the new Consumer Protection Act measures do not remove existing POPIA requirements. Its 21 April 2026 statement says unsolicited electronic direct marketing generally requires consent, subject to the customer-related conditions in section 69(3) of POPIA. Read the Information Regulator’s statement.

That distinction matters for growing businesses. A contact may be relevant to a company’s target market but still lack the permission required for a particular electronic campaign. Relevance is not the same as consent.

Turn compliance into a repeatable workflow

For owners and marketing teams, the practical lesson is to connect lead capture, contact management and campaign execution. A shared CRM can store leads and contacts, record consent details and make opt-out status visible before a campaign is sent. Selected contacts can then be assigned to an opt-in invitation, while subscriber lists and nurture sequences remain separate from unverified prospects.

This reduces manual handovers between sales and marketing, but only if the process is maintained. Teams should also nominate an owner for list reviews, test unsubscribe handling and keep a record of changes made during each monthly cleansing cycle.

Businesses reviewing their email process can talk through an email-sequence setup that keeps permission, segmentation and follow-up steps connected. The right system will not create consent where none exists; it can, however, make responsible processes easier to follow consistently.

Explore a connected lead nurturing setup to bring permission records, branded email and customer follow-up into one manageable workflow.