Radar: South Africa’s opt-out rules face a 17 October comment deadline

South African businesses have a short window to challenge or clarify the proposed operating rules behind the country's new National Opt-Out Registry. The National Consumer Commission published draft compliance guidelines on 2 October 2026 and invited written comments within 15 days, placing the expected deadline on Saturday, 17 October.

For retailers, banks, insurers, property firms, call centres and digital marketers, the immediate issue is not whether unwanted sales calls are popular. It is how customer databases and campaign systems will have to honour a registered block, and whether fresh consent can revive marketing once a consumer has opted out.

This is the week's Radar item: a comment deadline attached to rules that could alter South Africa's direct-marketing technology stack. Because 17 October falls on a Saturday, organisations should verify the NCC's accepted submission method and not assume an ordinary weekday office will receive late paperwork. The consultation wording is the basis for the date; any explicit extension would need to come from the commission.

A public launch is not the same as consumer access

The NCC and the Department of Trade, Industry and Competition publicly launched the registry on 7 October. The mechanism implements consumers' right under section 11 of the Consumer Protection Act to block approaches made primarily for direct marketing.

The launch does not mean the final consumer-blocking phase is already live. The NCC has described a staged timetable: marketer registration opened on 15 September and runs to the end of December 2026; a transition period for free list cleansing is planned from December through April 2027; and consumer-facing registration of pre-emptive blocks is intended to begin in May 2027.

Those are the regulator's stated milestones, not proof that every component is operational today. The question for the next few months is whether the registry, interfaces, payment processes and guidance are ready when each phase begins.

The intended relief is material. Citing Truecaller's South Africa spam report, the government said consumers received 17.47 billion spam calls in the first half of 2026, 25.2% more than in the comparable period a year earlier. It reported 3.71 billion spam SMSes, an increase of 58.9%. These are figures cited by the government from a third-party report, not independently measured NCC counts.

Monthly cleansing becomes a data-engineering requirement

The draft guidance expects direct marketers to register and then check their contact databases against registered blocks before conducting campaigns. That means lists cannot be treated as static assets exported once and used indefinitely by different agencies.

A marketer must submit relevant records, receive the registry's cleansed output and suppress blocked contacts in calling, messaging, email and other campaign systems. The obligation extends to marketing carried out by third parties on the business's behalf. An outsourced call centre does not remove the originating marketer's responsibility.

The draft describes blocks that can vary by channel, purpose, sector or named marketer, as well as a more general block. That makes a crude universal 'do not contact' field insufficient for organisations that need to record the precise scope of a consumer's choice. The system must avoid both sending a prohibited message and suppressing contacts beyond what the person selected.

Two closely related measures need attention. The rules envisage that a cleansed list is valid for 30 days, although legal analysis has identified draft provisions referring alternatively to one month and 30 days. Those periods are not always identical. More importantly, marketers need a reliable process for what happens when a contact enters a suppression list between the time a campaign is prepared and the time it is sent.

The twelve-cent charge is a small unit with a large question

Legal assessments of the draft guidelines identify a prescribed cleansing fee of 12 cents per consumer whose registered block is identified. That should not be misunderstood as a 12-cent fee for every contact in a marketer's original customer database, and the NCC says a free transition period for cleansing is planned through April 2027.

For high-volume marketing operations, costs and procurement obligations may still be significant. An organisation will need to understand which records attract charges, how the commission counts them, how the charge is invoiced and whether repeated monthly matches generate repeated fees once paid cleansing starts.

The draft also requires marketers to identify themselves clearly in direct marketing. Routine transaction communications, such as an order confirmation or appointment update, are different in purpose from a message trying to sell another product. Adding a sales pitch to a service notification can change the regulatory treatment of that portion of the communication.

For South African software teams, this creates work across customer relationship management tools, contact centres, agency contracts, consent records and audit logs. Compliance will depend on operational evidence that a particular block was respected, rather than on having a privacy policy posted on a website.

The consent dispute regulators need to settle

One of the sharpest points in the consultation is the treatment of consent given by an existing customer. The draft guidelines state that historical consent is displaced when a person registers a relevant block, and that new consent does not automatically override the block unless the consumer removes it.

Law firms reviewing the text have highlighted tension with an exception in Regulation 4(3)(g) concerning existing clients who expressly consent after the regulations begin. The narrow reading is that this provision alters assumptions about whether a block exists, without permitting a company to ignore an actual registered block. Another reading might allow a greater role for later express consent.

That is a legal interpretation question, not a settled court outcome. The distinction matters especially to loyalty programmes, insurers, banks and online retailers whose marketing databases contain records of previous consent. A business can hold a valid service relationship with a customer while still being barred from particular promotional approaches.

The Protection of Personal Information Act remains relevant alongside the Consumer Protection Act. Companies should avoid assuming that satisfying one set of requirements automatically satisfies the other, particularly where records are shared among brands or campaign vendors.

What to watch before Friday and Saturday

The immediate event is the NCC's consultation closing window, followed by a decision on the final wording. Marketer registration is scheduled to continue to the end of December, while the free-cleansing transition and the planned May 2027 consumer phase will test delivery.

The unresolved issues are specific: whether the final guidelines reconcile the consent provisions, how narrowly or broadly block categories must be applied, how 30-day list validity is interpreted and whether the charging and technical interfaces are clear enough for high-volume marketers.

A functioning registry could give consumers a stronger, more centralised way to stop unwanted contact. Whether it does so reliably will depend on those operational details, not the announcement of the launch alone.