On 7 October 2026, Trade, Industry and Competition Minister Parks Tau and the National Consumer Commission (NCC) launched a National Opt-Out Registry for unwanted direct marketing calls and SMSes. The move answers a measurable problem: Truecaller's 2026 spam report, as relayed in the government's own announcement, counts about 17.47 billion spam calls in South Africa in the first half of 2026, up 25.2% year on year, plus 3.71 billion spam SMSes, up 58.9%.
The strongest case for the registry
The case for acting is real. Spam calls are not a mere irritation: they are the delivery channel for fraud, and a country receiving billions of them in six months is imposing a genuine tax on attention, trust in the phone network and, for vulnerable people, money. Section 11 of the Consumer Protection Act already gives consumers the right to refuse unwanted direct marketing, but a right that must be exercised one company at a time, after the call has already happened, is weak in practice. A single, free, government-run place to say "no" shifts the burden from the consumer to the marketer. That is a legitimate and proportionate design principle, and it deserves credit.
What the registry actually does
According to the government announcement, the registry is built on the Consumer Protection Act Amendment Regulations, 2026. Direct marketers must register and renew annually, and must cleanse their lists against the registry monthly before running any campaign. Unregistered marketers may not contact consumers for direct marketing. The rollout runs in phases: marketer registration from 15 September to December 2026, list cleansing from December 2026 to April 2027, and consumer registration from May 2027.
Crucially, the registry does not replace consent. Reporting on the launch quotes NCC Acting Commissioner Hardin Ratshisusu saying every direct marketer still requires the consent of data subjects even if they are not on the registry. That tracks section 69 of the Protection of Personal Information Act (POPIA), which prohibits electronic direct marketing without consent, allows a prospect to be approached only once to request it, and carves out existing customers who were offered an opt-out at the time their details were collected. South Africa therefore now has two layers: an opt-in rule for prospects under POPIA, and an opt-out switch under consumer law.
Where the design is sound
The monthly list-cleansing duty is the most promising element. It converts a diffuse right into a mechanical compliance task that legitimate call centres, banks and retailers can automate, and it gives the NCC an auditable trail: a marketer either checked the list or did not. Requiring communications to be traceable to a named marketer with an address and contact number also helps, because the biggest enforcement obstacle in spam is anonymity. A registry that is free for consumers and does not ban marketing outright keeps the regulation aimed at the harm, not at an entire legitimate industry. That is consistent with proportionate, evidence-based regulation.
Where it may fall short
The central weakness is that a registry binds only those who already intend to comply. The firms most likely to register, cleanse and renew are the established, identifiable businesses that were already subject to POPIA and the CPA. The firms generating the bulk of the 17.47 billion calls are, by the nature of the problem, unlikely to submit to monthly cleansing: spoofed numbers, offshore autodialers and scam operations do not file annual registrations. Honest marketers will bear new compliance costs, while the scale of spam felt by consumers may barely move.
There is also a layering concern. A business now faces consent rules under POPIA, a right to refuse under CPA section 11, and a registry obligation under the new regulations, administered by different bodies. The government's announcement does not spell out penalties beyond treating non-compliance as a contravention of section 11. Without clear, published sanctions and a credible enforcement record, the registry risks becoming a paper compliance exercise, which is the usual fate of do-not-call lists that lack teeth.
Small South African firms deserve attention too. A shop that texts its own existing customers under POPIA's customer exception should not have its basic operations swamped by paperwork designed for industrial call centres. Guidance that distinguishes these cases will matter, and the NCC has said it intends to publish guidance for both consumers and marketers ahead of the May 2027 consumer launch.
What would make it work
Three things would improve outcomes without adding burdens on lawful businesses. First, publish enforcement data: number of marketers registered, audits conducted and sanctions imposed, so the policy can be judged on results rather than announcements. Second, pair the registry with network-level measures, such as caller-ID authentication and cooperation with mobile operators, because blocking spam at the carrier tackles the unregistered callers that a list cannot reach. Third, keep the compliance process cheap and digital so that small businesses can comply without legal advice.
The registry is a reasonable and modest step, and the free consumer sign-up from May 2027 will be a genuine convenience. But success should be measured by whether the volume of spam declines, not by how many marketers register. If the figure remains near 17 billion calls every six months a year from now, the lesson will be that the problem lay with the callers who were never going to register.