We wish to advise members that the National Consumer Commission (NCC) officially launched the National Opt-Out Registry on 7 October 2026, confirming a phased approach to implementation of the new direct-marketing requirements under the Consumer Protection Act (CPA). https://www.youtube.com/live/xISdrhYKv0s?si=Iqh1xh-K_Gs34prF
The phased implementation gives businesses more time to register and prepare their marketing databases and systems for compliance.
- Implementation timetable
The following timelines have been announced:
| Period | Requirement |
| September – December 2026 | Registration of direct marketers with the NCC. |
| December 2026 – April 2027 | Implementation and database-cleansing period, during which cleansing will be available free of charge. |
| 15 April 2027 | Announced commencement of enforcement. |
| May 2027 | Consumer pre-emptive blocks become operational. |
Some clarification is still needed on the precise registration deadline and how the April enforcement date interacts with the May consumer rollout.
- What does this mean for members?
Members who undertake direct marketing, whether through their own sales and marketing teams or external service providers, should prepare for the following requirements:
- Registration: Direct marketers must register with the NCC and renew their registration annually.
- Database cleansing: Marketing databases must be checked against the Registry monthly.
- Consumer opt-outs: Businesses must respect applicable consumer restrictions recorded on the Registry.
- Third party marketing: Businesses using external call centres, marketing agencies or lead providers must ensure that the relevant compliance requirements are met.
- Record keeping: Members should maintain appropriate records of marketing consent, consumer opt-outs and database cleansing activities.
- POPIA remains applicable
It is important to note that the phased implementation of the National Opt-Out Registry does not suspend or replace existing obligations under the Protection of Personal Information Act (POPIA).
Members must continue to ensure that their direct marketing activities comply with POPIA, including the applicable requirements relating to consent, existing customer relationships and electronic direct marketing.
Registration with the NCC and cleansing against the Opt-Out Registry will therefore form an additional compliance requirement rather than a substitute for existing POPIA obligations.
- Recommended next steps
We encourage members to use the implementation period to:
- Identify the legal entities within their organisations that undertake direct marketing and arrange registration with the NCC.
- Review their existing marketing databases, consent records and opt-out procedures.
- Ensure their CRM and marketing systems can accommodate the NCC’s database cleansing and suppression requirements.
- Engage with external sales, telemarketing and lead generation providers regarding their compliance arrangements.
- Prepare to test database cleansing processes during the free implementation period.
The NCC has also published draft compliance guidelines, with comments invited until 17 October 2026. VOASA will consider the guideline and invite any member to provide comment for inclusion in VOASA’s submission on or before 13 October 2027. VOASA will continue to monitor developments and seek clarification on outstanding implementation questions relevant to the industry.
Members can access the NCC’s registration portal at: