---
title: "POPIA"
description: "POPIA (the Protection of Personal Information Act) is South Africa's data protection law, enforced by the Information Regulator; section 69 restricts direct marketing by electronic communication, including SMS."
canonical: "https://omnichannels.ai/glossary/popia/"
language: "en"
updated: "2026-11-06"
publisher: "BroadNet Technologies"
brand: "OmniChannels.ai"
---

# POPIA

Canonical: https://omnichannels.ai/glossary/popia/
Language: en
Publisher: OmniChannels.ai by BroadNet Technologies

**Definition:** POPIA (the Protection of Personal Information Act) is South Africa's data protection law, enforced by the Information Regulator; section 69 restricts direct marketing by electronic communication, including SMS.

Section 69 prohibits processing personal information for direct marketing by electronic communication, including SMS, unless the person has consented or is your customer under narrow conditions. You may approach a person whose consent is required only once to ask for it, and only if they have not previously refused. The request must follow the prescribed form.

The existing-customer route needs three things: you obtained the details in the sale of a product or service, the marketing is for your own similar products or services, and the person was given a reasonable, free and easy chance to object when you collected the details and with each message. Every direct marketing message must also carry the sender's identity and an address or number where the person can ask for it to stop.

POPIA sits alongside other rules. The Consumer Protection Act regulation bars direct marketing to consumers at home on Sundays and public holidays, on Saturdays before 09:00 or after 13:00, and on other days from 20:00 to 08:00. The WASPA Code of Conduct, an industry code binding members and their clients, applies similar windows and requires members to honour STOP requests for marketing.

Do not buy lists, and do not send a second request after a refusal. Our regulation data says to keep timestamped consent records for at least 12 months. This entry is general information, not legal advice; confirm requirements with South African counsel.

## Sources

- [Protection of Personal Information Act, section 69: direct marketing by means of unsolicited electronic communications](https://popia.co.za/section-69-direct-marketing-by-means-of-unsolicited-electronic-communications/)
- [Information Regulator, South Africa](https://inforegulator.org.za/)
- [WASPA Code of Conduct, version 17.15](https://waspa.org.za/wp-content/uploads/2026/09/WASPA-Code-of-Conduct-17.15-clean.pdf)