South Africa’s new personal information laws are here – this is what they mean for annoying marketing calls
After a significant delay, the majority of South Africa’s Protection of Personal Information Act (Popia) finally came into effect this week (1 July 2020).
The legislation aims to promote the protection of personal information processed by public and private bodies and seeks to balance the right to privacy against other rights, such as access to information.
Notably, the Popia will also regulate how South African businesses handle personal information – including direct marketers.
“Direct marketing is often favoured as a popular means of product marketing, especially for start-ups looking to grow their customer base,” said Justine Krige, a director at law firm Cliffe Dekker Hofmeyr.
“It is, however, often also a source of irritation for many consumers as suppliers are increasingly testing the boundaries of what is allowed.”
Krige said that internationally, personal information data breaches are attracting heavy fines by regulators – and that companies like British Airways, Facebook and Yahoo have already attracted fines in the region of $500,000.
With Popi in effect, the regulation of direct marketing in South Africa will become even stricter, she said.
“South African companies better ensure that they get their ducks in a row – whether it’s direct marketing by post, telephone, email or SMS, make sure that your business doesn’t cut any corners.”
Krige outlined how direct marketing is set to change under the new regulations.
Obtain consent
Krige said that direct marketing via any form of electronic communication including automated calling machines, faxes, SMSes and email will no longer be permitted once POPI comes into force, unless the person has either given his/her consent to receive such electronic communication or is an existing customer.
In this case, the person’s consent will be required, she said.
“For this purpose, the responsible party may approach a person whose consent is required, and who has not previously withheld such consent, only once in order to request the consent of such person.”
Krige said that if the person is an existing customer, the responsible party may only send direct marketing electronically to such person if
- The customer’s contact details were obtained in the context of a sale of a product or service;
- For the purpose of direct marketing of similar products or services;
- The customer has been given a reasonable opportunity to object to the direct marketing (i) at the time the personal information was collected; and (ii) on every communication.
“In respect of direct marketing via telephone, post and in person, every person similarly has the right to refuse to accept the unwanted direct marketing and require the supplier to discontinue such activity,” Krige said.
Unsubscribe
The Consumer Protection Act (CPA) and POPI empower consumers to block marketing communications, said Krige.
“All electronic direct marketing communications must contain an ‘unsubscribe’ option. Similarly, physical post boxes containing a direction that ‘no junk mail’ will be accepted cannot be used for direct marketing.”
Because of this companies are going to need to manage their customer databases a lot more effectively, Krige said. She said that this will include:
- Where, how and when was the personal information initially obtained;
- Whether the person is an existing customer and, if so, in respect of what products or services;
- Whether the person has consented to receiving direct marketing;
- Whether the person has unsubscribed from receiving direct marketing.
“In particular, companies are going to need to adopt a vigilant approach in enforcing requests from consumers to discontinue any marketing activities,” she said.
Details
Krige said that all direct marketing communications must contain the sender’s details.
“Any communication for the purpose of direct marketing must contain the details of the identity of the sender or the person on whose behalf the communication has been sent, and an address or other contact details to which the recipient may send a request that such communications cease.”
Contact times
Krige said that specific days and times of days have been prescribed for direct marketing, and a supplier must not engage in any direct marketing directed to a consumer at home for any promotional purpose during prohibited period.
The prohibited time for contacting consumers at home (this includes via telephone, SMS or email) are as follows:
- Sundays or public holidays;
- Saturdays before 09h00 and after 13h00;
- All other days between the hours of 20h00 and 08h00 the following day, except to the extent that the consumer has agreed otherwise.
“A direct marketer is not in breach if it has sent out the direct marketing within the period provided for even if the consumer received the direct marketing outside of the aforementioned period, but the onus to prove that the direct marketing was dispatched during the allowed period rests fully on the direct marketer,” she said.
Read: These are the tech jobs that will be needed in South Africa: minister
Loading ...
