Cold Calling Rules: Cape Town Northern Suburbs
Navigate up to R10M POPIA fines and 2026 CPA Regulations. Master the 4 lawful prospecting routes for agents from Durbanville to Brackenfell.
The Problem
Cold calling remains the default prospecting method for many agents in Durbanville, Welgemoed, Eversdal, Bellville and Brackenfell. Two legal regimes now govern it: the Protection of Personal Information Act (POPIA) and the Consumer Protection Act (CPA) Amendment Regulations, 2026.
This article sets out where the risk sits, and the four routes that remain lawful.
Why the Lightstone-to-Data-Broker Pipeline Is High Risk
Public Records Are Not Phone Numbers
Deeds Registry records are public records, and information derived from a public record may be collected from a source other than the owner (Section 12(2)(a)). A mobile number bought from a commercial data broker is a different source and needs its own legal justification.
The Agency Must Justify the Source
Collection from another source must rest on a Section 12(2) basis. Where an agency relies on legitimate interest, the Information Regulator expects a documented Legitimate Interest Assessment, including a necessity test. The onus is on the agency.
Purchased or shared contact lists are further processing. That processing must comply with Section 15 (compatible purpose) and Section 18 (disclosure of the source to the homeowner).
Consent Is Still Required to Call
Telephone marketing is electronic marketing under Section 69. A lawful source does not remove the need for consent. A homeowner who has not registered a pre-emptive block is not a homeowner who may be called.
Practical position: treat broker-sourced numbers as a risk the agency must be able to defend, and use the four routes below instead.
Live Calls Are Electronic Communication
The Information Regulator's Guidance Note on Direct Marketing lists telephone calls as electronic marketing under Section 69. It reasons that modern calls use Voice over Internet Protocol (VoIP), which stores voice data packets on the network.
The Guidance Note is advisory, and POPIA prevails in any inconsistency. It does show how the Regulator interprets the Act during investigations.
The Four Lawful Routes
Route A: Past Clients (Section 69(3))
An agency may send electronic marketing to an existing client without fresh opt-in consent only when all three conditions are met:
- The contact details were obtained during a completed property transaction.
- The marketing is for the agency's own similar services.
- The client had a free, simple opportunity to opt out at collection and on every later message.
"Similar" is read narrowly: the Guidance Note treats funeral insurance as not similar to clothing retail. It does not address valuations, so confirm with your attorney before relying on this route for valuation offers. A client who was never offered an opt-out at collection cannot be treated as having consented, because silence is not consent. Valuation enquirers who never transacted are not existing clients.
Route B: The Single Consent Approach (Section 69(2)(a))
A marketer may approach an unconsented prospect only once to request consent, provided consent was not previously withheld. The first communication must be the consent request. If the prospect declines or does not answer, no further electronic approach is permitted.
Prefer numbers the homeowner gave directly:
- Show day attendance registers.
- Website valuation widgets and inbound contact forms.
- Details given to the agency in person.
Route C: Non-Electronic Channels
Letterbox drops to identified addresses and in-person canvassing fall under legitimate interest (Section 11(1)(d) or (f)). Complete and file a three-stage Legitimate Interest Assessment (purpose, necessity, balancing) before you start.
Every piece must carry the sender's identity and an address or contact detail for requests to stop (Section 69(4)). Homeowners may object at any time, and the objection must be honoured.
The CPA registration rule below is not limited to electronic channels, so register before any letterbox or canvassing campaign.
Route D: Inbound Lead Generation
The homeowner makes contact. Lawful inbound systems include:
- A net seller proceeds calculator with an un-ticked consent box.
- De-identified suburb reports promoted through letterbox drops and geo-targeted ads.
- WhatsApp confirmation of opt-in, with a time-stamped consent record.
- Suburb-specific local search optimisation.
The Compliant Call Script
The agent must disclose the data source, the agency's name and address, and the purpose of the call (Section 18). To obtain consent by phone, read out the contents of Form 4 and record the call. Form 4 requires the specific service and the channel the homeowner chooses; you must use only that channel.
Good day [Name], my name is [Agent] from [Agency Registered Name]. Under Section 18 of POPIA, I am required to tell you that we obtained your contact details through [source]. Our office is at [Address] and our number is [Phone].
This call is recorded. I am calling only to ask for your consent to send you [specific service] for [suburb]. Which channel do you prefer: WhatsApp, SMS or email? Consent is voluntary. If you decline, we will log your number on our Do-Not-Contact register and will not contact you again. Do you consent?
Objections: Log and Suppress
When a homeowner objects, you must not contact them again (Section 11(4)). The Regulator requires a database of every person who objected to marketing, and the agency must not contact anyone on it (Guidance Note 6.4). A second database must record everyone who withheld consent or objected under Section 69 (Guidance Note 7.3.5).
Deleting these records defeats their purpose: the number returns as a "new prospect" when lists are merged. Keep the suppression record, and remove other data about the person that you no longer need.
CPA 2026 Operating Duties
The Consumer Protection Act Amendment Regulations, 2026 (Government Notice R. 7380, Government Gazette No. 54521) took effect on 15 April 2026, the day they were published, with no transition period. They apply alongside POPIA.
- Registration: register on the National Consumer Commission (NCC) opt-out registry before any direct marketing, and renew annually on the anniversary. Registration uses the Annexure P form: company registration and VAT numbers, directors, a B-BBEE certificate and a valid tax clearance. Register through the NCC eServices portal.
- Cleansing: cleanse your database monthly against the registry, removing everyone who registered a pre-emptive block.
- Blocked consumers: do not market to any consumer who registered a relevant pre-emptive block.
- Sender identification: every electronic communication must let the recipient identify your name, electronic address, physical address and contact number. You must also be identifiable on public platforms.
- Fees (Annexure N): in 2026 the initial registration fee is R2,574.00, the annual renewal fee is R1,930.50 and the cleansing fee is R0.12 per data entry. All three rise each year until at least 2029.
Penalties
POPIA
The Information Regulator may issue an administrative fine of up to R10 million (Section 109). The Minister may adjust that cap. A fine follows an alleged offence under the Act.
Section 107 sets criminal penalties of up to 10 years imprisonment for some offences and up to 12 months for others. Listed offences include obstructing the Regulator and failing to comply with an enforcement or information notice (Section 103).
A Section 69 breach is not itself listed as an offence in Section 107. The usual route is a complaint, an investigation and an enforcement notice. Ignoring that notice is where the criminal exposure arises.
CPA
The NCC may issue compliance notices and refer matters to the National Consumer Tribunal, which may impose administrative fines up to the maximum set in the Consumer Protection Act.
Principal Checklist
- Register the agency on the NCC opt-out registry and diarise annual renewal.
- Schedule monthly list cleansing and budget the per-entry fee.
- Maintain one agency-wide Do-Not-Contact register across all agents and CRMs.
- Record every Form 4 consent call.
- Audit past client lists against the three Section 69(3) conditions.
- Complete a Legitimate Interest Assessment before every letterbox or canvassing campaign.
- Stop using ID-to-phone data broker tools unless an attorney confirms the legal basis.
Disclaimer: This article is general information, not legal advice. Consult a property or privacy attorney before changing your prospecting practice.
Sources
Legislation, Regulations and Regulator Guidance
- Department of Trade, Industry and Competition. Consumer Protection Act Amendment Regulations, 2026. Government Notice R. 7380, Government Gazette No. 54521 (Regulation Gazette No. 11983), 15 April 2026. Available at gpwonline.co.za.
- Information Regulator (South Africa). Guidance Note on Direct Marketing in terms of the Protection of Personal Information Act 4 of 2013 (POPIA). Available at inforegulator.org.za.
- Information Regulator (South Africa). POPIA forms, including Form 1 (objection) and Form 4 (consent).
- Protection of Personal Information Act 4 of 2013: Section 107 (Penalties) and Section 109 (Administrative fines). Sections 11, 12, 15, 18 and 69 are cited as reproduced in the Guidance Note.
- National Consumer Commission. NCC eServices direct marketer registration portal.
Legal Commentary
- Afriwise. Opting Out: The Amendment to the Consumer Protection Act Regulations.
- BSA Law. Changes to the Consumer Protection Act Regulations and What They Mean for Direct Marketers.
Sources accessed 3 October 2026.
Frequently Asked Questions
Only with a lawful consent route. The Information Regulator treats telephone marketing as electronic marketing under Section 69 of POPIA, so you need consent, the single consent approach, or the existing customer exemption. You must also be registered with the National Consumer Commission (NCC).
This is high risk. Deeds records do not contain phone numbers, so the agency must justify the broker as a source, and Sections 15 and 18 apply to purchased lists. Consent is still required to call under Section 69.
Once. Section 69(2)(a) allows one approach to request consent, provided the prospect has not previously withheld it. If the prospect declines or does not answer, no further electronic approach is permitted.
Yes. Register on the NCC opt-out registry before any direct marketing, using the Annexure P form, and renew every year. The requirement is not limited to electronic channels.
Every month, against the registry. In 2026 the cleansing fee is R0.12 per data entry.
Possibly, under Section 69(3), if the details came from a completed transaction, the offer is for your own similar services, and the client had a free opportunity to opt out at collection and on every message. The Guidance Note does not address valuations, so confirm with your attorney.
Yes. Letterbox drops fall under legitimate interest, so complete a Legitimate Interest Assessment first. Each piece must show who sent it and how to ask you to stop. NCC registration also applies.
Stop contacting them (Section 11(4)) and record the objection in your suppression database. Do not delete the record, or the number can return as a new prospect when lists are merged.