There is no POPIA email disclaimer in the text we read. Section 69 of the Protection of Personal Information Act 4 of 2013 does not ask for a footer on every email. It deals with direct marketing by electronic communication, and it names e-mail: the processing of personal information for that purpose is “prohibited” unless the person consented or is a customer who meets set conditions, and each marketing message must identify the sender and give an address to which stop requests can be sent.
This is general information, not legal advice, and we read the sources below on 4 October 2026.
If you came here for a POPIA email disclaimer for ordinary staff email, the short answer is that section 69 is about marketing, not about every message. What your company must show on its letters is a separate matter, covered further down.
The short version on a POPIA email disclaimer
- Section 69(1) prohibits processing personal information for direct marketing by electronic communication, including “SMSs or e-mail”, unless the person consented or is a customer under subsection (3).
- Section 69(4) says any communication for direct marketing must contain the sender’s identity and an address for requests to stop.
- Nothing we read in section 69 calls for a POPIA email disclaimer on non-marketing email. A POPIA email signature with only contact details is not what the section describes.
- We read the Act as gazetted in 2013, hosted by the Information Regulator. We did not check later amendments.
- Ask a South African lawyer or your information officer to approve the final wording of any POPIA email disclaimer.
What we read for this POPIA email disclaimer article
The Information Regulator’s POPIA chapter page for Chapter 8, dated 23 February 2023, lists section 69 with the title “Direct marketing by means of unsolicited electronic communications”. The page it links to for the section did not load for us (it returned “not found”). So we read the section in the Regulator’s own PDF of the Act as published in Government Gazette No. 37067 of 26 November 2013. It says the President assented on 19 November 2013.
Two cautions. First, that PDF is the 2013 text, and we did not check whether any provision has been amended since. Second, an Act’s sections come into force on dates set by proclamation. The Regulator also hosts Proclamation R. 21 of 2020 from Government Gazette No. 43461 of 22 June 2020, which sets 1 July 2020 as the commencement date for sections 55 to 109, a range that includes section 69.
What section 69 says about a POPIA email disclaimer and marketing
The section is headed “Direct marketing by means of unsolicited electronic communications”. In plain words:
- 69(1). Processing personal information “for the purpose of direct marketing by means of any form of electronic communication, including automatic calling machines, facsimile machines, SMSs or e-mail is prohibited” unless the data subject (a) has given consent, or (b) is, subject to subsection (3), a customer of the responsible party.
- 69(2). If consent is needed and the person has not previously withheld it, the responsible party may approach them only once to ask for it, and must ask “in the prescribed manner and form”.
- 69(3). For the customer route, the responsible party must have obtained the contact details “in the context of the sale of a product or service”. It may market only its own “similar products or services”. It must have given the person “a reasonable opportunity to object, free of charge and in a manner free of unnecessary formality”, when the details were collected and on each occasion it communicates for marketing, if the person has not initially refused.
- 69(4). “Any communication for the purpose of direct marketing must contain” (a) “details of the identity of the sender or the person on whose behalf the communication has been sent” and (b) “an address or other contact details to which the recipient may send a request that such communications cease”.
The Act’s definitions in section 1 matter too. “Direct marketing” means “to approach a data subject, either in person or by mail or electronic communication” for the direct or indirect purpose of promoting or offering to supply, in the ordinary course of business, goods or services, or of asking for a donation. “Consent” means “any voluntary, specific and informed expression of will in terms of which permission is given for the processing of personal information”. The definition of personal information lists “e-mail address” among its examples, and covers an identifiable existing juristic person “where it is applicable”.
A table for the POPIA email disclaimer and signature question
| Situation | What section 69 says | Our note |
|---|---|---|
| A marketing email to someone who consented | Allowed under 69(1)(a); must carry sender identity and a stop address under 69(4) | Keep the consent record outside the footer |
| A marketing email to a customer | Allowed only on the 69(3) conditions | Own similar products only; an opt-out chance each time |
| An ordinary reply to a client’s question | Section 69 is about direct marketing | No source we read puts a disclaimer duty here |
| A signature that includes a promotional banner | Not addressed by the text we read | Ask an adviser whether the banner is “direct marketing” under the definition |
We have not read a source that decides whether a promotional line in a signature is “approaching” a person for the purpose of promoting goods or services. That is why the last row of this POPIA email disclaimer table is a question and not an answer.
Another notice duty: collecting personal information
Section 18(1) of the Act says that if personal information is collected, the responsible party “must take reasonably practicable steps to ensure that the data subject is aware of” listed matters. They include the information being collected, “the name and address of the responsible party” and “the purpose for which the information is being collected”.
Section 18(2) says the steps must be taken before collection if the information comes directly from the person, unless they already know. Section 18(1) does not mention email footers, and we read nothing that says a footer meets it. If you collect personal information through a form or by email, ask your information officer or a lawyer how your privacy notice should be given.
A sample POPIA email disclaimer line for marketing email
This is our own wording for a POPIA email disclaimer aimed at marketing messages. It is not tested legal text. Replace the made-up company and addresses.
This is a marketing message from Harbour Homes (Pty) Ltd. You are receiving it because you asked to hear from us. To stop receiving marketing email, write to unsubscribe@harbourhomes.example.
This POPIA email disclaimer names the sender, which fits 69(4)(a), and gives an address for stop requests, which fits 69(4)(b). Whether it is enough for your campaign depends on your consent records and the 69(3) conditions, and no footer line fixes those. Put the POPIA email disclaimer on marketing messages, not on every staff signature. A line saying “to stop receiving marketing email” on an invoice reply is just noise.
For a staff signature, the useful job is consistency. Here is a made-up signature with a company details line, drawn by the emailfooter engine:
|
A profile layout with a company details line. The company and person are made up.
What South African companies must show on letters
This is not POPIA, but it is the footer duty readers usually mean. Section 32(4) of the Companies Act 71 of 2008, as shown by Acts Online (a private legal publisher, so we class it as a secondary source), says every company “must have its name and registration number mentioned in legible characters in all notices and other official publications of the company, including such notices and publications in electronic format”, and “in all letters, delivery notes, invoices, receipts and letters of credit of the company”.
The words “electronic format” attach to notices and official publications. The section as we read it does not name email, and we do not know how it treats a business email. Our article on the company registration number in an email signature covers the sources and the gap. For wider setup, see our guide to business email signatures in South Africa.
Getting the wording onto every message
Once a lawyer has approved a POPIA email disclaimer, the next problem is consistency. The risk with any footer is that it appears on some messages and not others. Our email disclaimer examples article lists wording and the mail-server routes. A tool such as emailfooter lets the company admin set a footer line once for the company’s signatures. Employees install their own by following steps, and nothing is pushed into mailboxes. For the privacy-notice side in the UK and EU, we have a separate GDPR email disclaimer article.
Frequently asked questions
Does POPIA require an email disclaimer?
Not in the section we read. Section 69 covers direct marketing by electronic communication, and requires marketing messages to identify the sender and give a stop address. We found no wording that requires a POPIA email disclaimer on ordinary email.
Does POPIA apply to email marketing?
Section 69(1) names e-mail. Direct marketing by email is prohibited unless the person consented or is a customer on the 69(3) conditions. Ask a South African lawyer how that applies to your lists.
What must a marketing email contain under POPIA?
Section 69(4) says the sender’s identity (or that of the person on whose behalf it is sent) and an address or other contact details for requests to stop.
Is a POPIA email signature different from a normal one?
The text we read does not describe a special signature or a signature-only POPIA email disclaimer. A signature with contact details and a company details line is a design choice. Check section 69’s definitions if it carries promotional content.
Is there a POPIA email disclaimer I can copy?
The marketing line above is our own draft, not an approved text. Take it to a lawyer or your information officer before use.
Keep reading
- GDPR email disclaimer: do you need one? What the rules say: Is a GDPR email disclaimer required? What the UK GDPR text and ICO pages say about privacy information, business emails and footers, plus a sample line.
- Business email signature in South Africa: +27 numbers, registration and VAT lines, and a POPIA-aware opt-out: A business email signature South Africa example with +27 numbers, a registration line, an optional VAT line and a POPIA-aware opt-out for marketing mail.
- Email disclaimer examples: 12 you can adapt, with notes on what each does: Twelve email disclaimer examples grouped by purpose, with length and what each is for, plus how to add one in Google Workspace or Microsoft 365.
- Company registration number in your email signature: where it is required: Company registration number in email signature: what UK, South African, Mauritian, OHADA and Nigerian sources say, which name email, and where we found none.
Make every signature in your company match
emailfooter is a free WordPress plugin. You design the signature once, and each person adds their own details and installs it in their mail app. Prefer not to run a website? emailfooter Managed is the same software, hosted for you.