Direct Messaging in the Age of POPIA

Leveraging the Power of Permission-based Communication

Direct Messaging remains a powerful tool in the dynamic landscape of digital marketing especially for micro, small, and medium-sized enterprises (MSME). However, in today’s data-driven world, regulations like the Protection of Personal Information Act (POPIA) in South Africa play a crucial role in safeguarding consumer privacy and ensuring responsible marketing practices.

The Protection of Personal Information Act (POPIA), implemented in July 2021, is aimed at protecting personal information by regulating how companies, collect, store and use it. The upside to this is that you should not look at it as being a roadblock but rather that gaining explicit consent from users is not just a legal necessity but also a trust building-exercise.

Permission-based communication ensures that MSMEs engage with an audience that’s genuinely interested in your product or services, potentially laying the foundation for lasting relationships.

Non-compliance with POPIA can result in hefty fines, reputational damage and even legal action. This means that you need to understand the implications and ensure that your direct messaging strategies take it into account.

So let’s break this down to ensure you have an understanding and provide some affordable tools that you could explore to assist you with compliance and give you the chance to build brand loyalty with a trusted audience.

Navigating POPIA and the impact on your business

• Data Mapping and Classification: It sounds more complicated than it is. This means that you need to ensure you know what data you’re collecting, how it’s processed and where it’s stored. Classifying your data will help understand the sensitivity and appropriate security measures to be applied.
• Consent Management: POPIA requires you to obtain explicit consent for collecting and processing personal information. You must ensure that your consent forms are clear, easily accessible, and provides users with the option to opt in or out.
• Data Security Measures: Implement security measures to protect personal information stored in CRM systems and restricting access to that information is important.
• Data Subject Rights: POPIA grants individuals certain rights regarding their personal information. You should establish processes to address data subject requests promptly, including the right to access, correct, or delete their information.

Building a Direct Messaging strategy around POPIA

POPIA presents an opportunity for businesses to shift towards a more ethical and sustainable approach to direct messaging. Here are some key steps to build a permission-based strategy:

• Obtain clear and informed consent: Communicate the purpose of the data collection and ensure that user understands how it will be used. You need to obtain explicit consent from the user before sending and SMS, email or any other direct message to the user.
• Personalise your communication: Implement preference centres where subscribers can manage their preferences. This gives them control over the information shared and the type of information they received.
• Audit your lists: Conduct regular audits of your list to ensure that they are up to date and accurate.

Tools to help you meet this requirement

The tool you choose is determined by your needs as a business, the complexity and use of the data and the volume of data you have as a business. In the instance of high complexity and customisation, I would turn to One Trust or Trust Arc or something similar.

For purposes of needing to meet the compliance requirements for MSMEs, several simple and affordable tools can be used to help you meet the POPIA requirements:

Free and Affordable:

• Zoho CRM: A popular CRM platform offering basic data management functionalities. It allows you to segment your contacts, track consent, and manage opt-ins/outs.
• Mailchimp: While primarily an email marketing platform, Mailchimp offers basic data management tools within its “Lists” section. You can manage consent, track opt-ins/outs, and segment your contacts.
• HubSpot: A free CRM with basic data management capabilities, including consent tracking and opt-in/out management. There are many plans available so read through carefully before choosing one.

Guidelines for Direct Marketing Activities under POPIA

By following the below guidelines, businesses conducting direct marketing in South Africa can build trust with consumers and avoid potential legal issues under POPIA. Here are important points to keep in mind

• Consent is key: Always obtain clear and informed consent from individuals before sending them any direct marketing messages, including SMS. Provide easy ways for them to opt in and out.
• Data minimisation: Only collect and store the minimum personal information necessary for your specific direct marketing purpose. Avoid unnecessary data collection.
• Security measures: Implement appropriate security measures to protect personal information collected through your direct marketing activities.
• Transparency and accuracy: Be transparent about how you collect, use, and store personal information. Ensure the information you hold is accurate and up-to-date.
• Opt-out mechanisms: Make it easy for individuals to opt out of receiving direct marketing messages at any time. This should be a simple and readily available option in every communication.
• Record keeping: Maintain records of when and how consent was obtained, as well as how you manage unsubscribe requests.
• Compliance audits: Regularly review your direct marketing practices to ensure compliance with POPIA regulations.

An additional points to think about would be the specific regulations around SMS marketing under POPIA. These differ slightly in comparison to other channels and with character restrictions can make it a bit tricky.

I have outlined some additional considerations below that could be valuable as you navigate the Direct Message space for your business:

• Several online generators can help you create a basic privacy policy for your website outlining your data collection and usage practices for free.
• Be mindful of the specific regulations surrounding SMS marketing under POPIA. These may differ slightly from other forms of direct marketing.
• Use clear and concise language in your direct marketing messages. Avoid misleading or deceptive tactics.
• Personalise your messages as much as possible to improve engagement and build relationships.
• Focus on providing value and building trust with your audience.

I hope the above provides a useful overview of what is expected of all businesses when it comes to Direct Messaging and POPIA. Building relationships are crucial to any business so having an overview of POPIA and what the user expects from you is super important.

Until next time, let’s continue igniting MSME success…