Compliance Reference / 2026 Edition
A free desk reference that maps what South African companies can and cannot do under the three laws that govern cross border outreach: POPIA (the Protection of Personal Information Act) at home, GDPR (the General Data Protection Regulation) in Europe, and CAN-SPAM (the United States commercial email law) in America. One decision tree, side by side channel tables, and an 11 point quick check.
A cold email that is perfectly legal in the United States can earn you a fine in South Africa. The same LinkedIn message that works for a prospect in London might breach POPIA the moment you send it to someone in Johannesburg.
Most companies selling across borders are following one country’s rules by instinct and quietly breaking two others, because nobody ever handed them the map. This cheat sheet is that map: three legal regimes, every major outreach channel, on one reference you can keep on your desk.
Editorial note: this is a marketing compliance reference guide, not legal advice. Laws change and enforcement evolves, and your obligations depend on your specific data and the nature of your communications. Every claim on the sheet is credited to its source (the Acts themselves, regulator guidance and published enforcement records) so you can verify it, but for your own situation please check with a qualified attorney.
What Is Inside
It is built to answer one question fast: for this message, to this person, in this market, what am I actually allowed to do? Six short sections take you from which laws even apply to me to a five minute self-check, with the source cited under every rule so you can verify it yourself.
It opens with a 30 second decision tree. You find your own row (South African company targeting Europe, United States company targeting home, and so on) and it tells you which laws apply and which one to follow when two collide. The golden rule threaded through the whole sheet: when more than one law applies to an outreach activity, follow the strictest one.
Then come the side by side tables, the heart of the reference. Ten outreach channels, from cold email and cold calling to LinkedIn InMail, direct messages, buying lead lists, gated content downloads and emailing existing customers, each one marked allowed, restricted or off limits under POPIA, GDPR and CAN-SPAM. A second set of tables lines up the rules that govern every message: consent model, opt-out timing, unsubscribe requirements, whether a physical address is required, and the maximum penalty in each regime.
After that it gets practical. There is a list of the seven outreach channels that are safe under all three laws at the same time, so you can build a strategy that never trips a border. There is a plain English explainer on legitimate interest, the single most misunderstood idea in B2B (business to business) compliance. There is a United States state by state section, because CAN-SPAM is the federal floor and states like California and Colorado stack stricter rules on top. And it closes with an 11 point quick check you can run in five minutes to find the gaps in your current outreach.
Why It Matters
Stop guessing whose rules apply. Here is exactly what you walk away with.
Who It Is For
B2B (business to business) owners, marketers and sales teams running outreach from South Africa into other markets, and anyone about to send an email or LinkedIn campaign that will land in the EU (European Union) or the US (United States). If you are contacting people across borders and you are not certain whose rules apply, this is built for you.
From LadyBugz Marketing, based in South Africa and working internationally. We build compliant outreach and organic LinkedIn strategies for B2B companies selling across borders, so these are the questions we work through with clients every week.
We compiled this cheat sheet straight from the legislation and regulator guidance, from POPIA Section 69 and the Information Regulator’s 2024 direct marketing note to the GDPR articles, the FTC’s CAN-SPAM guide and recent United States court rulings, with every claim credited to its source so you can check it against the law itself.
Three legal regimes, ten outreach channels, one reference. Download the cheat sheet, keep it close, and know in seconds whether your next email, call or LinkedIn message is allowed in the market you are sending it to.
Free, no strings. The PDF lands in your inbox in seconds, ready to keep on your desk the next time you are not sure whether that message is allowed.
Created by LadyBugz Marketing | noleen@ladybugz.co.za | 081-598-7578 | www.ladybugz.co.za
The B2B marketing agency that delivers organic LinkedIn growth without paid advertising. From impossible to it’s possible.
Roodepoort, South Africa
© 2026 LadyBugz Marketing. All rights reserved.
Powered by LadyBugz