sa-direct-marketing-cli

POPIA s69 + CPA Amendment Regulations 2026 compliant direct-marketing tooling for South African outreach. Ships a CLI and an MCP server (stdio) that do the same job: the monthly NCC opt-out registry cleanse.

Why this exists

The National Consumer Commission (NCC) opt-out registry (https://eservice.thencc.org.za/) went live 15 April 2026. The 2026 Amendment Regulations make it mandatory for direct marketers to:

• register as a direct marketer with the NCC (annual renewal, fee ~ZAR 2,574),

• cleanse their marketing database against the registry monthly, and

• never market to a consumer who registered a pre-emptive block.

The registry has no public API — it is a web portal. So this tool cross- references your active list against a blocklist CSV you export from the portal.

Related MCP server: mcp-easycompliance

Install

npm install
npm run build
npm link            # exposes `sa-dm`

Usage

# Dry run (reports matches, writes nothing)
sa-dm cleanse --log KZN_Outreach_Compliance_Log.xlsx --blocklist ncc-export.csv

# Apply DNC changes (flips matched rows, appends to DNC Register)
sa-dm cleanse --log KZN_Outreach_Compliance_Log.xlsx --blocklist ncc-export.csv --write

# Also supports the MASTER LEADS list (KZN_Plumbers_Master.xlsx style):
sa-dm cleanse --log KZN_Plumbers_Master.xlsx --type leads --blocklist ncc-export.csv --write
#   -> adds a "DNC (Y/N)" column if absent, flips matches, appends a DNC Register tab

The --type switch selects the workbook schema:

• log (default) — the compliance log with Consent & DNC Log + DNC Register tabs

• leads — a master plumbers list (All KZN Plumbers tab); DNC column is created on write

MCP server

node dist/mcp.js

Exposes one tool: cleanse_marketing_list(logPath, blocklistPath, type?, write?). Wire it into Hermes or any MCP client that supports stdio servers. Registered in Hermes as sa-direct-marketing (discovered + enabled).

Compliance notes (not legal advice)

• This automates the mechanical cleanse. The human step — exporting the registry blocklist from the NCC portal and registering as a marketer — remains yours.

• POPIA opt-in consent is still required before any electronic marketing to non-customers; the registry cleanse is an additional obligation, not a substitute.

• Per the 2026 Regulations, a pre-emptive block supersedes earlier consent.

License

MIT