Customer Consent Form Template for South Africa
Generate a bespoke document
What is a Customer Consent Form?
The Customer Consent Form is a critical document required under South African law, particularly the Protection of Personal Information Act (POPIA), for any organization collecting and processing personal information. This document serves as a formal record of explicit consent from customers, detailing how their personal information will be collected, used, stored, and shared. The form must be clear, transparent, and easily understandable, providing customers with sufficient information to make an informed decision. It should be used whenever personal information is collected from customers, whether for service provision, marketing, or other business purposes. The document must comply with various South African regulations, including POPIA, the Consumer Protection Act, and sector-specific legislation where applicable.
About the Customer Consent Form
A Customer Consent Form is your organization's legal foundation for collecting and processing personal information under South African law. This document creates a transparent agreement between you and your customers, clearly outlining what information you'll collect, how you'll use it, and the rights customers have regarding their personal data. Under the Protection of Personal Information Act (POPIA), obtaining explicit consent isn't just good practice—it's a legal requirement that can protect your business from significant penalties.
When do you need this document?
You must use a Customer Consent Form whenever you collect personal information from customers for any business purpose. This includes collecting names, contact details, ID numbers, or financial information for service delivery, marketing campaigns, or customer relationship management. The form is essential when setting up new customer accounts, processing online purchases, conducting market research surveys, or implementing loyalty programs. If you're collecting information from minors under 18, you'll need additional parental or guardian consent. The document is also required when sharing customer information with third-party service providers or when customers sign up for newsletters or promotional communications.
Key legal considerations
Your consent form must meet POPIA's strict requirements for valid consent, which means it must be voluntary, specific, informed, and unambiguous. You cannot bundle consent with terms and conditions or make it a prerequisite for unrelated services. The form must clearly identify your organization as the data controller, specify your lawful basis for processing, and explain customers' rights including access, correction, and deletion of their information. You must also detail data retention periods, security measures, and any international transfers of personal information. Under the Consumer Protection Act, the language must be plain and understandable, avoiding complex legal jargon that could confuse customers about what they're agreeing to.
Legal requirements in South Africa
South African law requires your consent form to include specific mandatory elements under POPIA Section 18. You must provide your organization's contact details, including your Information Officer's information, and clearly state the purpose for which you're collecting personal information. The form must list all types of personal information you'll process, identify any third parties who will receive the information, and explain the consequences of refusing consent. You must inform customers about their right to lodge complaints with the Information Regulator and provide contact details for this authority. If you're processing special personal information like health or biometric data, you need additional safeguards and more detailed explanations. The Electronic Communications and Transactions Act requires that electronic consent mechanisms be clearly identifiable and easily withdrawable, while sector-specific regulations like FAIS may impose additional consent requirements for financial services.
GOVERNING LAW
Applicable law
This Customer Consent Form is drafted to comply with South Africa law. Key legislation includes:
Consumer Protection Act (CPA) 68 of 2008: Protects consumers' rights and requires clear, understandable communication in all consumer agreements and consent forms
Electronic Communications and Transactions Act (ECTA) 25 of 2002: Governs electronic communications and provides for the validity of electronic signatures and consent mechanisms
Constitution of South Africa, Section 14: Establishes the fundamental right to privacy, which underlies all consent and data protection requirements
Financial Advisory and Intermediary Services Act (FAIS) 37 of 2002: Relevant if the consent form relates to financial services, requiring specific disclosures and consent mechanisms
National Health Act 61 of 2003: Applies if the consent form involves medical information or health services, requiring specific consent for handling health data
Promotion of Access to Information Act (PAIA) 2 of 2000: Provides for the right to access personal information held by private and public bodies, which may need to be referenced in consent forms
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it