The Consumer Protection Act: What It Actually Requires From a Small Business

The Consumer Protection Act gets cited constantly in customer disputes, but rarely accurately — both by consumers overstating what it guarantees and by small business owners underestimating what it actually requires of them. Getting the specifics right matters, in both directions.

The core implied warranty every supplier carries

In any transaction supplying goods to a consumer, the CPA implies a warranty — regardless of what any contract says otherwise — that the goods are safe, of good quality, and durable. This isn't something a supplier can contract out of with a "no refunds" sign or a clause buried in terms and conditions; it's a statutory protection that exists independently of what the business's own policy claims.

The right to return defective goods

Where goods fail this standard — genuinely defective, unsafe, or of inferior quality — a consumer can return them within six months of delivery, without penalty, at the supplier's risk and expense. The supplier's obligation on a valid return is to repair, replace, or refund, at the consumer's choice in many circumstances. This is a materially longer and more protective window than many small businesses' own informal "7-day return policy" signage suggests — a business advertising a shorter window for genuinely defective goods is advertising something narrower than what the law actually requires.

The cooling-off period: narrower than most people assume

A five-day cooling-off period, allowing a consumer to cancel without penalty or reason, applies specifically to transactions resulting from direct marketing — where the supplier approached the consumer unsolicited, by mail, email, SMS, or in person, rather than the consumer initiating the purchase themselves. This is a common point of confusion: it is not a general "cooling-off period on every purchase" right. A consumer who walks into a shop and decides to buy something on their own initiative does not automatically get a five-day right to cancel under this specific provision — the trigger is how the transaction came about, not simply that a change of mind occurred afterward.

Refund timing once a return is accepted

Where a cancellation or return is validly made, the supplier is required to return the consumer's payment within 15 business days of receiving the cancellation notice — a genuine deadline, not an open-ended "whenever it's convenient" obligation.

The exemption most small businesses don't know exists

Here's the detail that genuinely surprises many business owners, particularly those selling primarily to other businesses rather than individual consumers: the CPA does not apply to a transaction where the customer is itself a juristic person (a company, close corporation, or similar entity) with an asset value or annual turnover of R2 million or more at the time of the transaction, per the threshold set by government notice. In practice, this means B2B sales to a genuinely substantial business customer fall outside the CPA's consumer-protection framework entirely — the relationship is instead governed by ordinary contract law and whatever terms the parties themselves agreed, not the Act's consumer-specific protections.

This cuts both ways worth understanding clearly: a business selling mainly to individual consumers or small businesses under the R2 million threshold carries the full weight of CPA obligations on those transactions, while the same business's sales to a large corporate customer are not covered by the Act at all. Knowing which category a given customer relationship falls into matters for understanding your actual legal exposure.

What this means practically for a small business

• Don't advertise return terms narrower than the law requires for genuinely defective goods — a "no refunds" or overly restrictive return policy is unenforceable against the CPA's implied warranty regardless of what a sign or receipt states.
• Understand the cooling-off period's actual trigger — it's about how the sale happened (direct marketing) not simply whether the customer changed their mind afterward, and applying it too broadly (or denying it when it genuinely applies) both create real problems.
• Know your actual customer base — a business selling mainly to large corporate clients above the R2 million threshold operates under different legal exposure than one selling to individual consumers or small businesses, and conflating the two leads to either unnecessary caution or genuine non-compliance.
• Process valid returns and refunds within the actual deadlines — the 15-business-day refund window is a real obligation, not a guideline.

Sources: the Consumer Protection Act 68 of 2008 (implied warranty of quality; the six-month return right for defective goods at supplier's cost; the five-day cooling-off period specifically for direct marketing transactions; the 15-business-day refund timeline) and the Minister of Trade and Industry's Government Gazette No. 34181 (1 April 2011), setting the R2 million asset value/annual turnover threshold under section 5(2)(b) above which the Act does not apply to a juristic-person customer. This is general information, not legal advice — a business with a genuine consumer dispute, or uncertain whether a specific customer relationship falls inside or outside the Act's scope, should get advice from an attorney.

A worked example

A small electronics retailer sells a laptop to an individual consumer, who returns it four months later reporting a genuine hardware fault. The retailer's posted policy states "returns accepted within 14 days only" — but because the fault is a genuine quality defect and the return falls within the CPA's six-month window, the retailer's own shorter policy simply doesn't override the statutory right; the consumer is entitled to a repair, replacement or refund regardless of what the till receipt says. The same retailer separately supplies laptops in bulk to a large corporate client with an annual turnover well above R2 million — that relationship falls outside the CPA entirely, governed instead by whatever supply agreement was negotiated between the two businesses.

Frequently asked

Does the CPA apply to services as well as goods? Yes — the Act's consumer protections extend to the supply of services as well as goods, though the specific remedies and provisions relevant to a service (quality of service, cancellation rights) differ somewhat from those specific to physical goods.

Can a consumer return goods simply because they changed their mind, outside a direct marketing transaction? Generally no, under the CPA's cooling-off provisions specifically — outside a direct marketing transaction, a straightforward change of mind isn't automatically covered by the five-day right, though a business may choose to offer a more generous voluntary returns policy beyond what the Act strictly requires.

Does the R2 million threshold apply per transaction or based on the customer's overall business size? The threshold is based on the customer's asset value or annual turnover at the time of the relevant transaction, not the size of any single purchase — a large company making a very small purchase is still assessed against its own overall asset value or turnover, not the transaction value.

What happens if a business refuses a valid CPA return? A consumer whose valid rights are refused can escalate the dispute — including to the National Consumer Commission or through other consumer protection mechanisms — and a business that consistently refuses legitimate returns risks genuine regulatory and reputational consequences beyond the individual dispute itself.

Is a warranty from the manufacturer separate from the CPA's implied warranty? Yes — a manufacturer's or brand's own warranty is a separate, additional protection on top of the CPA's implied statutory warranty, not a substitute for it; a consumer can generally rely on whichever protection is more favourable to their specific situation.

Does the CPA apply to online sales the same way it applies to in-person sales? Yes, broadly — an online purchase initiated by the consumer visiting a website and choosing to buy is generally treated similarly to an in-store purchase for cooling-off purposes, while an unsolicited approach via email or SMS marketing that leads to a sale would trigger the direct-marketing cooling-off provisions specifically.

Can a small business insist a consumer pay for return shipping on a defective item? No — for a genuinely defective, unsafe or inferior-quality item validly returned under the CPA's implied warranty, the return is at the supplier's risk and expense, not the consumer's; requiring the consumer to cover return shipping on a valid defect claim is inconsistent with this obligation.