Why Opt-Out Matters
Providing easy, immediate opt-out mechanisms is not just a legal requirement - it is fundamental to maintaining customer trust and protecting your sender reputation. Under Kenya's Data Protection Act, 2019, data subjects have the right to withdraw consent at any time, and this withdrawal must be processed without undue delay.
Failure to honor opt-out requests can result in:
- ODPC Penalties: Fines up to KES 5 million or 1% of annual turnover
- Carrier Blocking: Networks may suspend your Sender ID or API access
- Spam Complaints: High complaint rates degrade delivery rates across all campaigns
- Brand Damage: Customers who cannot easily unsubscribe will publicly complain and damage your reputation
- Legal Liability: Class action lawsuits from affected recipients
Critical Requirement
Every marketing SMS must include clear opt-out instructions. Transactional messages (OTPs, alerts) are exempt but should still provide a contact method for complaints.
Required Keywords
Carriers and regulators expect recognition of multiple opt-out keywords. Configure your system to process all of these:
| Keyword | Variations | Notes |
|---|---|---|
| STOP | STOP ALL, END, CANCEL | Primary keyword recognized by all carriers |
| UNSUBSCRIBE | UNSUB, REMOVE | Common alternative, especially among younger demographics |
| OPTOUT | OPT OUT, NO MORE | Explicit language matching ODPC terminology |
| QUIT | LEAVE, EXIT | Less common but should still be supported |
Best Practice
Use case-insensitive matching and trim whitespace. Users may type "stop ", "STOP!!!", or "unsubscribe" - your system should handle all variations gracefully.
Automation Workflow
Manual opt-out processing is unsustainable and error-prone. Implement this automated workflow:
- Inbound Detection: Monitor incoming messages to your shortcode or virtual number for opt-out keywords in real-time
- Immediate Processing: Upon keyword match, instantly add the number to your suppression list before sending any further messages
- Confirmation Send: Trigger an automated confirmation SMS within 60 seconds acknowledging the opt-out
- Audit Logging: Record the opt-out event with timestamp, phone number, keyword used, and source campaign
- Dashboard Update: Reflect the suppression status immediately in your analytics and contact management tools
- Exclusion Enforcement: Ensure suppressed numbers are excluded from all future sends, including manual uploads and API calls
Suppression Lists
A suppression list is a permanent record of numbers that have opted out. Key principles:
- Permanence: Never remove a number from the suppression list unless the subscriber provides fresh, documented consent through a new double opt-in process
- Cross-Campaign: Suppressions apply globally across all your Sender IDs and campaigns, not per-campaign
- API Integration: Check suppression status via API before every send to prevent accidental messages to opted-out users
- Export Capability: Maintain ability to export suppression lists for ODPC audits or internal compliance reviews
- Retention: Keep suppression records indefinitely. Deleting them creates risk of re-contacting users who explicitly opted out
Data Minimization
Store only the phone number, opt-out timestamp, and keyword used in suppression lists. Do not retain message content or unrelated personal data beyond what is necessary for compliance.
Confirmation Messages
Send an immediate confirmation after processing an opt-out request. Example templates:
- Standard: "You have been unsubscribed from [BRAND] messages. You will no longer receive marketing SMS. Reply JOIN to resubscribe."
- Detailed: "Your opt-out request has been processed. All future marketing messages from [BRAND] will cease. For questions, contact [EMAIL/PHONE]."
- Minimal: "Unsubscribed successfully. No further messages will be sent."
Important: Confirmation messages must be free of charge and should not contain any promotional content. They are purely transactional acknowledgments.
Processing Timeline
| Action | Maximum Timeframe | Regulatory Basis |
|---|---|---|
| Keyword Detection & Suppression | Immediate (real-time) | Carrier requirement + ODPC "without undue delay" |
| Confirmation SMS Sent | Within 60 seconds | Industry best practice |
| Web/Email Opt-Out Processed | Within 24 hours | ODPC guideline for non-SMS channels |
| Data Deletion Request | Within 14 business days | Section 38, Data Protection Act 2019 |
| Complaint Response | Within 7 business days | ODPC complaint handling standard |
Common Violations
Avoid these frequent mistakes that lead to penalties and carrier sanctions:
- Charging for Opt-Out: Never require payment or premium-rate SMS to unsubscribe. Opt-out must always be free.
- Delayed Processing: Sending even one additional message after an opt-out request violates both law and carrier terms.
- Buried Instructions: Placing opt-out language in tiny font or at the end of long messages reduces visibility and increases complaints.
- Re-Subscription Without Consent: Automatically re-adding opted-out numbers after a period of time is illegal. Fresh consent is mandatory.
- Ignoring Non-Standard Keywords: Only recognizing "STOP" while ignoring "UNSUBSCRIBE" or "CANCEL" frustrates users and violates the spirit of easy withdrawal.
- No Confirmation: Failing to acknowledge opt-out requests leaves users uncertain and more likely to file formal complaints.
MacraSMS Features
Our platform includes comprehensive opt-out management tools:
- Auto-Keyword Detection: Real-time processing of STOP, UNSUBSCRIBE, OPTOUT, QUIT and variations across all Sender IDs
- Global Suppression List: Automatic exclusion from all campaigns, API sends, and dashboard broadcasts
- Customizable Confirmations: Template-based confirmation messages with brand personalization
- API Suppression Check: Validate numbers against suppression list before sending via API
- Audit Trail: Complete log of all opt-out events with timestamps and source attribution
- Webhook Notifications: Receive real-time alerts when opt-outs occur for integration with your CRM
- Bulk Upload Exclusion: Automatically filter suppressed numbers from CSV uploads
Need Help Configuring Opt-Out?
Our compliance team can review your current opt-out setup and recommend improvements. Schedule a free audit today.
Talk to Compliance Team