POPI ACT is not helping

I've been receiving calls this company's regarding my financial status and so forth. When I asked how they got my details they say they are registered under NCR. My question is what's the point of POPI Act if my contacts can be easily accessed without my consent. I called Complaints Department at NCR and spoke to a lady named Linda Maluleke she was of NO assistance to me, NO clear answers the only thing she said was I gave the company my details as if it's my fault, I mean what's the point of having POPI ACT to protect our personal details if they can be easily accessed. Please NCR help protect our personal details and find a way to stop this from continuously happening.