EU Compliance for E-commerce & Retail
EU regulations directly affecting E-commerce & Retail organisations — including obligations, deadlines, and maximum fines. Use our regulation checker to map your exact exposure.
Which EU regulations apply to E-commerce & Retail businesses?
E-commerce & Retail organisations operating in the EU are subject to 9 key regulations, including EAA, ePrivacy, DSA and 6 more. The most significant obligations cover Meet WCAG 2.1 Level AA for digital services; Obtain consent for cookies and tracking. Use the regulation checker to map your exact exposure in under 2 minutes.
- EAA: max fine Per member state — Meet WCAG 2.1 Level AA for digital services
- ePrivacy: max fine Per member state (typically up to €20M) — Obtain consent for cookies and tracking
- DSA: max fine €20M or 6% of global turnover — Remove illegal content upon valid notice
- eIDAS 2.0: max fine Per member state — Accept EU Digital Identity Wallet (very large platforms)
| Regulations applicable | 9 |
| Key regulations | EAA, ePrivacy, DSA |
| Highest fine | €20M or 6% of global turnover |
Regulations that apply to E-commerce & Retail
EAA
The EAA sets accessibility requirements for products and services to ensure people with disabilities can fully participate in the digital economy.
Max fine: Per member state
ePrivacy
The ePrivacy Directive governs electronic communications privacy, covering cookies, email marketing, and confidentiality of communications. Its replacement (ePrivacy Regulation) is pending but the Directive remains law.
Max fine: Per member state (typically up to €20M)
DSA
The DSA creates obligations for online platforms and search engines to tackle illegal content, protect users, and ensure algorithmic transparency. Very large platforms face enhanced obligations.
Max fine: €20M or 6% of global turnover
eIDAS 2.0
eIDAS 2.0 updates the framework for electronic identification and trust services, introducing the EU Digital Identity Wallet. It enables cross-border digital identity verification and expands recognised trust services.
Max fine: Per member state
PLD
The revised PLD modernises liability rules for defective products, extending coverage to software, AI systems, and digital services. Shifts some burden of proof to manufacturers for complex cases.
Max fine: No cap — civil liability for all damage caused
CSRD
CSRD expands mandatory sustainability reporting to large companies and listed SMEs. Companies must report according to European Sustainability Reporting Standards (ESRS) covering environment, social, and governance matters.
Max fine: Per member state (audit-based enforcement)
CS3D
CS3D requires large companies to conduct due diligence on actual and potential adverse impacts on human rights and the environment in their operations and supply chains.
Max fine: At least 5% of net worldwide turnover
Green Claims
The Green Claims Directive requires companies to substantiate and verify environmental claims before using them in marketing, combating greenwashing across the EU market.
Max fine: 4% of annual turnover per member state
EAA
The EAA sets harmonised accessibility requirements across the EU for key products and services, ensuring people with disabilities have equal access to the digital economy and essential services.
Max fine: Per member state
Which regulations apply to your E-commerce & Retail business?
Answer 5 questions and get a personalised compliance map — free.
Run the regulation checkerExplore by regulation
- EU AI Act
- General Data Protection Regulation
- NIS2 Directive
- Cyber Resilience Act
- Digital Operational Resilience Act
- EU Data Act
- European Accessibility Act
- ePrivacy Directive
- Digital Services Act
- Digital Markets Act
- Pay Transparency Directive
- Whistleblower Directive
- Markets in Crypto-Assets Regulation
- eIDAS 2.0 Regulation
- Product Liability Directive (Revised)
- Corporate Sustainability Reporting Directive
- Corporate Sustainability Due Diligence Directive
- Green Claims Directive
- European Accessibility Act
- EU Machinery Regulation
For informational purposes only. This is not legal advice — consult qualified legal counsel.