EU Directive 2023/2673: The Complete Compliance Guide for E-Commerce Stores

Last updated: July 2026 · Applies to: all EU e-commerce stores

EU Directive 2023/2673 — known informally as the "Digital Consumer Withdrawal Directive" — entered into force on 19 June 2026. It upgrades the consumer withdrawal right for online purchases, requiring every e-commerce business that sells to EU consumers to provide a standardised digital mechanism for exercising that right. If your store is not yet compliant, this guide explains exactly what you need to do.

What Directive 2023/2673 Actually Requires

The directive builds on the existing 14-day statutory withdrawal right under the EU Consumer Rights Directive (2011/83/EU) and makes two new requirements mandatory for digital sales channels:

1. A visible “retraction button”— a clearly labelled, one-click mechanism on your website (and in post-purchase emails or order confirmations) that allows the consumer to initiate a withdrawal without having to search for contact details or navigate a multi-step process. The button must use plain language (e.g. “Withdraw from contract” or “Exercise withdrawal right”) and must be accessible for the full 14-day withdrawal period.
2. A hosted withdrawal form — a standardised digital form, hosted on your domain (or a trusted third-party service), that captures the minimum legally required data: consumer identity, the order reference, and the date the consumer wishes to exercise withdrawal. The form must confirm receipt to the consumer immediately and generate a timestamped record that you can produce as evidence in the event of a dispute or regulatory inspection.

Who Does It Apply To?

The directive applies to any trader — regardless of where the business is incorporated — that sells goods, digital content, or services to consumers located in the EU. This includes:

• Shopify, WooCommerce, PrestaShop, Magento, and custom-built e-commerce stores
• SaaS companies offering subscriptions to EU consumers
• Marketplaces that facilitate B2C transactions
• Businesses headquartered outside the EU that actively target EU consumers (i.e. EU-language storefronts, EUR pricing, EU-market shipping)

There are narrow exemptions — notably for certain financial products and some categories of bespoke goods — but the vast majority of e-commerce sales fall within scope. When in doubt, assume you are in scope.

Key Deadlines

Penalties for Non-Compliance

Directive 2023/2673 gives national consumer-protection authorities across all EU member states the power to investigate and fine non-compliant businesses. Enforcement levels vary by country, but the directive sets a floor:

• Fines of up to 4% of annual EU turnover for serious or repeated infringements — the same scale as GDPR.
• Mandatory remediation orders requiring you to implement the retraction button and form within 30 days, with daily fines for non-compliance thereafter.
• Reputational risk: national consumer-protection bodies publish enforcement decisions. A non-compliance finding against your store name is publicly searchable.
• Civil liability: consumers who were denied a proper withdrawal mechanism can seek damages, and class-action consumer-group litigation is explicitly enabled under the directive.

Compliance Checklist

Use this checklist to assess your current status against the directive's requirements:

• A clearly labelled retraction button is visible on product, cart, and order-confirmation pages
• The button is accessible for the full 14-day withdrawal period after purchase
• Button language matches the consumer's locale (e.g. German text for German consumers)
• Clicking the button opens a standardised digital withdrawal form
• The form captures: consumer name, order reference, and requested withdrawal date
• Form submission triggers an immediate automated confirmation to the consumer
• Each submission generates a timestamped record stored securely for ≥3 years
• You can export withdrawal records in PDF or CSV for regulatory inspection
• Your withdrawal policy page links directly to the form
• The withdrawal mechanism has been tested end-to-end in the last 90 days

This guide is provided for informational purposes only and does not constitute legal advice. Consult a qualified legal professional for advice specific to your business. References to Directive 2023/2673 are based on the text published in the EU Official Journal.