Online shop obligations calendar 2026 and 2027
Thirteen dates that change what an online shop selling to consumers in the EU has to do. Each one says whom it concerns, names the article of the law and links to the official text.
We read each act in the Official Journal of the EU and on Slov-lex on 20 October 2026. This is not legal advice.
The free check looks for three of these rules and also shows whether shopping agents can read your product data. No email needed.
Already in force on 20 October 2026
-
Safety details in every online offer
Who: Shops that sell consumer products.
Each offer shows the name and the postal and electronic address of the manufacturer, the responsible person in the EU when the manufacturer is outside the EU, a picture and an identifier of the product, and its warnings or safety information.
Source: Regulation (EU) 2023/988 (General Product Safety Regulation), Art. 19 and Art. 52
-
Accessible online shops
Who: Shops that sell to consumers online. Micro-enterprises that provide services (fewer than 10 people and at most 2 million EUR in turnover or balance sheet) are exempt.
The shop, as an e-commerce service, has to meet the accessibility requirements of the European Accessibility Act.
Source: Directive (EU) 2019/882 (European Accessibility Act), Art. 2(2), Art. 4(5) and Art. 31(2)
-
Withdrawal function
Who: Shops where consumers can withdraw from contracts made online.
A function labelled “withdraw from contract here” or with equally clear words, available for the whole withdrawal period, a “confirm withdrawal” step and an acknowledgement with the date and time for the customer.
Source: Directive 2011/83/EU, Art. 11a, inserted by Directive (EU) 2023/2673 (Art. 1(3) and Art. 2(1))
-
Saying when people deal with AI
Who: Shops that use an AI chat or publish AI images or videos that look real.
The provider of an AI chat has to make sure that people know they are talking to an AI. Whoever publishes a deepfake image or video has to disclose that AI generated or changed it.
Source: Regulation (EU) 2024/1689 (AI Act), Art. 50(1), Art. 50(4) and Art. 113
-
New EU packaging rules
Who: Shops that ship goods in packaging.
The packaging regulation applies. A shop that ships directly to end users in another EU country can count there as the producer of the packaging. Some duties come later, such as at most 50 % empty space in e-commerce packaging, from 2030 at the earliest.
Source: Regulation (EU) 2025/40 on packaging and packaging waste, Art. 3(15), Art. 24(1) and Art. 71
-
Reporting exploited vulnerabilities
Who: Manufacturers of products with digital elements, such as connected devices or software, also for products already on the market.
A manufacturer has to report an actively exploited vulnerability in its product to the national CSIRT and to ENISA through the single reporting platform, with an early warning within 24 hours.
Source: Regulation (EU) 2024/2847 (Cyber Resilience Act), Art. 14, Art. 69(3) and Art. 71(2)
-
Legal guarantee notice, and no generic green claims
Who: Shops that sell to consumers.
Shops that sell goods show the harmonised EU notice “Legal guarantee”. Banned: generic environmental claims without recognised excellent environmental performance, sustainability labels that are neither based on a certification scheme nor set by public authorities, and claims of a neutral, reduced or positive climate impact that rest on offsetting emissions.
Source: Directive (EU) 2024/825, Art. 1, Art. 2 and Art. 4(1); Implementing Regulation (EU) 2025/1960, Annex I and Art. 3
Later in 2026
-
New product liability rules
Who: Everyone who sells products, software included.
For products placed on the market after 9 December 2026: when no manufacturer or importer in the EU can be identified, the shop that sold the product is liable unless it names one of them, or its own supplier, within one month of the injured person’s request.
-
Deforestation-free products, large and medium companies
Who: Companies that place on the EU market or export products of cattle, cocoa, coffee, oil palm, rubber, soya or wood listed in Annex I.
The products must be deforestation-free, produced legally and covered by a due diligence statement. Micro and small companies established by 31 December 2024 follow on 30 June 2027, except for timber products covered by the earlier timber regulation.
Source: Regulation (EU) 2023/1115 (deforestation), Art. 3 and Art. 38; Regulation (EU) 2025/2650 (the dates); Delegated Regulation (EU) 2026/2102 (products in Annex I)
2027
-
Slovakia: e-invoices between businesses
Who: VAT payers in Slovakia that supply goods or services to businesses in Slovakia.
Invoices for these domestic supplies are issued as structured e-invoices, and whoever receives such a supply has to be able to receive e-invoices through a delivery service.
Source: Slovak Act No. 385/2025 Coll.: § 85o(2) and § 71(5) of the VAT Act No. 222/2004 Coll.
-
Replaceable portable batteries
Who: Whoever places products with built-in portable batteries on the EU market, under their own brand or as an importer.
The batteries must be readily removable and replaceable by the end user, and instructions and safety information on removing and replacing them must be available online.
Source: Regulation (EU) 2023/1542 concerning batteries, Art. 11 and Art. 96(2)
-
Deforestation-free products, micro and small companies
Who: Micro and small companies established by 31 December 2024 (except timber products covered by the earlier timber regulation).
The same duties as for large and medium companies since 30 December 2026.
Source: Regulation (EU) 2023/1115 (deforestation), Art. 38(3); Regulation (EU) 2025/2650 (the dates)
-
The Cyber Resilience Act fully applies
Who: Shops that sell products with digital elements, such as smart devices or software.
Products with digital elements placed on the market from this date carry CE marking under the Act. Before selling one, a distributor checks the CE marking and that the manufacturer and the importer have provided the required documents.
Source: Regulation (EU) 2024/2847 (Cyber Resilience Act), Art. 20, Art. 30, Art. 69(2) and Art. 71(2)
Agentic Product Check Pro for Shopify: a weekly summary of what changed
Pro in our Shopify app checks every new or changed product, checks your whole catalog every week and shows what changed since the last check. After Shopify approves the app, we plan to add these three EU checks to that weekly check.
The app is waiting for Shopify’s review and we do not know when it will be approved.
The app is available in the Shopify App Store. See Agentic Product Check
9.99 USD a month, billed through Shopify. The free check on this page stays free.
You are on the waitlist.
We will write once, when Pro can be started.
Questions
Does every date apply to my shop?
No. Each entry says whom it concerns. Some apply only to manufacturers, only to goods with batteries or digital elements, or only in Slovakia. For your own case, read the article or ask an adviser.
Can your free check confirm that my shop complies?
No. It looks for three of these rules on your public pages: the withdrawal function, the notice on the legal guarantee and generic environmental claims in product texts. It says what it found or did not find, with the article of the law, and leaves the rest to a manual check.
Where do the dates come from?
From the acts themselves in the Official Journal of the European Union, read through EUR-Lex, and from Slov-lex for Slovak laws. Later acts can change a date, so each entry links to its source.