The EU Withdrawal Button: What You Must Add to Your Website by 19 June 2026 - and What Happens If You Don't
From 19 June 2026, EU Directive 2023/2673 requires a digital withdrawal button on any website selling to EU consumers. Here is what the rule means, who it applies to, and what to add to your site.
From 19 June 2026, every business selling online to consumers in the European Union must provide a digital withdrawal button on its website. Not a link to a contact form. Not a customer service email address. A clearly labelled button that initiates cancellation directly, in the same digital session, without requiring the customer to do anything else. The requirement comes from EU Directive 2023/2673 and is now in force across all EU member states.
The short answer: if you sell goods, services, or digital content to consumers in the EU through a website or app - and a statutory right of withdrawal applies to those transactions - you are required to have this button in place from 19 June 2026. The rule applies regardless of where your business is registered. UK brands, US brands, and Australian businesses selling to EU consumers are all in scope. Missing the deadline exposes you to fines of up to €2 million or 4% of annual global turnover, and in Germany in particular, active enforcement is expected to begin within weeks of the deadline.
Here is what the requirement involves, who it applies to, and what you need to do.
What is the EU withdrawal button?
EU consumers already hold a 14-day right of withdrawal from most online purchases - the right to cancel a contract and return goods without giving a reason. This has existed under the Consumer Rights Directive 2011/83/EU for years.
What Directive 2023/2673 changes is the mechanics of how that right must be exercised. Previously, a consumer might send an email, fill in a PDF return form, or call a customer service line. Under the new requirement, withdrawing from a contract must be no more burdensome than entering into one. If a customer bought with two clicks, they must be able to cancel with two clicks.
The withdrawal function must:
- Be prominently displayed on the website or app, easily accessible from order or account pages
- Be labelled "Withdraw from contract here" or an equivalent unambiguous phrase
- Remain continuously available throughout the full 14-day withdrawal period
- Lead to a two-step process - the consumer clicks the button, then confirms via a "Confirm withdrawal" step
- Trigger an automatic acknowledgement to the consumer, sent by email or another durable medium
A full HTML button is not strictly required - a clearly labelled link that meets the accessibility and labelling criteria is acceptable. What is not acceptable is a process that sends the customer to a contact form, an email address, or a telephone number.
Does this apply to UK and US brands?
Yes. This is the point most non-EU sellers miss.
The directive applies to any business that concludes online contracts with EU consumers, regardless of where the business is incorporated. A UK brand with a DTC Shopify store serving German customers, a US brand with a French ecommerce site, an Australian business taking orders from Dutch consumers - all are in scope if a statutory right of withdrawal applies to those transactions.
The relevant test is the destination, not the origin of the business. If you target EU consumers and they purchase through your website or app, you are subject to this requirement.
We have seen this pattern repeat across every compliance area in EU market entry. A US electronics brand we worked with had spent approximately £100,000 attempting to enter UK and EU markets before they engaged us - not because the product was wrong, but because the regulatory infrastructure was incomplete. VAT was incorrectly structured, EPR compliance was missing, and the Amazon account was eventually suspended. The withdrawal button is a different kind of obligation - it applies to a brand's own website rather than a marketplace - but the underlying pattern is identical: a rule that applies the moment your product reaches an EU consumer, whether or not you knew about it.
The Taylor Wessing analysis of Directive 2023/2673 notes that "experience with the German 2-click-cancellation law shows that formal implementation errors are most likely to be identified and pursued shortly after 19 June 2026" - a useful frame for how seriously to treat this deadline.
What are the exemptions?
Not every online transaction is in scope. The following categories are typically excluded:
- Contracts for perishable goods (fresh food, flowers)
- Bespoke or custom-made goods
- Sealed goods that cannot be returned for health or hygiene reasons once opened
- Hotel and accommodation bookings for a specific date
- Transport tickets for specific travel dates
- Digital content or services where the consumer has expressly waived the right of withdrawal before delivery begins
The exemptions are narrower than most businesses assume. Any brand selling physical goods through its own DTC website to EU consumers will almost always be in scope for at least part of its product range. If even some of what you sell carries a right of withdrawal, you need the function for those transactions.
What your website must include
A compliant withdrawal function is more than adding a button to a product page. It requires front-end and back-end work.
Front end:
- A clearly labelled button or link on account, order history, or order confirmation pages
- A confirmation step after the initial click ("Confirm withdrawal")
- Appropriate wording - "Withdraw from contract here" or an unambiguous equivalent
Back end:
- A mechanism to attribute the withdrawal to a specific customer and contract
- Automated email acknowledgement of the withdrawal, sent promptly to the consumer
- GDPR-compliant processing and storage of the withdrawal record, with accurate timestamping
- Integration with your order management, fulfilment, and customer service systems so the withdrawal is actioned correctly
Platform-specific notes:
For Shopify stores, the Shopify App Store contains several compliance tools built specifically for Directive 2023/2673. One confirmed option is the EU Withdrawal Button app (apps.shopify.com/eu-withdrawal), which enables a compliant withdrawal form through the Theme Editor. Several alternatives are also available in the App Store. For WooCommerce stores, headless builds, or custom checkout environments, the implementation requires developer time - typically a half-day of work, but it needs to be scheduled and tested. If your store runs on a major hosted platform, check whether your platform has released compliance guidance or tooling ahead of the deadline.
For marketplace-only sellers (Amazon, eBay) where you do not operate your own consumer-facing website, the directive applies to online interfaces you control - so the marketplace platform itself may handle the consumer-facing withdrawal mechanism. Check the platform's seller guidance for the current position. Any separate DTC website you run must comply independently.
What are the penalties for non-compliance?
Fines for infringements of Directive 2023/2673 can reach €2 million or 4% of annual global turnover, whichever is higher. Greenberg Traurig, in their May 2026 analysis of the directive, stated: "Failure to comply with the new requirements by June 19, 2026, may result in cease-and-desist actions under the Unfair Trades Act (UWG) and/or fines of up to two million Euros or 4% of annual turnover."
In Germany - which was the driving force behind this legislation - enforcement does not wait for a government regulator. Consumer protection associations (Verbraucherzentrale and similar bodies) have legal standing to issue warning letters (Abmahnungen) directly to non-compliant businesses, including businesses based outside Germany. These letters carry legal weight, demand that you sign a cease-and-desist declaration, and can be followed by injunctions.
The withdrawal button requirement is modelled on the German Kündigungsbutton - a cancellation button for subscription services introduced in Germany in 2022. That experience established the enforcement pattern: consumer protection associations monitor new requirements closely, test websites shortly after a deadline comes into force, and pursue formal errors aggressively. Germany is the highest-risk jurisdiction for non-compliance enforcement, but it is not the only one. The Netherlands and Austria have also been active in pursuing ecommerce compliance failures.
Germany is the largest ecommerce market in continental Europe, with B2C ecommerce revenue of approximately $70 billion in 2025 (ResearchAndMarkets Q4 2025 Databook). For any brand selling at volume into Germany, this is a concrete operational risk rather than a theoretical one.
What you should do today
If you have not yet implemented the withdrawal button and you sell online to EU consumers, the steps are:
- Confirm whether you are in scope. Are you concluding B2C contracts via a website or app with EU consumers? Do those contracts carry a statutory right of withdrawal? If yes to both, you are in scope.
- Check your platform. Most major ecommerce platforms released compliance guidance or tooling ahead of the deadline. Start there before engaging a developer.
- Review your exemptions. If you sell a mix of standard and exempt goods, you need the button for the non-exempt transactions. Exemptions in one part of your range do not remove the obligation across the rest.
- Address the GDPR dimension. The withdrawal record must be processed and stored compliantly. Timestamping and data attribution are not optional.
- Get legal advice if you are uncertain. This article sets out the regulatory framework. It does not replace specific legal advice on your situation, your contracts, or your jurisdiction mix.
If you are planning EU market entry and have not yet launched, build the withdrawal function into your checkout specification before you go live. It costs significantly less to design it in from the start than to retrofit it once you are trading - and compliance from day one removes one category of risk entirely.
For established brands already active in EU markets: check every consumer-facing channel where an order could be placed - your DTC site, any marketplace where you manage your own storefront - and confirm whether a compliant withdrawal function exists and works correctly.
The deadline has passed. The question now is not whether to comply. It is how quickly you can get there.
For guidance on structuring a compliant EU market entry - including VAT registration, EPR compliance, GPSR responsible person requirements, and marketplace setup - contact Scale With.
Frequently Asked Questions
Does the EU withdrawal button apply to UK businesses?
Yes. Directive 2023/2673 applies to any business selling to EU consumers through an online interface, regardless of where the business is based. A UK brand with a Shopify store serving customers in Germany, France, or the Netherlands must provide the withdrawal function for those transactions if a statutory right of withdrawal applies.
What exactly must the EU withdrawal button say?
The label must read "Withdraw from contract here" or use an equivalent, unambiguous phrase. The button or link must be prominently displayed, easily accessible from order or account pages, and available throughout the full 14-day withdrawal period. After clicking, the consumer must be shown a confirmation step before the withdrawal is finalised.
What are the fines for not having the EU withdrawal button?
Fines can reach €2 million or 4% of annual global turnover, whichever is higher. In Germany, consumer protection associations can issue warning letters and seek injunctions directly - without waiting for a government regulator. Enforcement is expected to begin within weeks of the 19 June 2026 deadline.
Does the EU withdrawal button apply to Amazon sellers?
For sellers trading through Amazon's marketplace, Amazon controls the consumer interface and handles withdrawal through its own returns system. If you only sell via Amazon and have no direct DTC website, the button requirement does not apply to that channel. However, if you run a brand website or DTC store alongside your Amazon presence, that site must comply independently.
Is this the same as the UK subscription rule changes?
No. These are separate pieces of legislation. The EU withdrawal button under Directive 2023/2673 applies from 19 June 2026 to distance contracts across goods, services, and digital content - not just subscriptions. The UK's Digital Markets, Competition and Consumers Act 2024 introduces separate rules for auto-renewing subscription contracts in the UK, with commencement expected in spring 2027. If you sell subscriptions to both UK and EU consumers, you are facing two distinct compliance obligations on different timelines.
About the author
James Wakely is co-founder of Scale With and a fractional COO and CRO working with physical product brands. His background is in operational infrastructure, sourcing and supply chain design, margin analysis, and commercial systems. He works across the full operational landscape, from 3PL selection and inventory management to EU compliance onboarding and financial modelling, bringing that experience directly to Scale With client engagements.
View LinkedIn profile