The EU’s New “Withdrawal Button”: What UK Online Sellers Need to Know

From the 19 June 2026, every business that sells to EU consumers online must give them a simple, digital way to cancel the contract, a so-called “withdrawal button.” The new rules also extend to UK businesses where their products or services target the EU market.

Where does this come from?

EU Directive 2023/2673 is primarily a financial services directive, which amends the Consumer Rights Directive (2011/83/EU) by inserting a new Article 11a. Although that directive was focused on the distance marketing of financial services, Article 11a was deliberately extended to apply to all online distance contracts where a statutory right of withdrawal exists, not just financial services. The principle behind the new law is simple: cancelling a contract should be no harder than entering into one.

When does it catch UK businesses?

Article 11a applies to any business-to-consumer distance contract concluded through an “online interface” (website, mobile app, or other software-based purchasing environment) where a statutory right of withdrawal exists under EU law. Critically, it applies regardless of where the seller is established. A UK company is caught if it directs its commercial activities towards consumers in one or more EU Member States.

The kinds of factors that indicate a UK business is “targeting” EU consumers include:

• offering the website in one or more EU languages (beyond English);
• displaying prices in euros or accepting euro payments;
• publishing delivery options, rates or zones for EU countries;
• advertising to EU audiences (for example through paid search or social media campaigns geo-targeted at EU states); and
• using a country-specific EU domain name (e.g. .de, .fr, .nl).

A UK retailer that, say, lists delivery charges for France and Germany on its shipping page is clearly directing its activities at EU consumers. By contrast, a purely domestic UK business that happens to receive the occasional order from an EU address and ships it as a one-off is likely not “targeting” the EU market in the relevant sense, although the position is not entirely free from doubt and each case will turn on its facts.

What does the withdrawal button actually require?

The new Article 11a mandates a structured, two-step digital withdrawal mechanism:

Step 1: Initiation. The trader must provide a prominently displayed, easily accessible button or link on its online interface, labelled with wording such as “withdraw from contract here” (or a similarly unambiguous equivalent). This must remain continuously available throughout the 14-day statutory withdrawal period.

Step 2: Confirmation. On clicking the button, the consumer must be able to provide or confirm their name, details identifying the contract, and their electronic contact information. They then submit the withdrawal declaration through a confirmation function labelled “confirm withdrawal” (or equivalent). This two-step process is intended to ensure that consumers do not withdraw from a contract by mistake.

Acknowledgement. The trader must then send the consumer an acknowledgement of receipt, typically by email, without undue delay. This should include the content of the withdrawal declaration, as well as the date and time of submission.

Placement and accessibility

While the Directive does not prescribe a particular layout, Germany’s implementation of the measure provides useful practical guidance:

• The withdrawal function should be directly accessible from every subpage of the website (for example, via a persistent hyperlink in the footer or main navigation).
• If placed in the footer, it must be visually distinguishable from other links (such as terms and conditions or the company imprint) through design measures such as contrasting colours or clear placement.
• Consumers must not be required to register, log in, or download an app to access the withdrawal function. A guest customer who purchased without creating an account must be able to withdraw just as easily.

Examples of non-compliance

The following approaches are expressly or implicitly inconsistent with the requirements of Article 11a and are therefore unlikely to comply:

• a PDF cancellation form buried in the terms and conditions;
• an instruction to email a returns address or telephone a helpline;
• requiring the consumer to contact customer service, complete a survey, or navigate retention offers before the withdrawal is processed; and
• labelling the function with vague or exploratory wording (such as “check” or “review your order”) that does not clearly convey the legal act of withdrawal.

Product exemptions

The withdrawal button is only required where a statutory right of withdrawal exists. It does not extend the scope of that right. The existing exemptions under Article 16 of the Consumer Rights Directive continue to apply: bespoke or personalised goods, perishable items, sealed hygiene products that have been unsealed after delivery, sealed audio, video or software that has been unsealed, and goods that have been inseparably mixed with other items after delivery. For most online retailers selling standard consumer goods, however, the bulk of their product range will be applicable.

Does it apply to physical catalogues?

The withdrawal button obligation is specific to contracts concluded through an “online interface.” If a consumer places an order from a physical catalogue by telephone or post, that transaction is not concluded through an online interface and the new digital withdrawal function does not apply (although the consumer’s existing 14-day statutory right of withdrawal continues to apply under the Consumer Rights Directive, as it always has). If, however, the catalogue directs the consumer to order via the website, the resulting online transaction falls within the scope.

Supports existing obligations, not replacing

The new digital withdrawal function supplements existing withdrawal channels. Traders remain free to continue offering cancellation by email, telephone, or post. What they cannot do is rely on those channels alone. If the contract was concluded online, a digital withdrawal mechanism must also be available.

Under UK law, the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (which implemented the original Consumer Rights Directive in the UK) already require businesses to make a model cancellation form available to consumers and to inform them of their cancellation rights before the contract is concluded. The form is set out in Schedule 3 to those Regulations. In practice, however, this requirement is frequently met by including the form or a link within the terms and conditions rather than by building it into the purchasing journey. The EU’s new approach takes matters a step further by requiring the withdrawal mechanism to be embedded in the digital interface itself.

Consequences of non-compliance

There are three key issues that businesses should be aware of if they fail to comply:

• Extended withdrawal period. If the withdrawal button is not provided or does not meet the prescribed requirements, the 14-day withdrawal period does not begin to run. This effectively extends the consumer’s right to cancel the contract for up to 12 months. The commercial implications of this are considerable, as a non-compliant seller could face cancellations on purchases made months earlier.
• Enforcement action. National consumer protection authorities across the EU are empowered to take enforcement action, which may include orders to cease the infringing practice and administrative fines. Depending on the Member State, penalties may reach up to €2 million or 4% of annual turnover. For cross-border infringements, coordinated enforcement under the EU Consumer Protection Cooperation Regulation is also available.
• Competitor and association claims. Competitors and consumer protection associations may bring cease-and-desist proceedings. A tool that has historically been used actively, particularly in Germany.

Will the UK follow suit?

There is currently no indication that the UK intends to introduce an equivalent withdrawal button obligation for domestic consumer contracts. The UK’s existing regime under the Consumer Contracts Regulations 2013 continues to require disclosure of cancellation rights and provision of the model cancellation form, but it does not mandate a digital cancellation function embedded in the website.

That said, the UK has shown a willingness to keep pace with EU consumer protection trends. The Digital Markets, Competition and Consumers Act 2024 introduces new subscription contract rules (expected to come into force in spring 2027, though this date remains subject to confirmation by further secondary legislation) that share much of the same philosophy: making it easier for consumers to exit contracts they no longer want. So, while a UK equivalent of the withdrawal button is not on the immediate horizon, the direction of travel is broadly similar.

In practice, many UK businesses that sell to both UK and EU consumers may find it simpler and more cost-effective to implement the withdrawal button across their entire website rather than trying to distinguish between UK and EU customers. If the functionality needs to be built for EU compliance in any event, extending it to UK consumers is a relatively minor additional step and arguably a good customer-experience decision regardless of the legal obligation.

The broader picture

In our view, this is a welcome development. The principle that consumer contracts should be as easy to cancel as they are to enter into is a sound one. Too often, cancellation processes are made unnecessarily difficult, whether through multi-step forms, obscure contact requirements, or interface designs that discourage consumers from exercising their statutory rights. The new Directive addresses that imbalance directly. For UK online sellers who supply to EU customers, the message is straightforward: check whether you are targeting EU consumers, and if so, ensure that a compliant digital withdrawal function is in place on your website without delay.

Practical steps

To ensure compliance with the new requirements, we recommend that businesses should consider taking the following steps:

• Assess scope: determine whether your business targets EU consumers (delivery zones, pricing, language, advertising).
• Implement the two-step withdrawal function on your website, labelled “withdraw from contract here” and “confirm withdrawal” (or unambiguous equivalents), accessible from every page without requiring login.
• Set up automated acknowledgement emails that confirm the content of the withdrawal declaration and the date and time of submission.
• Update your terms and conditions, returns policy, and privacy notice to reflect the new process.
• Update GDPR documentation (including records of processing activities and retention schedules) to cover the personal data processed through the withdrawal function.
• Consider whether off-the-shelf solutions are available. Shopify, WooCommerce, and several other e-commerce platforms now offer withdrawal-button plug-ins specifically designed for EU Directive 2023/2673 compliance.

If you would like advice on how the new EU withdrawal button rules affect your business, or assistance implementing the necessary changes, please get in touch with Nick Phillips or any member of our Intellectual Property Team.