3 2026 e-commerce laws are already affecting your PrestaShop store

Three laws are changing the game for European e-commerce within eight weeks. The online withdrawal button has applied since June 19. Chatbot transparency has been mandatory since August 2, under penalty of a fine that can reach up to €15 million. The packaging regulation takes effect on August 12, with no grace period. Each one targets a specific point in the customer journey: after-sales, the conversational relationship, the parcel itself. Here, law by law, is what applies to your store and how to get compliant before the next inspection.

• The withdrawal button, mandatory since June 19, 2026
• Chatbot transparency, mandatory since August 2, 2026
• The packaging regulation (PPWR), applicable since August 12, 2026

1. Your store must have a withdrawal button

Since June 19, 2026, a PDF form tucked into the terms and conditions or a customer service email address is no longer enough. Ordinance No. 2026-2 of January 5, 2026 requires a withdrawal feature accessible directly from the sales interface: online store, mobile app, or marketplace. If your store sells to individuals, the customer must be able to cancel their purchase as easily as they made it, and immediately receive an automatic acknowledgment of receipt.

The text transposes European directive (EU) 2023/2673 and amends Article L.221-21 of the French Consumer Code. The withdrawal period remains set at 14 days: what changes is how it’s exercised, not the right itself. The full text of the ordinance is available on Légifrance.

What to check on your store

• Direct access to the withdrawal button from the customer account area, with no need to search through the terms and conditions
• An automatic, time-stamped acknowledgment of receipt, sent as soon as the request is made
• Pre-contractual information on the existence and location of the button, to be included in the terms and conditions before the contract is concluded
• A free feature for the customer, with no mandatory human contact step

One point deserves the attention of sellers present on marketplaces. Decree No. 2026-3, which specifies the implementing rules, places legal responsibility on the professional who concludes the sale. If Amazon, Cdiscount, or another marketplace doesn’t offer a compliant feature, it’s the third-party seller who remains exposed in case of a claim. This same logic, responsibility falling on whoever sells rather than on the tool used, also structures the next obligation.

2. Your chatbot must identify itself, or face a fine

A customer service chatbot or product assistant must now declare itself as such from the very first interaction, unless its AI nature is already obvious to a normally informed user. This obligation, Article 50 of the European AI regulation (AI Act), entered its enforcement phase on August 2, 2026. If your store uses a conversational module, the fine can reach up to €15 million or 3% of annual global revenue, whichever amount is higher.

A typical scenario, to put this in perspective: a chatbot answers product questions on your store without ever indicating that it’s an AI. A customer chatting with it would have no way of knowing, and neither would an inspector testing the journey. The fine isn’t automatic — it depends on the severity and any repeat offense. The legal cap, however, is set in advance.

There is one scheduling nuance, but it concerns a technical detail. Technical marking of AI-generated content (watermarking) benefits from a grace period until December 2, 2026 for systems already on the market before August 2. The chatbot disclosure requirement, however, gets no such extension. The full text of Article 50 is available on EUR-Lex.

Actions to take on your PrestaShop store

• List every AI use that interacts with visitors: support chatbot, product search assistant, conversational recommendation module
• Add a clear notice right at the start of the conversation, within the chat thread itself
• Check the exact role held for each system: provider, deployer, or both, since the obligation depends on it
• Document compliance to prepare for an inspection: in France, the CNIL, the DGCCRF, and Arcom share oversight

The same principle that defined the withdrawal button and the chatbots comes up a third time, this time applied to the most concrete object in the purchase journey: the parcel itself.

3. Your parcels must be compliant, with no grace period

On August 12, 2026, the European packaging regulation (PPWR, EU 2025/40) applies across all 27 countries on the same day. Unlike a directive, this text doesn’t go through national transposition: if your store ships parcels within Europe, it applies to you directly, in the same terms as it would to a Polish or Spanish online retailer. Three day-one obligations apply to you as soon as a parcel leaves your warehouse.

The 3 day-one obligations for your store

1. Declaration of Conformity (DoC): one document per type of packaging, attesting compliance with the regulation’s requirements, to be kept available in case of an inspection
2. Substance restrictions: a ban on PFAS beyond the set thresholds for packaging in contact with food, and a cap of 100 mg/kg for heavy metals
3. EPR registration (extended producer responsibility) in every member state where parcels are shipped

E-commerce accounts for a significant share of the volumes covered by this regulation: your shipping boxes, your padding film, your mailer bags. No stock clearance is allowed: any packaging placed on the market after August 12 must already be compliant. The full text is available on EUR-Lex.

What these 3 laws change for your store

None of these three reforms amounts to a cosmetic adjustment. Each one shifts responsibility onto you, regardless of your store’s size or the channel used: your own site, an app, a marketplace. There’s no exemption for small businesses. A hidden form, a chatbot silent about its nature, undocumented packaging: what was tolerated by default yesterday becomes active non-compliance from a specific date onward.

On your PrestaShop store, achieving compliance rarely involves just one provider. The withdrawal button involves the agency that manages your theme and checkout flow. The chatbot disclosure involves the module publisher or the conversational AI provider. Packaging documentation involves your logistics supplier. A certified PrestaShop Expert agency knows these dependencies and knows who to contact first.

Summary: dates, penalties, who’s affected

Frequently asked questions

Is the withdrawal button mandatory for all online stores?

Yes, as soon as the store sells to individuals via a distance contract: website, mobile app, or marketplace. No company size is exempt. The business must include a free feature and inform the customer, before purchase, of its existence and its location within the terms and conditions of sale.

Does a chatbot need to identify itself even if its AI nature seems obvious?

Article 50 of the AI Act only provides an exception when the AI nature is already obvious to a normally informed user — for example, a simulator clearly identified as automated. For a standard customer service chatbot, caution recommends an explicit notice from the very first message, rather than relying on this exception.

Does the packaging regulation (PPWR) apply to small online sellers?

Yes. Company size doesn’t come into play: the PPWR covers any placing of packaging on the European market, full stop. The obligations of August 12, 2026 — declaration of conformity, PFAS restriction, EPR registration — apply just as much to a micro-business shipping a few parcels a week as to a large e-commerce account.

What does a store risk if it ignores these obligations?

The risks vary by text: civil litigation and DGCCRF inspection for the withdrawal button, a fine of up to €15 million or 3% of global revenue for chatbot transparency, market withdrawal and national penalties for non-compliant packaging. In all three cases, the common thread is the absence of any grace period once the effective date has passed.

Where to start on your PrestaShop store

These three texts affect different layers of your store: the customer journey, the conversational experience, the supply chain. You don’t need to tackle everything at once: start with the withdrawal button, already overdue since June 19, then the chatbot, then the packaging. An agency from the Profileo network, certified 3-star PrestaShop Expert, can help you identify which providers to mobilize first based on your store’s setup.

You might also be interested in these articles

• Digital sovereignty and e-commerce: what dependency costs PrestaShop stores
• PrestaShop optimization: working on your product page images