Compliance

What compliance means

Compliance means following laws and rules in your own operation. The term sounds corporate but concerns every retailer. The question is not whether a lawyer knows the law but whether the work in the operation actually meets the rules. The difference lies between those two: many know what to do and do not do it.

Which rule sets affect a shop

Five areas are regularly relevant for online retailers. First consumer protection with information duties, right of withdrawal, price statements and the design of the order process. Second data protection with consent, processing agreements and deletion periods. Third tax law with VAT, invoice details and retention. Fourth product law with labelling, safety and disposal. Fifth competition law with the admissibility of claims and advertising.

On top come the duties that arise in three party relationships. Anyone using payment providers, newsletter tools or shipping partners needs a contractual basis for each.

What a simple working framework looks like

• Inventory: which tools are in use, which data flows where, which texts are published. This list is the foundation, not the legal advice.
• One contact: a person who keeps the list and notices changes. If capacity is missing, at least a fixed external contact.
• Review dates: a steady rhythm, for instance yearly plus with every change to shop tools or payment methods.
• A checklist: the same points in the same order. Without a list, every round is rethought and every round something is forgotten.

Why it stays ineffective without review

The most common mistake is assuming that reading it once is enough. A shop changes constantly: new tools, new payment methods, new shipping methods, changed texts. Every change is a possible breach, and nobody checks them when there is no routine.

The second mistake is the wrong owner. In small businesses the topic often sits with the person who has least time and is therefore postponed. The third mistake is the sham solution: a standard text from a portal does not replace a review of your own processes. The fourth mistake is missing documentation. Anyone who cannot say after a year when which version of a provider was in use cannot demonstrate compliance.

How compliance differs from data protection

The two are often treated as the same, which they are not. Data protection is one part and concerns personal data. Compliance is the wider frame and includes consumer, tax, product and competition law. A shop can be compliant on data protection and still breach information duties, because price statements or the withdrawal notice are not current.

Frequent questions

• Do I need a compliance officer? In small shops the task rests with management.
• How often to review? Yearly and with every structural change.
• Is one round of legal advice enough? No, it is the start. Meeting the rules in daily work is the work.