If you’re selling into European Union markets — through your own Shopify storefront, Amazon EU, or any third-party marketplace — the EU Digital Services Act (DSA) is no longer a policy paper. As of February 2026, the European Commission began issuing formal compliance audits to mid-market platforms and the third-party sellers operating on them. The first wave of enforcement actions landed in Q1 2026, with three marketplace operators receiving preliminary fines totaling €41 million for inadequate product traceability and opaque algorithmic recommendation disclosures.
For DTC founders and Shopify merchants who’ve treated DSA as a problem for the Amazons of the world, the window for that posture has closed. Under DSA Article 30, any seller generating more than 10,000 EU transactions per year is classified as a “professional trader” and subject to full verification requirements — regardless of whether you operate on a platform or run your own storefront. Get this wrong, and you’re looking at penalties scaled to global revenue, not just EU revenue.
This guide walks you through the five operational steps to get DSA-compliant before your next EU sale, using the tooling and workflows that actual cross-border merchants are deploying today.
What Does DSA Compliance Actually Require for Sellers in 2026?
The DSA has four core obligations that affect most cross-border ecommerce operators directly:
- Business identity verification: Platforms must verify your trader identity — name, address, VAT registration, bank details — before you can list products. Amazon EU, Bol.com, and Zalando are all enforcing this actively as of March 2026.
- Product traceability: For physical goods, you must be able to demonstrate supply chain provenance, particularly for categories like electronics, cosmetics, and children’s products.
- Transparent algorithmic ranking disclosure: If you use a third-party repricing or listing optimization tool, those tools must now log their logic in an auditable format accessible to EU regulators.
- Notice-and-action transparency: If a product is flagged or removed from an EU platform, you have the right to appeal — but you must have a designated EU-based point of contact or legal representative to exercise that right.
“Most mid-market sellers I talk to have handled the VAT piece from IOSS years ago and assume that covers them under DSA,” says Lena Haupt, head of cross-border compliance at Berlin-based agency Eurotrade Partners. “It doesn’t. DSA is a separate framework entirely, and the checklist is longer than most sellers realize.”
“The mistake I see constantly is treating DSA as a platform problem. The Commission is explicitly targeting sellers, not just platforms. If you’re doing volume into the EU, you own this compliance burden.” — Lena Haupt, Eurotrade Partners
Step 1: Run a DSA Readiness Audit on Your Current EU Operations
Before you can fix anything, you need a current-state snapshot. This doesn’t require a law firm — a structured internal audit will surface 80% of your gaps.
Pull the following data points:
- Total EU transactions (by country) over the last 12 months — are you above the 10,000-transaction threshold?
- Current trader verification status on each platform you sell through (Amazon EU, Shopify Markets, Bol, OTTO, etc.)
- Whether your Shopify storefront displays a legally compliant trader disclosure page (required under DSA Article 30)
- Documentation of any third-party tools touching your EU listings — repricing tools, review automation, AI-generated product descriptions
Shopify released a DSA Compliance Checklist template inside the Shopify Markets documentation hub in April 2026, and it’s a solid starting framework. Cross-reference it against the European Commission’s own DSA implementation guidance at digital-strategy.ec.europa.eu.
Pro tip: If you use Gorgias for EU customer support, pull a ticket sample and check whether your agents are logging product complaint resolutions in an auditable format. DSA’s notice-and-action provisions require documented complaint handling workflows, and Gorgias’s new DSA Compliance Mode (launched March 2026) automates that logging if you’ve enabled it.
Step 2: Complete Trader Verification on Every EU Platform
This is the most operationally intensive step and the one most commonly incomplete among sellers we surveyed. Amazon EU’s Seller Central now surfaces a “DSA Verification Status” badge on your account dashboard. If yours shows “Pending” or “Action Required,” you are currently at risk of listing suppression.
The verification process requires:
- Government-issued business registration documents (translated into English or the platform’s primary language)
- Active VAT registration number (if EU-registered) or IOSS number (if selling from outside the EU)
- A physical business address — P.O. boxes are not accepted
- A designated EU contact person or EU-based legal representative
For sellers outside the EU without a physical presence, appointing a “DSA Legal Representative” is now standard practice. Services like DSA-Rep.eu and Legalbase’s Cross-Border Commerce package (starting at €149/month) handle this for Shopify and marketplace sellers. If you’re doing significant volume, law firms like Bird & Bird and Osborne Clarke both have dedicated DSA merchant desks.
“We got a platform suspension notice from Bol.com in January because our legal rep documentation had lapsed. It took 11 days to reinstate our listings. That was €23,000 in lost revenue we’ll never recover.” — Marcus Ibarra, founder of Ibarra Home Goods, a Shopify-native DTC brand selling across six EU markets
Step 3: Audit and Document Your Algorithmic Tools
This is the sleeper issue that most sellers aren’t thinking about. DSA Article 27 requires platforms and sellers using automated decision-making systems — including repricing engines, AI product description generators, and recommendation algorithms — to maintain auditable records of how those systems influence what consumers see and what prices they’re charged.
In practice, this means:
- If you use Repricer.com, Feedvisor, or any dynamic pricing tool for EU listings, you need to export and store a weekly log of pricing decisions and the parameters driving them
- If you’re using AI copywriting tools (Jasper, Copy.ai, Shopify Magic) to generate EU-facing product descriptions, maintain version logs showing what was generated and when
- If you run A/B tests on EU storefronts using tools like Intelligems or Convert.com, document the test parameters and outcomes
“This is the one area where I’d argue sellers actually benefit from compliance,” says Raj Patel, founder of ecommerce consultancy Meridian Commerce Group. “Forcing yourself to document your algorithmic stack is just good operations. You’ll catch pricing anomalies and copy inconsistencies you’ve been ignoring for months.”
Pro tip: Feedvisor added a DSA Audit Export feature in Q4 2025 that packages pricing decision logs in a format aligned with EU regulatory requests. If you’re using Feedvisor on Amazon EU, enable that feature now — it’s not on by default.
Step 4: Build a Compliant Consumer-Facing Disclosure Layer
EU consumers now have the legal right to understand how products are ranked, why they’re seeing certain recommendations, and how to escalate complaints. Your storefront and marketplace listings need to reflect this.
For Shopify merchants selling direct into the EU via Shopify Markets, the minimum requirements are:
- A “Trader Information” page with your full business identity, accessible from every product page footer
- A clearly labeled ranking parameter disclosure (e.g., “Products are sorted by relevance score based on sales velocity and margin”) if you use any custom sort logic
- An accessible complaint and appeals pathway — not buried in your terms of service
The Shopify App Store now has two apps specifically built for DSA disclosure compliance: DSA Comply by Trustbadge and EU Trader Shield by Adevinta. Both inject the required disclosure layers into your theme without custom development. DSA Comply runs $29/month and is the more widely deployed of the two, with approximately 8,400 active Shopify installs as of May 2026.
Step 5: Establish an Ongoing Compliance Monitoring Cadence
DSA compliance is not a one-time project. The European Commission has signaled that enforcement will escalate through 2026 and into 2027, with particular focus on electronics, health and wellness products, and marketplaces with AI-generated content.
Build this into your quarterly operations calendar:
- Monthly: Verify trader verification status across all EU platforms; export algorithmic decision logs from repricing and testing tools
- Quarterly: Audit consumer-facing disclosure pages for accuracy; confirm your EU legal representative appointment is current
- Annually: Full DSA readiness review — particularly important if you’ve onboarded new tools, entered new EU markets, or crossed the 10,000-transaction threshold for the first time
“The sellers who get into trouble are the ones who did a one-time cleanup and moved on,” says Haupt. “DSA compliance drifts. You add a new repricing tool, you launch in a new country, you hire an agency that uses different CRO tools — and suddenly you’ve got undocumented systems touching EU consumers again.”
“Treat DSA the same way you treat your monthly PnL review. It’s not glamorous, but ignoring it has the same consequences as ignoring your cash flow.” — Raj Patel, Meridian Commerce Group
What Are the Real Penalties, and Who’s Actually Getting Fined?
The headline penalty under DSA is 6% of global annual revenue — not EU revenue. For a brand doing $10M globally with $2M in EU sales, that’s a potential €600,000 fine for a compliance failure that might feel like a paperwork issue.
The Commission’s first enforcement wave in Q1 2026 focused on Very Large Online Platforms (VLOPs) — the Amazons and Zalando-tier operators. But the second wave, expected in H2 2026, is explicitly targeting “professional traders” in the Article 30 sense: mid-market sellers doing consistent EU volume.
Three categories are drawing the most regulatory attention right now: sellers of consumer electronics with counterfeit or gray-market exposure, health and wellness DTC brands making claims that trigger DSA’s “systemic risk” provisions, and any seller using undisclosed AI-generated content in product listings.
The practical read: if you’re doing more than €500,000 in annual EU GMV and you haven’t run a DSA audit, you are a reasonable enforcement target in the back half of 2026. The compliance investment — estimated at €2,000–€8,000 for a mid-market merchant using outside counsel and the right tooling — is trivially small relative to the risk exposure.
Get the audit done. Get your verification current. Document your tools. The EU cross-border opportunity is too large — €887 billion in total ecommerce spend projected for 2026 per eMarketer — to leave on the table over compliance gaps that are entirely fixable.
