Keep digital requirements in view
Accessibility, e-invoicing, the EU AI Act, the withdrawal button, product safety, consent: new requirements have been added for websites, shops and software in Germany and the EU. Here you get a neutral overview and see where we provide technical support.
Note: this page is a general overview and not legal advice. Information as of 26 September 2026. Whether and to what extent a regulation applies to your company is something to clarify with a lawyer.
Shopware Silver Partner and Google PartnerTeams in Mönchengladbach and Düsseldorf
Your tech team
Brands that work with us
Which requirements can affect websites and shops
Many regulations apply in stages and depend on company size, industry and offering. The legal assessment is the job of your legal advisor; we take care of the technical implementation. Each point names its source and the date of the information, without claiming to be complete.
Accessibility (BFSG)
Since 28 June 2025, the German Accessibility Strengthening Act applies to many online shops and digital services for consumers. Microenterprises that provide services are exempt. In practice, EN 301 549 and WCAG serve as the benchmark; the Act itself refers to harmonised standards (Section 4 BFSG).
Source: German Accessibility Strengthening Act (BFSG) · As of 26 September 2026
E-invoicing
Since 1 January 2025, companies in domestic German B2B business must be able to receive e-invoices. They must issue them from 2027 if their prior-year turnover exceeds 800,000 euros, and from 2028 below that threshold as well. Small businesses under the German small business rule, invoices up to 250 euros and travel tickets are exempt; invoices to consumers are not covered. A simple PDF does not count as an e-invoice.
Source: Sections 14 and 27(38) UStG; Sections 33, 34, 34a UStDV · As of 26 September 2026
EU AI Act
The EU AI Act has been in force since 1 August 2024 and applies in stages. Since 2 February 2025, it has required measures on AI literacy. Amending Regulation (EU) 2026/1744 rewrote this rule in July 2026 and postponed deadlines for high-risk AI systems.
Source: Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744 · As of 26 September 2026
AI transparency (Art. 50 AI Act)
Since 2 August 2026, transparency obligations apply: chatbots and voicebots must be designed so that people learn they are talking to an AI, unless this is obvious. Anyone publishing deepfakes, or texts generated by AI on matters of public interest, must label them, unless a human has reviewed the text editorially and takes responsibility for it.
Source: Art. 50 Regulation (EU) 2024/1689 · As of 26 September 2026
Consent & tracking (TDDDG)
Section 25 TDDDG governs when cookies and similar technologies require consent. The rule has applied since 1 December 2021, and since 14 May 2024 under the new name TDDDG instead of TTDSG. Tracking and marketing tools usually require proper consent management.
Source: Section 25 TDDDG · As of 26 September 2026
Product safety (GPSR)
Since 13 December 2024, the EU General Product Safety Regulation has required mandatory information directly in online offers of consumer products: the manufacturer's name, postal and electronic address (e.g. email or contact form), for manufacturers outside the EU the responsible person in the EU, details that identify the product such as an image and its type, and warnings and safety information in a language consumers in the target country can easily understand.
Source: Art. 19 Regulation (EU) 2023/988 · As of 26 September 2026
How we approach it
We handle the technical side. The legal assessment stays with your legal advisor.
Get it assessed
Whether and how a rule applies to you is something to clarify with your legal advisor. We provide the technical facts.
Check the technology
We check what your shop, website or software does today – for example on accessibility, consent or invoice formats.
Implement & document
We implement the requirements technically and document what has changed.
Where are you stuck?
One click starts the Digital Stack Builder with your focus. Four questions, your plan, free of charge.
The right services
- Web analytics setupSet up GA4, Tag Manager and conversion events properly – with data protection and consent management as a fixed part.
- Plausible Analytics hostingCookieless web analytics as an alternative to Google Analytics, self-hosted, operated and maintained in Europe.
- Process analysis & AI strategyWorkshop and AI roadmap with agenda, learning content and attendance records – one possible building block for documenting AI literacy.
- Web applicationsCustom business applications where accessibility testing is part of quality assurance.
- Theme & template developmentShopware themes built with WCAG conformance in mind, so your shop is accessible to all users.
- Document processingExtract and classify incoming invoices and documents automatically and transfer them into your systems.
Keep reading
All articlesFrequently asked questions
Your question isn't here? Ask us directly
Does the BFSG apply to my online shop?
The BFSG covers many online shops and digital services aimed at consumers. Exemptions include microenterprises that provide services – companies with fewer than ten employees and an annual turnover or balance sheet total of no more than two million euros. Whether your offering is covered is best clarified with your legal advisor. We support you with the technical implementation.
When do I have to issue e-invoices?
Companies in domestic German B2B business have had to be able to receive e-invoices since 1 January 2025. Transition periods apply to issuing them: in 2027, companies with a prior-year turnover of up to 800,000 euros may still issue paper or other invoices, and from 1 January 2028 the obligation covers all domestic B2B transactions. Small businesses under the German small business rule, invoices up to 250 euros and travel tickets remain exempt. Invoices to consumers are not covered. Common formats are XRechnung and ZUGFeRD.
What does the AI literacy rule mean for my company?
Since 2 February 2025, companies that provide or use AI systems have had to take measures on their staff's AI literacy. Since the amendment by Regulation (EU) 2026/1744, in force since 27 July 2026, the rule is about supporting the development of AI literacy. It does not prescribe a specific level of literacy for any individual. Many companies document training sessions and internal guidelines for this. What is appropriate for you is something to clarify with your legal advisor.
Do I need a cookie banner for Google Analytics?
Usually yes: for tracking tools that store or read information on the device and are not strictly necessary, the TDDDG requires consent. Cookieless analytics solutions that do without device access can be an alternative. Which option is permissible for you is something to clarify with your data protection advisor.
Do you handle the legal review?
No. We are a digital agency, not a law firm. We implement technical requirements – such as accessible interfaces, consent management or automated processes – and are happy to work with your legal advisor.
Let's plan the technical implementation
30 minutes, no obligation: we clarify which technical requirements are coming up for you and how we can implement them – no legal advice.
