Insights and Analysis
AI-washing – when AI hype becomes a litigation risk
The EU continues to operationalise consumer rights in the digital environment. Directive (EU) 2023/2673 introduces a new requirement into the Consumer Rights Directive 2011/83/EU (“CRD”), requiring traders to provide an electronic withdrawal function for distance contracts concluded via online interfaces. Commonly referred to as the “withdrawal button”, this new mechanism is intended to ensure that consumers can withdraw from an online contract just as easily as they can conclude it. The withdrawal button was introduced at the initiative of Germany, drawing on prior national experience with mandatory interface‑based consumer protection mechanisms (the so‑called “Kündigungsbutton”). The new obligations will apply from 19 June 2026 and will have material consequences for the design of online customer journeys, websites and apps targeting EU consumers.
The new rules, applicable from 19 June 2026, require traders to provide a withdrawal function for distance contracts concluded online, covering contracts for goods and services for which a statutory right of withdrawal exists under the CRD.
To prepare for the new rules companies selling goods or services to consumers in the EU via online interfaces should review and adapt their customer journeys and digital withdrawal flows. In particular, businesses should:
Identify in‑scope contracts: Determine which distance contracts concluded online are subject to a statutory right of withdrawal, i.e. where no exemption applies under Article 16 CRD.
Implement a compliant withdrawal function: Introduce a clearly visible and easily accessible electronic withdrawal function, available throughout the entire withdrawal period. According to Article 11a CRD, the function must reflect a two‑step mechanism, consisting of an initial step indicating the intention to withdraw, followed by a confirmation step.
Carefully choose the wording: The wording of the withdrawal function must clearly signal the exercise of a statutory right, rather than the initiation of a customer‑service process.
Ensure immediate confirmation of receipt: Make sure that consumers automatically receive an acknowledgement of receipt on a durable medium (e.g. email), including the date and time of submission of their withdrawal.
Considering that German law already provides for a statutory online interface based consumer protection mechanism, there is a chance of drawing on prior national experience with the mandatory German termination function (the so‑called “Kündigungsbutton”). With its strict and formalistic enforcement approach in consumer‑facing B2C interfaces, Germany will likely serve as a benchmark jurisdiction when designing compliant withdrawal mechanisms.
Although the statutory right of withdrawal is a cornerstone of EU consumer law, the European legislator has repeatedly identified shortcomings in its practical accessibility in online environments. Consumers are often required to search for forms, draft emails or navigate complex customer‑support paths.
Directive (EU) 2023/2673 addresses this enforcement gap by introducing a new Article 11a CRD into the Consumer Rights Directive and embedding the withdrawal process directly into the digital purchasing environment. While the amending directive primarily targets distance financial services, it introduces a horizontally applicable mechanism into the CRD: the obligation to provide an electronic withdrawal function – commonly referred to as a “withdrawal button” – for distance contracts concluded via online user interfaces.
The overarching policy objective is clear and repeatedly emphasised in the legislative materials: The procedure for withdrawing from a contract must not be more burdensome than the procedure for concluding it. In short, if a contract can be concluded with a click, it should also be withdrawn with a click.
This development fits squarely within broader EU initiatives targeting interface design, transparency and the reduction of behavioural friction, including the increasing regulatory focus on so‑called “dark patterns” in consumer‑facing digital environments.
Article 11a CRD applies to distance contracts concluded by means of an online interface, including websites and mobile applications, provided that a statutory right of withdrawal exists under the Consumer Rights Directive. The provision does not extend the scope of withdrawal rights and does not affect the catalogue of exceptions set out in Article 16 CRD.
Article 11a CRD introduces a mandatory electronic mechanism allowing consumers to exercise their right of withdrawal directly within the digital environment in which the contract was concluded. It establishes a two‑step withdrawal structure, designed to ensure both ease of use for consumers and legal certainty for traders:
For in-scope contracts, traders must provide an electronic withdrawal function (commonly referred to as a “withdrawal button”) enabling the consumer to indicate their intention to withdraw from the contract.
The withdrawal function must:
Following initiation, the consumer must be able to submit an electronic withdrawal declaration informing the trader of their decision to withdraw from the contract. For this purpose, the withdrawal function must allow the consumer to provide or confirm:
The consumer must then be able to submit the withdrawal declaration by means of a confirmation function, which must be labelled, in an easily legible manner, only with the words “confirm withdrawal” or with an equally unambiguous corresponding wording.
The withdrawal is deemed to have been exercised in due time once the electronic declaration is sent before expiry of the withdrawal period.
This two-step mechanism is expressly intended to prevent the withdrawal right from being exercised inadvertently through use of the electronic withdrawal function.
Traders must acknowledge consumers’ receipt of the withdrawal on a durable medium without undue delay. The acknowledgement must include the content of the withdrawal declaration as well as the date and time of its submission.
While Article 11a CRD allows traders to use wording other than “withdraw from contract”, this flexibility is limited. Alternative wording is permissible only where it constitutes an unambiguous corresponding formulation.
In practice, this requirement is likely to be interpreted strictly and formally. Drawing on established EU and national case law concerning the “order with obligation to pay” button, courts are expected to focus on the wording of the button or link itself, without relying on surrounding explanations or subsequent steps in the withdrawal flow. The decisive question will be whether the wording clearly and unmistakably conveys the legal act of withdrawal (or cancellation of the contract).
As a result, wording that suggests a merely informational, exploratory, or preparatory step – such as “check”, or “review” – entails a notable compliance risk. Such language may be perceived as part of a general customer‑service flow rather than as the exercise of the statutory right of withdrawal.
Article 11a CRD does not mandate a specific technical design, user interface layout or number of clicks. Additional processing steps (such as requests for additional information) are not per se prohibited, provided that they: (i) follow after the consumer has clearly initiated withdrawal, and (ii) do not hinder, delay or condition the effective exercise of the withdrawal right.
However, consumers should not be required to undertake additional procedures to find or access the withdrawal function, such as downloading an app if the contract was not concluded via that app. Hyperlinks may be used to guide consumers directly to the withdrawal function. Where consumers have already been identified (e.g. by logging in), withdrawal should be possible without repeated identification. Where multiple goods or services are covered, consumers businesses can provide consumers with the possibility to withdraw from parts of the contract.
The electronic withdrawal function was introduced into the Consumer Rights Directive at the initiative of Germany, drawing on prior national experience with mandatory interface‑based consumer protection mechanisms. German law already provides for a statutory termination function (the so‑called “Kündigungsbutton”) for certain ongoing contractual relationships concluded in e-commerce (Section 312k BGB). While the termination function similarly follows a two‑step structure, it is a purely national concept without an EU‑law basis and applies to different categories of contracts. The termination function and the withdrawal function pursue distinct legal purposes and must be clearly distinguished, even though both mechanisms are intended to facilitate consumers’ release from contractual obligations.
Germany has transposed Article 11a CRD by introducing a new Section 356a BGB into the German Civil Code (Bürgerliches Gesetzbuch – “BGB”). The German legislator opted for a systematic and essentially 1:1 integration of the EU-level requirements into the existing withdrawal regime.
The electronic withdrawal function supplements, but does not replace, existing withdrawal options such as letters or email. Traders remain free to offer additional withdrawal methods. However, where a contract is concluded via an online interface, consumers must not be restricted to non‑electronic channels for exercising their withdrawal right.
The explanatory memorandum to the German transposition law confirms a strict consumer‑oriented interpretation, providing further guidance in particular on visibility and accessibility. In essence:
The withdrawal function should be directly accessible from every subpage of the online user interface, e.g. via hyperlinks.
If placed in the website footer, it must be clearly distinguishable from other content (such as terms and conditions or the imprint) through appropriate visual design measures, e.g. contrasting colours or clear placement.
Consumers should not be required to register, authenticate or download an application in order to find or access the withdrawal function, unless the contract itself could only be concluded in that way. The withdrawal function must therefore be accessible without login, ensuring that contracts concluded as a guest can be withdrawn just as easily as they were entered into.
In limited cases, traders may be unable – or only able with disproportionate effort – to determine the applicable withdrawal period for an individual consumer. In such cases, the withdrawal function may be provided in a standardised manner, independently of the specific withdrawal period, in order to ensure continuous availability without complex technical solutions. However, this rationale is unlikely to apply in personalised account environments where order‑specific information is already displayed and the applicable withdrawal period can generally be determined.
The obligation to provide an electronic withdrawal function applies regardless of whether the contract is concluded via the trader’s own website or via a third‑party platform. In both cases, the trader must ensure that consumers can use an electronic withdrawal function and, where necessary, must contractually oblige platform operators to enable this.
Authored by Dr. Christiane Alpers and Dr. Cynthia Staiger.
The clock is ticking. From 19 June 2026, the new withdrawal function requirements will apply EU‑wide. Companies operating online in the EU should take action now to redesign their consumer interfaces and ensure timely, compliant implementation.