Coming soon: Blockly Checkout Customizer — validation rules, upsells & checkout analytics.Get early access
Compliance

Digital Content & the EU 14-Day Right of Withdrawal (Art. 16(m))

Digital downloads can be exempt from the 14-day withdrawal right — but only if you capture express consent and an acknowledgment of loss before delivery. Here's how to do it right.

Digital Content & the EU 14-Day Right of Withdrawal (Art. 16(m))

Quick answer: Under Article 16(m) of Directive 2011/83/EU, a consumer loses the 14-day right of withdrawal for digital content not supplied on a tangible medium only when all three conditions are met before delivery starts: they gave prior express consent to immediate access, they acknowledged that they lose the right of withdrawal by doing so, and you confirmed both on a durable medium such as email. If any one is missing, the full 14-day right still applies — even after the download.

Selling ebooks, courses, software, or media downloads to EU customers puts you in a tricky spot. The right of withdrawal normally gives consumers 14 days to cancel — but once someone has downloaded your file, "returning" it is meaningless. EU law recognizes this and lets you exclude the right for digital content, but only if you follow a strict three-step process before delivery begins.

Get the steps right and you are protected. Miss one and the customer keeps a full 14-day cancellation right even after downloading.

The rule in plain terms

Under Article 16(m) of Directive 2011/83/EU, the withdrawal right does not apply to digital content not supplied on a tangible medium if performance has begun and:

  1. The consumer gave prior express consent to begin performance during the withdrawal period.
  2. The consumer acknowledged that, by consenting, they lose the right of withdrawal.
  3. You provided confirmation of that consent on a durable medium (typically email).

All three are required. This is the same logic behind the "sealed media" exception for physical discs — once the content is accessible, it cannot be un-supplied.

The 2023/2673 update to EU consumer rules keeps this framework intact while tightening surrounding disclosure and enforcement expectations, so clean consent capture matters more than ever.

Why "express" and "prior" both matter

  • Prior means the consent must be given before download or streaming starts — not buried in your terms accepted weeks earlier, and not collected after the file is already served.
  • Express means a clear, affirmative action specific to this point. A pre-ticked box does not qualify. Silence does not qualify. The consumer must actively choose.

And crucially, the consent and the acknowledgment are two distinct statements:

  • "I want to start using this content now." (consent to begin)
  • "I understand I lose my right to withdraw once I do." (acknowledgment of loss)

Presenting only the first is a common and costly mistake.

The cleanest place to capture consent is at or immediately after checkout, before the download link is active. A workable pattern:

  • Present an unticked checkbox the customer must actively select.
  • Use unambiguous wording, for example:
"I request immediate access to this digital content and I acknowledge that I will lose my 14-day right of withdrawal once access begins."
  • Block the download until the box is ticked.
  • Timestamp and store the consent event.
  • Email a confirmation repeating the consent and the acknowledgment on a durable medium.

Notice the wording combines both statements. If you split them into separate checkboxes, that is even clearer — just make sure both are captured.

An illustrative flow

  1. Customer buys a €19 ebook.
  2. On the confirmation step they tick the consent + acknowledgment box (unticked by default).
  3. System logs: *consent given 18 Aug 2026, 09:42 UTC, order #20918.*
  4. Download link unlocks.
  5. Confirmation email sent restating the consent — this is your durable-medium record.

Amounts and timestamps here are illustrative.

What happens if you skip a step

If any of the three conditions is missing, the exemption fails and the consumer retains the full withdrawal right — meaning they could download your content, use it, and still cancel for a refund within 14 days. The most frequent failures:

  • No acknowledgment of loss — you got consent to start but never told them the consequence.
  • Consent collected after delivery — the link was already live.
  • No durable confirmation — nothing emailed, only an on-screen message.
  • Pre-ticked boxes — treated as no valid consent at all.

Handling both digital and physical catalogs

Many Shopify stores sell a mix. You do not want the same withdrawal flow for a downloadable course and a returnable jacket. The goal is:

  • Physical goods: offer the standard 14-day withdrawal path.
  • Digital content: capture consent + acknowledgment, then treat as exempt once access begins.

Managing both consistently by hand is where errors creep in. Use a persistent, login-free withdrawal channel for the orders that qualify and a customizable form you can adapt to your consent and acknowledgment wording. Log every request and confirmation centrally with exportable audit reports, so if a customer later claims they never lost the right, you can show exactly what they agreed to and when.

Frequently asked questions

Does a pre-ticked checkbox count as express consent?

No. Express consent needs an active choice, so the checkbox must start unticked and the customer must select it. A pre-ticked box is treated as no valid consent at all.

Can the consent sit in my terms and conditions?

No. Consent must be given before the download or stream starts and be specific to that step. General terms accepted earlier do not satisfy the "prior express consent" requirement.

Is consent alone enough to remove the withdrawal right?

No. The customer must also acknowledge that they lose the right of withdrawal, and you must confirm both statements on a durable medium such as email. Consent without the acknowledgment is a common and costly mistake.

What happens if I skip the confirmation email?

The exemption fails and the customer keeps the full 14-day withdrawal right, so they can download the content and still cancel for a refund.

Does this exemption apply to physical products?

No. Article 16(m) covers digital content not supplied on a tangible medium. Physical goods keep the standard 14-day withdrawal path, so mixed catalogs need two different flows.

Checklist for digital products

  • [ ] Consent collected before download/stream begins
  • [ ] Consent is express (active, unticked-by-default action)
  • [ ] Separate acknowledgment that the right is lost
  • [ ] Confirmation emailed on a durable medium
  • [ ] Consent event timestamped and stored
  • [ ] Download blocked until consent is given

*This article is general information, not legal advice. Confirm exact consent wording and requirements for the member states you sell into.*

Digital sellers who nail consent capture avoid the worst-case scenario of refunding used content. If you sell downloads or streaming to EU shoppers on Shopify, document consent and keep the whole trail in one place.

Up nextFraud Prevention for B2B & Wholesale Stores

Related articles

More compliance articles →
Free forever plan

Ready to protect
your store?

Join 5,000+ Shopify merchants. Install in 30 seconds and block your first bad actor today.

  • No credit card
  • 5-minute setup
  • Cancel anytime