A consumer-regulator inspection of the withdrawal button: how it works

There is a lot of talk about penalties, and rarely about what precedes them: the inspection. Yet knowing how your national consumer regulator works changes how you prepare. In Ireland, that regulator is the Competition and Consumer Protection Commission (CCPC); every EU member state designates its own. An inspection of the withdrawal mechanism is no mystery, and most of the points checked are public, visible from outside your site. Here is how it unfolds, from spotting to penalty.

How a non-compliant site is spotted

Contrary to a widespread belief, the CCPC does not need to travel anywhere to observe the absence of a withdrawal button. The shortcoming is visible online, just as it is for any internet user. Three main entry points:

• Direct online inspection. The investigators browse your site exactly like a consumer: they look for the mechanism, test its accessibility, read your terms and conditions. Everything that is public can be observed without notice.
• A consumer complaint. A customer who cannot find how to withdraw can report the site, notably by lodging a complaint with the CCPC. A targeted complaint directly steers an inspection.
• Thematic investigations. The CCPC regularly runs sector campaigns. A new, heavily publicised obligation like that of 19 June 2026 is a natural ground for this type of operation.

The consequence is simple: a mechanism that is absent or badly set up is seen immediately, without your being warned.

What the investigator checks on the mechanism

The inspection is not limited to "does the button exist". It covers the whole journey and its documentary coherence:

• Presence and accessibility: is the mechanism easily reachable, from every page, throughout the deadline, without any obligation to create an account?
• The wording: is the feature identifiable by a clear and unambiguous phrase, and is the confirmation step explicit?
• The acknowledgement of receipt: does the consumer receive a confirmation on a durable medium?
• Consistency of the terms and conditions and pre-contractual information: do your documents mention the mechanism, its location and the fact that it is free, in line with what the site actually does?

A single weak link, for example a button reserved for the customer account or a vague wording, is enough to characterise a shortcoming.

What the regulator can ask you to produce

This is where many retailers are caught off guard. Beyond what is visible, an investigator can ask to see how requests are actually received and handled. In other words: can you demonstrate that a withdrawal exercised on a given date was indeed recorded and acknowledged?

A journey that works on screen but leaves no usable trace puts you in difficulty. What protects you is enforceable proof: a timestamped acknowledgement archived for the legal duration, which you can produce months later. Proof that is verifiable by a third party, independent of your own system, has far greater value than a screenshot or an email you could have written after the fact. This is the stake detailed in our article on the probative value of the proof of withdrawal.

The procedure, from finding to penalty

In consumer law, the administrative penalty is not instant. It generally follows several stages:

1. The finding of the shortcoming by the investigator.
2. An adversarial phase: you are informed of the complaints and can present your observations.
3. A compliance injunction, sometimes accompanied by a periodic penalty payment, requiring you to correct within a given deadline.
4. The administrative fine: in Ireland, up to €60,000 under the Consumer Rights Act 2022 (and up to 4% of turnover for widespread infringements under the Omnibus Directive (EU) 2019/2161), cumulative with the injunction.
5. Publication of the penalty is possible, at your expense. This "name and shame" measure often has a reputational cost greater than the fine itself.

And you must keep in mind the penalty that depends on no inspection at all: the extension of the withdrawal deadline to 12 months and 14 days for each sale concluded without a compliant mechanism (Directive 2011/83/EU, art. 10). It applies as of right across the 27 EU member states. The detail appears in our file on withdrawal penalties.

How to be ready without stressing

The good news is that an inspection holds no surprises when the mechanism is correctly set up. Three habits are enough:

• Test your journey like a customer, in private browsing and without an account. If it takes you a while to find how to withdraw, the investigator will note it too.
• Check the consistency between the site, the terms and conditions and the pre-contractual information.
• Make sure you have the proof, not just the button: each request timestamped and archived, ready to be produced.

On this last point, make sure you know how long to keep your proofs of withdrawal and how to check that your button ticks every box.

An inspection is only a problem for sites that have nothing to show. If you can produce, on demand, the trace of a withdrawal received on a given date, you approach the subject calmly. If you are unsure of your situation, check in two minutes whether you are concerned.