Priority sector
Retailers, e-commerce operators and consumer brands depend on customer data, digital channels and complex supply chains.
Key obligations
Loyalty schemes, profiling, cookies and direct marketing require valid consent or another clear legal basis.
Online marketplaces have specific duties under the DSA, including the traceability of the traders that use them.
The AMLR sets an EU-wide limit of EUR 10,000 for cash payments for goods and services.
Larger groups face due-diligence and reporting duties, and customers expect evidence on how products are sourced.
Retail runs on customer relationships and supply chains. Data-driven marketing, loyalty programmes and e-commerce place data protection at the centre of the business, online sales channels bring platform rules, and large retailers answer for working conditions and environmental impacts far down their supply chains. Store networks and seasonal staff add whistleblowing and integrity obligations.
Data Protection Officer: for customer, loyalty, marketing and employee data;
digital channels: DSA obligations for marketplaces and compliance of online sales processes;
supply chain: supplier due diligence and readiness for sustainability reporting;
integrity programmes: whistleblowing channels, anti-corruption controls and cash-handling rules.
A free Compliance Assessment identifies the priorities for your business.
Related domains: Data Protection · Digital Services & Markets · Anti-Money Laundering · Third-Party & Supply Chain · Sustainability (CSRD/CSDDD)
Regulated functions: Data Protection Officer · Compliance Officer · Whistleblowing Officer · All sectors
General information as at October 2026; it does not constitute legal advice.
Request a free assessment designed for retailers and consumer brands.