Managing Customs Compliance in E-Commerce

 

PROFESSIONAL TRAINING

Managing Customs Compliance

in E-Commerce

The EU Customs Union, the disruption of cross-border trade, and the road to the 2026 Customs Reform

 

Compliance

Security

Enforcement

Reform 2026

 

customscompliancepro.com

 

Course Outline

 

Hour

Part

Title

Hour 1

Part I

A Changing Trade Landscape — compliance fundamentals, the EU Customs Union, and the e-commerce disruption

Hour 2

Part II

Safety, Security & Protection — AEO, ICS2, VAT reform, the Green Agenda, sanctions and tariffs

Hour 3

Parts III–IV

Enforcement & Mitigating Risk — OLAF, EPPO, risk management, and protecting the organisation

Hour 4

Part V

The 2026 Customs Reform — the five pillars and the removal of the €150 de minimis on 1 July 2026

 

LearningOutcomes

By the end of the course participants will be able to:

›       Understandthe framework — explain the legal and operational architecture of the EUCustoms Union.

›       Analysethe disruption — assess how e-commerce reshaped customs and overwhelmed legacymodels.

›       Navigatesafety & security — apply AEO, ICS2, VAT and green-agenda obligations inpractice.

›       Anticipateenforcement — read national and EU-level enforcement and its business impact.

›       Mitigateorganisational risk — build internal controls, screening and a culture ofcompliance.

›       Preparefor reform — position for the 2026 reform and the 1 July 2026 de minimisremoval.

 

 

Part I — Customs Compliance in a Changing Trade Landscape

 

Chapter 1 — Compliance is a culture, not a checklist

 

“Partnership-based compliance — regulatory frameworks that reward transparency and voluntary compliance, foster predictability, and build mutual trust between authorities and economic operators.”

— Vilnius Manifesto, October 2025

 

Customs compliance is the disciplined observance of legal andprocedural requirements set by national and international authorities for thecross-border movement of goods. It demands a solid grasp of trade law andadministrative process in both importing and exporting contexts. Critically, itmust be embedded throughout the entire business — declarants, logistics,warehouse staff, drivers, CFOs and procurement alike.

Coreelements

›       Accuratedocumentation and data

›       Correctclassification and valuation

›       Timelypayment of duties and taxes

›       Lawful,transparent trade practices

 

Threedomains of knowledge

Effective compliance requires a comprehensive grasp of threeintertwined bodies of knowledge and how they interact across the supply chain:

›       Legislation& international rules — the UCC, non-fiscal laws, and WCO/WTO frameworksgoverning cross-border trade.

›       Technologicaldevelopments — ICS2, the EU Single Window, the Customs Data Hub and blockchaininitiatives.

›       Supply-chainprocesses — B2B, B2C and platform-driven business models, and how goods anddata actually flow.

Knowledge in just one domain is not enough: the moderncompliance challenge lives precisely at the intersection of law, technology andsupply-chain design.

 

Therisk-based compliance cycle

Organising compliance at any scale follows a continuous cycle:understand requirements → identify risks → set up environment → execute &audit. The cycle is iterative: policies are implemented, monitored, androutinely reviewed through internal audits to foster continuous improvement.

 

Whyeffective compliance pays off

Access to simplified procedures; lower legal risk; fewerpenalties; brand integrity; customer satisfaction; competitive edge withauthorities and trading partners.

 

 

 

Chapter 2 — The EU Customs Union

The customs union is one of the EU’s earliest and mostenduring achievements — vital to the integrity and prosperity of the singlemarket. A single external border allows goods to move freely inside the Union;all internal border controls have been removed under one shared body of customslaw; 27 national administrations carry out operations but act as a singleentity.

By thenumbers

›       Launched1 July 1968 — ahead of schedule.

›       1993:customs controls at internal EU borders abolished.

›       TheEU customs union accounts for roughly 15% of world trade.

›       Importsfrom third countries exceeded €2 trillion in 2019; intra-EU goods exports stoodat approximately €4,025 billion in 2024.

›       €27billion in customs duties collected in 2024 (approximately €20 billion to theEU budget as Traditional Own Resources).

›       MemberStates retain 25% of duties collected to cover collection costs.

 

CustomsUnion vs Free-Trade Area

Customs Union

Free-Trade Area

Common external tariff on non-member imports

No shared external tariff

Goods move freely throughout the Union once cleared

Each member keeps its own external tariff

Managed by national services as one entity

Origin rules needed to prevent trade deflection

 

 

 

Chapter 3 — The shifting role of customs

Past

Present

Future

Revenue first — traditional B2B, manual processing, revenue collection as the core mission

Volume & vacuum — exponential transaction growth, a knowledge vacuum, expanding non-fiscal measures

Innovate or fail — disruptive engagement, innovation, operational compliance at digital scale

 

Today’s customs manages risk across four domains on behalf ofmany ministries, not just finance: Environment ·Economy · Health · Safety & Security

 

 

 

Chapter 4 — Non-fiscal tasks

Customs non-fiscal tasks span more than 25 distinct legalregimes across four policy domains. As prohibitions and restrictions (P&R)increase, the skill-level set of a customs declarant has drastically changed.

Domain

Examples

Environment

Waste shipments, ozone-depleting & fluorinated gases, mercury, radioactive material

Economy

Counterfeit/IP goods (Reg. 608/2013), dual-use & military goods, cultural goods, anti-torture

Health

Product & food safety, CITES species, veterinary checks, organics, fisheries, FLEGT timber

Safety & Security

Weapons & ammunition, vehicle-crime checks, public-order protection at the border

 

 

 

Chapter 5 — The e-commerce disruption

Thedisruption in figures

Metric

Figure

Growth in three years

4× — from 1.4 billion to 5.8 billion items

Daily volume by end-2025

16 million parcels per day crossing EU customs

Origin concentration (2024)

91% of low-value shipments came from China

Share of all imported items

97.9% — but only 2.1% of total import value. Average value: ≈ €8.82

Non-compliance rate (2025 PCA)

More than 50% of 20,000 toys & small electronics tested failed EU product rules

 

Whatchanged — in three lines

›       Supplychains flattened — no wholesaler, no EU-based importer.

›       Informationflows are inconsistent — data comes from platforms, not structured contracts.

›       Customsare flooded with small, low-value consignments, many under-declared or missingessential data.

 

 

 

Chapter 6 — Customs compliance today and tomorrow

TheComprehensive EU Toolbox (COM(2025) 37, 5 February 2025)

Stream

Content

Customs reform

Removal of the €150 relief, €3 transitional duty, deemed importer, Data Hub and EUCA

Digital regulation

Full DSA & DMA application to non-EU platforms; transparency duties on VLOPs

Market surveillance

General Product Safety Regulation, Safety Gate, CRMS and Priority Control Areas

Environment & consumers

Ecodesign Regulation and the Digital Product Passport; consumer-protection programmes

 

TheDigital Product Passport (DPP)

Under Reg. (EU) 2024/1781, the DPP is a structured,machine-readable record — accessible via QR code or RFID — that travels with aproduct across its lifecycle. It carries identification, conformity and CEdata, material composition, carbon footprint, repair and end-of-lifeinformation, and supply-chain traceability. Interoperable with the Data Hub(Art. 32 UCC). The Battery Passport applies from 18 February 2027; textiles,furniture, tyres and electronics follow through 2027–2029.

 

Part I —Key Takeaways

 

1

Compliance is a culture — it must reach the whole organisation, built on partnership and transparency.

2

The Union is a protective skin — one external border, free internal movement, 15% of world trade.

3

The mandate has expanded — 25+ non-fiscal regimes across environment, economy, health and security.

4

E-commerce broke the model — 5.8 billion low-value items in 2025; volume, not value, drives the workload.

5

A whole-of-EU response — customs reform, digital regulation, market surveillance and the DPP together.

 

 

Part II — Safety, Security and Protection

 

Chapter 1 — AEO: a trusted partnership

Authorised Economic Operator status is a formal partnershipbetween customs and operators who consistently demonstrate compliance. Itrewards reliability with reduced controls, priority treatment and simplifiedprocedures.

AEOC — Customs simplifications

AEOS — Security & safety

Faster, streamlined clearance

Advance notice of physical checks

Simplified procedures

Fewer documentary and physical checks

Reduced or waived guarantees

Reduced dataset for summary declarations

Accelerated application handling

Choice of inspection location

 

The AEOcriteria

›       A3-year compliance record (minor, non-deliberate infringements may betolerated).

›       Reliablerecord systems with internal controls and audit trails.

›       Financialsolvency, assessed over the preceding three years.

›       Professionalcompetence through experience or qualification (AEOC).

›       Securityand safety measures, verified on site (AEOS).

 

 

 

Chapter 2 — ICS2: advance cargo intelligence

The Import Control System 2 is the EU’s pre-arrival safety andsecurity programme — a large-scale advance cargo data system and a first lineof defence for the Single Market. Operators file an Entry Summary Declarationbefore arrival (even before loading). Customs assess data electronically andtarget threats at the earliest point.

Phasedrollout

›       Release1 — Pre-loading advance cargo information (PLACI) for express and postal airconsignments.

›       Release2 — ENS pre-arrival data for all air cargo — dual filing enabled at HAWB level.

›       Release3 — Surface and multimodal ENS data — maritime, road and rail.

 

Referralscenarios

Code

Name

Meaning

PLR

Pre-loading referral

Carrier notified before loading

PAR

Pre-arrival referral

Carrier notified before arrival

RMR

Risk-mitigation referral

Action required to mitigate risk

DNL

Do-not-load referral

Cargo must not be loaded

 

 

 

Chapter 3 — The 2021 VAT e-commerce reform

The 2021 overhaul removed the old €22 VAT exemption — allimported goods now carry VAT — and created single-return simplifications.

Scheme

What it does

IOSS

Import One-Stop Shop: declare and remit VAT on B2C imports ≤ €150 via one EU return. VAT charged at the destination Member State’s rate.

OSS

One-Stop Shop for intra-EU distance sales and certain services.

Special Arrangement

Simplified collection where IOSS is not used, via the declarant (postal/express operator).

Deemed supplier

Marketplaces become liable for the VAT on sales they facilitate.

From 1 July 2026: VATcollection sits alongside the new €3 customs duty — the two are calculated andcollected separately, even on the same low-value parcel.

 

 

 

Chapter 4 — Customs and the Green Agenda

CBAM —Carbon Border Adjustment Mechanism (Reg. (EU) 2023/956, recalibrated by Reg.(EU) 2025/2083)

›       Appliesto iron & steel, aluminium, cement, fertilisers, electricity and hydrogen.

›       Definitiveregime from 1 January 2026 (transitional phase ran October 2023–December 2025).

›       Newde minimis: 50 tonnes net mass per importer/year.

›       Firstannual CBAM declaration due 30 September 2027 for 2026 imports.

›       Indirectrepresentatives automatically become the declarant and bear the fullobligations.

 

EUDR —Deforestation-free trade (Reg. (EU) 2023/1115, amended by Reg. (EU) 2025/2650)

›       Sevencommodities: cattle, cocoa, coffee, oil palm, rubber, soya and wood — pluslisted derivatives.

›       Adue-diligence statement (DDS) reference must appear in the customs declaration.

›       Appliesfrom 30 December 2026 (large operators) and 30 June 2027 (micro and small).

 

 

 

Chapter 5 — The EU sanctions regime

Twenty successive packages — the most recent adopted 23 April2026 (Council Reg. (EU) 2026/506). The latest adds sectoral crypto-assetrestrictions, a phased LNG terminal-services ban (1 January 2027), and marksthe first activation of the EU anti-circumvention tool against a third country(Kyrgyzstan). Directive (EU) 2024/1226 exposes individuals and legal persons toharmonised criminal penalties for sanctions breaches across all Member States.

 

List

Scope

EU CFSP list

Mandatory for all EU operators; a match triggers comprehensive restrictions.

US SDN list (OFAC)

Advised for secondary-sanctions exposure, especially with USD or US-touch trade.

US EAR / export controls

Apply where US-origin content or technology is present in the supply chain.

Other national lists

UK, Switzerland, Canada and others, calibrated to company risk appetite.

 

Part II— Key Takeaways

 

1

Security is structural — post-9/11, pre-arrival data and risk targeting are standard; customs are strategic actors.

2

AEO is a partnership — combined AEOC + AEOS maximises benefits; fraud or repeated errors risk suspension.

3

Data drives everything — ICS2 and IOSS depend on accurate, timely data — respond to referrals fast.

4

Customs enforce the Green Deal — CBAM and EUDR add data and documentary duties; representatives share liability.

5

Sanctions carry criminal risk — 20 packages, shadow-fleet screening, harmonised criminal penalties — screen continuously.

 

 

Part III — Enforcement and Risk

 

Chapter 1 — OLAF: the EU anti-fraud office

The European Anti-Fraud Office investigates fraud, corruptionand any illegal activity affecting the EU’s financial interests — includingcustoms fraud, which directly erodes Traditional Own Resources. OLAF conductsindependent administrative investigations, coordinates with national customsand police authorities, recovers lost duties and recommends sanctions, andsupports the design of EU anti-fraud policy. OLAF cannot prosecute — it referscriminal matters to national authorities or the EPPO.

WhatOLAF targets

Fraud type

Description

Undervaluation

Declaring artificially low values to evade duty — endemic in low-value e-commerce flows.

Origin fraud

False origin claims to dodge anti-dumping duties or wrongly claim preferences.

Misclassification

Wrong commodity codes to attract a lower duty rate.

Smuggling & diversion

Concealment, transit fraud and diversion of goods under suspension.

Sanctions circumvention

Rerouting and mislabelling to evade restrictive measures.

Counterfeiting

IP-infringing goods entering through fragmented parcel flows.

 

Whatthis means for operators

›       Recordsare evidence — OLAF investigations can reach back years.

›       Inconsistenciesbetween declarations, invoices and transport data are red flags.

›       Recoveryof evaded duties falls on the debtor — and representatives can be jointlyliable.

›       Buildaudit-ready files that reconcile commercial, transport and customs data.

 

 

 

Chapter 2 — EPPO: the European Public Prosecutor

The European Public Prosecutor’s Office investigates andprosecutes crimes against the Union budget — including serious customs and VATfraud — directly before national courts. Unlike OLAF, EPPO can bring chargesand pursue convictions. It operates across participating Member States, idealfor fraud spanning several jurisdictions.

OLAF → EPPO: the sameunder-declaration that triggers a duty recovery can, at scale or with intent,become a prosecutable offence — with personal exposure for responsibleindividuals.

 

 

 

Chapter 3 — The Common Risk Management Framework

The CRMF (anchored in Article 46 UCC) is the EU’s sharedapproach to customs risk — designed to apply equivalent controls at everyexternal border, so that the point of entry does not determine the level ofscrutiny. Shared risk profiles and priority control areas are applied EU-wide;the CRMS and related platforms circulate risk information betweenadministrations.

The gap: the CRMF is common inlaw but its application is not — intensity and coverage vary by Member State.

 

 

 

Chapter 4 — Enforcement by Member States

Fourstructural divergences

Divergence

Description

Fragmented sanctioning

Some States treat infringements as administrative, others as criminal — undermining uniform reading of Arts. 42–45 UCC.

Valuation vs transfer pricing

All systems struggle to reconcile WTO customs valuation with OECD transfer-pricing rules; Hamamatsu is read differently.

Uneven risk management

CRMF anchored in law but applied with variable intensity; weak real-time access to pre-arrival data.

Patchy digitalisation

Automated clearance and post-entry audit tools remain unevenly deployed across administrations.

 

Theborder-shopping problem

When controls are demonstrably weaker in some Member States,importers route goods through the path of least resistance. Once cleared intofree circulation, goods move EU-wide — undermining all 27 administrations. TheECA explicitly recommended a permanent EU-level operational risk-managementlayer — recommendations now embodied in the EUCA and Data Hub.

 

Part III— Key Takeaways

 

1

Two-level enforcement — OLAF investigates; EPPO prosecutes; Member States execute controls on the ground.

2

Customs fraud is a priority — undervaluation, origin and classification fraud dominate — records are your defence.

3

Risk management is uneven — the CRMF is common in law but variable in practice across the 27 administrations.

4

Divergence enables abuse — fragmented sanctions and weak points invite border-shopping and revenue leakage.

5

Valuation is unresolved — customs valuation vs transfer pricing (Hamamatsu) still lacks unified EU guidance.

 

 

Part IV — Mitigating Risk

 

A six-element compliance model

Element

What it covers

1 · Culture

Embed a code of conduct and shared compliance values

2 · Educate customers

Set expectations on data, documents and obligations

3 · Protect the organisation

Screening, due diligence and denied-party checks

4 · Educate the organisation

Train staff across functions on their duties

5 · Operational compliance

Procedures, controls, records and audit

6 · Innovate

Use technology and data to stay ahead

 

 

 

Element 5 — The Internal Compliance Management System(ICMS)

An ICMS is the backbone of operational compliance — and aprerequisite for AEO and, in future, Trust & Check status. It turns one-offgood intentions into repeatable, auditable processes that survive staffturnover and scale with volume.

Foundations

›       Namedcompliance owner and escalation path.

›       DocumentedSOPs for the full declaration lifecycle.

›       Masterdata for classification, valuation and origin.

›       Mandateand representation records on file.

 

Controlsand assurance

›       Four-eyeschecks on high-risk declarations.

›       Automatedvalidation and exception handling.

›       Continuousdenied-party screening.

›       Periodicinternal and mock audits with actions tracked.

 

 

 

Representation — Articles 18–19 UCC

Direct representation

Indirect representation

In the name of and on behalf of the principal

In own name, on behalf of the principal

The principal is the declarant

The representative is the declarant

Liability rests with the represented person

Joint and several liability for the debt

DE 3/21 code = ‘2’

Common where the principal is non-EU

CBAM, EUDR and sanctions allpush liability onto the indirect representative who becomes the declarant for anon-EU importer.

 

 

 

Denied-party screening

›       Buildthe dataset — customers, suppliers, UBOs, consignees, vessels, end-users.

›       Matchagainst lists — automated screening with fuzzy matching to catch variants.

›       Resolvehits — investigate, document and clear false positives; escalate true matches.

›       Re-screenon change — lists update constantly; re-run on every new order, new party, listupdate.

A one-off check at onboarding is not enough. Effectivescreening keeps an auditable record of every decision — the evidence thatprotects the organisation and its officers.

 

Part IV— Key Takeaways

 

1

Six elements, one system — culture, customers, protection, education, operations and innovation reinforce each other.

2

Representation = liability — indirect representation makes you the declarant, jointly liable — screen and document the principal.

3

Screen continuously — denied-party screening is provable, repeatable and re-run on every relevant change.

4

An ICMS is the backbone — documented procedures, controls, records and audit — and the gateway to AEO / Trust & Check.

5

Competency is an asset — the EU framework professionalises customs work and underpins the AEO competence test.

 

 

Part V — The 2026 Customs Reform

 

Chapter 1 — The four 2040 scenarios

Scenario

Description

A — Open Global, Deep Union

Multilateralism restored; EU acts as one. Customs as facilitator and data partner.

B — Open Global, Shallow Union

Trade survives; national systems diverge. Regulatory arbitrage and port-shopping pressure.

C — Fragmented Global, Deep Union

Blocs, sanctions and export controls ubiquitous; EU integrated. Customs as strategic geopolitical instrument.

D — Fragmented Global, Shallow Union

Blocs plus an uneven union; unilateral action. Customs overwhelmed; internal-market fragmentation risk.

 

 

 

Chapter 2 — The ten WPG proposals

Convened by Commissioner Gentiloni on 26 November 2021,chaired by Arancha González Laya, the Wise Persons Group published”Putting More Union in the European Customs” on 31 March 2022. The2026 legal text is the operational translation of its ten proposals.

No.

Proposal

1

Data & digitalisation → EU Customs Data Hub

2

Risk management → EUCA risk layer

3

E-commerce → deemed importer + €150 removal

4

Trusted traders → Trust & Check scheme

5

Governance → EU Customs Authority

6

Financial & non-financial risks → expanded mission

7

Controls → systems-based, audit-led

8

Revenue → €3 duty, own-resources integrity

9

Stakeholders → structured partnership

10

Resources → EU customs handling fee

 

 

 

Chapter 3 — The five pillars of the reform

Pillar

What it is

Timeline

I — EU Customs Authority

Permanent Union-level body coordinating risk analysis; Member States remain operational executors.

2028

II — EU Customs Data Hub

Central infrastructure (Arts. 28–44 new UCC); 10-year retention; AI analytics; interoperable with CBAM, EUDR, DPP, ICS2.

2028–2038

III — Trust & Check trader

New tier above AEO — deeper data transparency in exchange for largely automatic clearance at operator level.

2032

IV — Deemed importer

Platforms assume customs liability for distance sales; one data set on behalf of the consumer.

2028

V — Penalty floor

Union-level floor for systematic non-compliance; Commission backstop powers.

2026+

 

 

 

Chapter 4 — 1 July 2026: the de minimis falls

Council Regulation (EU) 2026/382 of 11 February 2026 abolishesthe €150 duty relief. From 1 July 2026 a €3 flat per-item duty applies onlow-value B2C imports under simplified channels, until 1 July 2028. A new TARICpreference code ‘5’ applies the duty centrally at acceptance.

Channel

Scope

Effect from 1 July 2026

H7 — Super-reduced

Low-value B2C, any VAT regime

€3 duty applies; P&R goods excluded → must use H1

H1 — Full declaration

Compulsory for P&R goods; non-IOSS/B2B ≤ €150

Normal duty applies; preferences available

H6 — Postal

Postal operator, value ≤ €1,000

Goods ≤ €150 carry the €3 duty as for H7

 

Implementationhorizon

Milestone

Date

€150 relief removed; €3 duty begins

1 July 2026

Deemed importer; EUCA operational

2028

€3 transitional duty ends

1 July 2028

Trust & Check deployment

2032

Full Data Hub deployment

2038

 

Before 1July 2026 — action checklist

›       Mapyour channels: decide H7/H1/H6 per flow; configure for the new TARIC code ‘5’.

›       Re-priceand disclose: build the €3 duty into landed-cost and checkout transparency.

›       Revieworigin strategy: identify where IOSS forfeits FTA preferences versus H1routing.

›       Fixdata readiness: structured, exportable product and party data — Data-Hub-ready.

›       Confirmrepresentation: clarify deemed-importer roles and indirect-representationliability.

›       Runa mock cut-over: test the 1 July switch end-to-end before it is live.

 

 

 

The Vilnius Manifesto — six pillars

Pillar

Vision

Unified

Coherent interpretation and enforcement across all Member States; no competitive distortion.

Cooperative

Trust-based partnerships between authorities, operators and academia.

Simplified

Less fragmentation and administrative burden, with robust controls maintained.

Digitised

A single EU Customs Data Hub, interoperable systems and AI, accessible to firms of all sizes.

Resilient

Able to absorb geopolitical disruption and protect critical supply chains.

Professionally competent

Skilled people across customs, intermediaries and compliance functions, trained and certified.

 

Part V —Key Takeaways

 

1

Compliance is a culture — partnership-based, organisation-wide — the Vilnius Manifesto’s enduring message.

2

Liability moves upstream — deemed importer, representation and Art. 243(5) put the data-holder on the hook.

3

Data is the system — ICS2, the Data Hub and the DPP make timely, accurate, structured data non-negotiable.

4

1 July 2026 is real — the €150 relief ends and a €3 per-item duty begins — prepare channels and pricing now.

5

Invest to be trusted — control architecture earns AEO and, from 2032, Trust & Check facilitation.

 

\