E-Commerce

Cross-Border E-Commerce Regulations: Tax, Customs, and Compliance Guide

March 3, 20266 min read
Sınır ötesi e-ticaret mevzuatı ve gümrük prosedürleri

The Regulatory Maze of Cross-Border E-Commerce

While cross-border e-commerce offers tremendous opportunities for Turkish exporters, each country's different tax regulations, customs procedures, and consumer protection laws create a complex regulatory maze. In this guide, we will examine in detail the core legal requirements, tax obligations, and compliance strategies to be observed when conducting international e-commerce.

Cross-border e-commerce volume exceeded $2.1 trillion globally in 2025. This growth has prompted governments to take new steps in regulating and taxing digital trade. Notably, the EU's IOSS system and US e-commerce customs regulations have introduced important changes that sellers must heed.

Non-compliance with regulations in cross-border e-commerce does not merely result in fines; it can lead to serious consequences including shipments held at customs, customer dissatisfaction, and brand reputation damage. Proactive compliance is always less costly than reactive correction.

European Union E-Commerce Regulations

IOSS: Import One-Stop Shop System

The IOSS system, in effect since July 1, 2021, has fundamentally changed the VAT obligations of e-commerce sellers selling from outside the EU into the EU. The IOSS system can be used for shipments below an intrinsic value of EUR 150.

How IOSS works:

  • The seller or marketplace collects the VAT rate of the buyer's country at the point of sale
  • Collected VAT is declared and paid monthly to the IOSS registration country
  • Shipments are exempt from VAT payment at customs, thereby expediting the delivery process

IOSS registration requirements:

  • Sellers not established in the EU must appoint an intermediary
  • Monthly VAT returns must be submitted on time
  • Sales records must be retained for 10 years
  • Sales to each EU member state must be reported separately

Shipments Above EUR 150

IOSS cannot be used for shipments exceeding EUR 150. In this case, traditional import procedures apply:

  • Customs duty and VAT are paid by the buyer upon delivery (DDU/DAP delivery terms)
  • Alternatively, the seller can assume all tax and customs costs (DDP delivery terms)
  • The DDP model improves customer experience but increases the seller's tax compliance burden

EU VAT Rates

VAT rates of EU member states vary significantly, and knowledge of these rates is essential for correct VAT collection:

  • Germany: 19% (reduced 7%)
  • France: 20% (reduced 5.5%)
  • Italy: 22% (reduced 10%)
  • Spain: 21% (reduced 10%)
  • Netherlands: 21% (reduced 9%)
  • Austria: 20% (reduced 10%)

EU Product Safety Regulations

E-commerce sellers selling to the EU market must fully comply with product safety regulations:

CE marking: CE marking is mandatory for electrical products, toys, medical devices, and many other product categories. The CE marking indicates that the product conforms to EU safety, health, and environmental protection standards.

REACH regulation: REACH compliance is mandatory for products containing chemical substances. This covers textiles, cosmetics, cleaning products, and plastic products.

RoHS directive: Restricts the use of certain hazardous substances in electrical and electronic equipment.

Labeling requirements: Product labels must comply with EU standards, and consumer information must be provided in the target country's language.

US E-Commerce Regulations

De Minimis Rule

The US de minimis threshold is $800. Shipments below this amount are exempt from customs duty and import tax. This rule provides a significant advantage for Turkish e-commerce sellers, as many B2C shipments fall below this threshold.

However, this exemption does not apply to certain product categories:

  • Alcohol and tobacco products
  • Certain textile and apparel products (subject to quota restrictions)
  • Products subject to anti-dumping or countervailing duties
  • Products from countries under US sanctions

US Sales Tax

Following the 2018 Wayfair decision, US states can collect sales tax from remote sellers. Each state has its own sales tax rates, thresholds, and rules. Key information:

  • Economic nexus thresholds: Most states apply an annual threshold of $100,000 in sales or 200 transactions
  • Marketplace facilitator laws: Marketplaces like Amazon and eBay automatically collect sales tax for sales made through the platform
  • Tax-free states: Oregon, Montana, Delaware, New Hampshire, and Alaska have no general sales tax

FDA Requirements

Compliance with FDA (Food and Drug Administration) regulations is mandatory when importing food, cosmetics, medical devices, and pharmaceutical products into the US:

  • Food products: FDA registration, Nutrition Facts label, allergen declarations
  • Cosmetics: Ingredient listing, safety testing, labeling standards
  • Medical devices: 510(k) notification or PMA approval, device listing and facility registration
  • Dietary supplements: DSHEA compliance, structure-function claims restrictions

FCC Regulations

FCC (Federal Communications Commission) compliance may be required for electrical and electronic products. This covers radio frequency-emitting devices, computer hardware, and communications equipment.

Customs Procedures and Documentation

Core Customs Documents

Documents required for cross-border e-commerce shipments:

Commercial Invoice: The most fundamental document of the shipment. It must include seller and buyer information, product description, quantity, unit price, total value, country of origin, and Incoterms conditions.

Packing List: Details the contents, weight, and dimensions of each package in the shipment.

Certificate of Origin: Proves that products are of Turkish origin. Under the EU Customs Union, an A.TR movement certificate is used; for countries with free trade agreements, EUR.1 or EUR-MED documents are used.

HS Code (Harmonized System): Determining the correct HS tariff classification code for each product is critical. An incorrect HS code can result in overpayment of duties or problems at customs.

E-Commerce Customs Declaration

Many countries apply simplified customs declarations for e-commerce shipments. This expedites the customs process for low-value shipments. However, simplified declaration rules vary from country to country.

ETGB (Electronic Commerce Customs Declaration)

In Turkey, the ETGB is used for e-commerce shipments below EUR 7,500 and 300 kg. This declaration type offers a simpler and faster process compared to a standard export declaration. Exports made via ETGB are also eligible for government support programs.

GDPR and Data Protection Compliance

Core GDPR Principles

Turkish e-commerce businesses selling to EU customers must comply with GDPR (General Data Protection Regulation). This regulation imposes strict rules on the processing of personal data.

Personal data scope: All customer data including name, address, email, phone number, IP address, cookie data, payment information, and purchase history falls under GDPR.

Core obligations:

  • Explicit consent: Explicit and informed consent must be obtained from customers for processing personal data
  • Data minimization: Only necessary personal data should be collected
  • Purpose limitation: Data must be used only for stated purposes
  • Storage limitation: Data should be retained only for as long as necessary and then deleted
  • Access and erasure rights: Customers can request access to their data and request its deletion

GDPR Compliance Steps

  1. Privacy policy: Prepare a comprehensive and understandable privacy policy
  2. Cookie notice: Inform users about cookie usage on your website and obtain consent
  3. Data processing agreements: Sign data processing agreements with third-party service providers
  4. Data breach procedure: Establish a procedure for notification within 72 hours in case of a data breach
  5. DPO appointment: Appoint a Data Protection Officer for companies conducting large-scale data processing

CCPA (California Consumer Privacy Act)

The US state of California applies a data protection law similar to GDPR. Additional compliance requirements may apply to businesses selling to California consumers. CCPA grants consumers the right to opt out of the sale of their personal data and request its deletion.

Turkey's E-Export Legislation

Export Support and Incentives

Under the Ministry of Commerce's e-export support programs:

  • Marketplace commission support: Partial coverage of commission fees for platforms like Amazon and eBay
  • Website and infrastructure support: Support for e-commerce website setup and digital infrastructure investments
  • Digital marketing support: Contribution to digital marketing expenses such as Google Ads and social media advertising
  • Training and consulting: E-export training programs and expert consulting services

VAT Refund

Sales made within the scope of e-export qualify for VAT refund rights. To reclaim VAT charged under the export exemption:

  • Export invoices and customs declarations must be issued
  • Payment documents and bank statements must be retained
  • Monthly VAT returns must be submitted on time

E-Export Restrictions

Certain product categories are subject to e-export restrictions:

  • Strategically important products (dual-use goods)
  • Cultural assets and antiques
  • Products derived from endangered species (under CITES)
  • Certain agricultural products (export quotas may apply)

Intellectual Property and Brand Protection

International Trademark Registration

When selling internationally through e-commerce, registering your trademark in target markets is critically important:

  • Madrid Protocol: Trademark registration in multiple countries through a single application via WIPO (World Intellectual Property Organization)
  • EUIPO: European Union Trademark registration valid throughout the EU
  • USPTO: Trademark registration with the US Patent and Trademark Office
  • Platform protection: Registration with platform-based brand protection programs such as Amazon Brand Registry and eBay VeRO

Counterfeit and Infringement Protection

Take proactive measures to prevent counterfeiting of your brand and products. Use automated monitoring tools to scan for counterfeit products across platforms. In case of infringement, use platform reporting mechanisms and legal processes.

Practical Compliance Recommendations

1. Create a Compliance Checklist

Prepare a comprehensive compliance checklist for each target market. Detail tax obligations, product safety requirements, labeling standards, and consumer rights in this checklist.

2. Seek Professional Support

Work with international tax advisors, customs brokers, and legal counsel. Professional support on regulatory compliance significantly reduces penalty risks and costs over the long term.

3. Use Automation Tools

Use automation tools for tax calculation, customs declaration, and compliance management. Tools like Avalara, TaxJar, and SimplyDuty automate complex tax calculations.

4. Monitor Regulatory Changes

International trade legislation is constantly evolving. Regularly follow industry bulletins, official gazette announcements, and platform updates.

5. Maintain Record-Keeping Discipline

Establish a systematic record-keeping system for all sales transactions, customs documents, tax returns, and customer data. Records may need to be retained for 10 years in the EU and 5 years in the US.

Conclusion: Foundations of Compliant E-Exports

While cross-border e-commerce legislation is complex, it becomes a manageable area with proper planning and professional support. Being informed about the EU IOSS system, the US de minimis rule, GDPR regulations, and Turkey's e-export incentives is a prerequisite for success in international e-commerce.

Regulatory compliance is not merely a legal obligation but also a competitive advantage. Compliant sellers experience faster processing at customs, earn customer trust, and build sustainable business models. For Turkish exporters, learning and applying the rules of cross-border e-commerce is the key to lasting success in the global market.