Short answer: Subscription billing compliance in the EU requires correct VAT handling through MOSS, GDPR-compliant data processing, transparent pricing and invoicing, a right of withdrawal within 14 days, and adherence to local tax and consumer laws. Use this checklist to cover the essentials.
Key takeaways
- Register for VAT MOSS if selling digital services to EU consumers.
- Collect and store minimal customer data, with clear consent.
- Issue itemized invoices for every subscription payment.
- Offer a 14-day right of withdrawal for recurring services.
- Display total price including all taxes and fees upfront.
- Provide easy cancellation and data deletion options.
What you will find here
- 1. VAT on Digital Services: The MOSS System
- 2. GDPR Compliance for Subscription Data
- 3. Invoicing Requirements
- 4. Consumer Rights: Refunds, Cancellation, and Withdrawal
- 5. Price Transparency and Currency Rules
- 6. Local Variations and Country-Specific Rules
- 7. Record-Keeping and Audit Trails
- 8. Common Mistakes and How to Avoid Them
- 9. Handling B2B Subscriptions Correctly
- 10. Periodic Compliance Checks and Updates
If you sell subscription services to customers in the European Union, compliance isn’t optional. The EU has specific rules for VAT, data privacy, invoicing, and consumer rights that apply even if your business is outside the EU. Missing one requirement can lead to fines or chargebacks. This checklist walks through the critical areas.
1. VAT on Digital Services: The MOSS System
The EU treats subscription fees for digital services as supplies of services at the place of consumption. That means you charge VAT at the customer’s country rate, not yours. For example, if a German subscriber pays for your SaaS, you apply German VAT.
To simplify reporting, the EU offers the Mini One Stop Shop (MOSS) scheme. You register once in one EU member state and file quarterly returns covering all EU sales. MOSS applies to B2C sales of digital services. B2B sales usually shift VAT liability to the customer (reverse charge).
Check if your subscription qualifies as a digital service: anything delivered electronically, automatically, with minimal human intervention—SaaS, streaming, cloud storage, online courses. You must determine your customer’s location using two non-contradictory pieces of evidence, such as billing address, IP address, or bank country.
A practical step is to integrate an IP geolocation service at checkout to capture the customer’s country automatically. Then compare that with the billing address provided. If they conflict, request additional proof like a bank statement. Keep a log of this evidence for each transaction.
2. GDPR Compliance for Subscription Data
Collecting and storing subscriber data means you’re a data controller under GDPR. You must have a lawful basis for processing—consent or contract performance usually covers subscription billing. Always ask for explicit consent before using data for marketing.
Your privacy policy must say exactly what data you collect, why, and how long you keep it. Think payment card details (never store full numbers), name, email, IP address, and usage data. Offer subscribers the right to access, correct, and delete their data. For more guidance, read How to Comply with GDPR for Digital Product Sales.
Implement data minimization: only collect what’s necessary to process the subscription. Also set up a process for responding to data deletion requests within 30 days.
A common mistake is keeping old trial user data indefinitely. Set an automated deletion schedule for accounts that never converted to paid. Also, if you use third-party tools like Stripe or Mailchimp, verify they are GDPR-compliant and have a Data Processing Agreement in place.
3. Invoicing Requirements
EU law requires you to issue an invoice for every subscription payment, no matter how small. The invoice must include: your full business name and address, the customer’s name and address, your VAT number (or equivalent tax ID), the date of issue, a sequential invoice number, the service description, the net amount, the VAT rate and amount, and the total due in euros.
For digital services, VAT is always shown separately. You also need to mention if the reverse charge applies (for B2B). Send invoices via email or make them downloadable from the subscriber’s account. Store invoices for at least 10 years.
If you use a subscription platform like Chargebee or Recurly, check that your invoice template includes all required fields. Test with an EU-based credit card to ensure the VAT rate is applied correctly on the invoice.
4. Consumer Rights: Refunds, Cancellation, and Withdrawal
The EU Consumer Rights Directive gives subscribers a 14-day right of withdrawal for digital services, starting from the day the contract is concluded. If you provide the service immediately with the customer’s consent, you can still charge for the period before cancellation, but you must refund any advance payments.
You must clearly display cancellation terms before the purchase. For subscriptions that renew automatically, you must send a reminder before each renewal and let the customer cancel easily. The Hello world! post covers some basics of setting up subscription systems.
Make sure your refund policy is simple and prominently shown. If a customer exercises withdrawal, refund the payment (including standard delivery costs) within 14 days. You can deduct the value of service already consumed, but only if the customer explicitly agreed to start the service during the withdrawal period.
One practical tip: add a checkbox during checkout where the customer confirms they want immediate access and acknowledge they lose the withdrawal right once the service starts. Keep a record of that consent. This prevents disputes later.
5. Price Transparency and Currency Rules
Display the total price including all taxes, fees, and surcharges. Do not show prices excluding VAT unless you are a B2B seller with a clear indication. If you offer a free trial, clearly state when billing starts and what the regular price will be.
For currency, you can bill in any currency, but the invoice total must be shown in euros for EU customers if you use MOSS. However, many businesses bill in the customer’s local euro amount to avoid confusion. If you convert currencies, use the European Central Bank exchange rate from the day before the invoice date.
If you show prices in multiple currencies, keep the exchange rate updated at least daily. A common pitfall is displaying a price in USD but converting to euros using a stale rate, leading to a discrepancy between the quoted price and the invoice amount. Automate this with an API that fetches live ECB rates.
6. Local Variations and Country-Specific Rules
While EU directives harmonize many rules, local implementation varies. For example, France and Germany have specific requirements for archiving invoices and using specific software. Some countries require you to respond to inquiries in their official language.
Also, the rules for subscriptions that include physical goods differ—those follow distance selling rules and may require local VAT registration when your sales exceed a threshold. Always check the specific regulations in each country where you have significant subscribers.
For instance, in France, you must archive invoices in a format that cannot be altered after issuance, such as PDF/A. In Germany, you need to issue invoices with a sequential number that follows a logical pattern. If you sell to consumers in Poland, ensure your complaint handling process is available in Polish. These nuances are easy to miss but can trigger local fines.
7. Record-Keeping and Audit Trails
Keep a complete log of every transaction: what was sold, the price, VAT rate applied, customer country, evidence used to determine location, invoice copy, and any refund or cancellation date. The EU requires you to retain these records for at least 10 years, but some member states require longer.
Your billing system should generate an audit trail that makes it easy to produce on demand. If you use a payment gateway, ensure it provides transaction IDs and refund records. For MOSS filings, your records must match exactly what you report each quarter.
A helpful practice is to export a CSV of all transactions each quarter and store it in a secure, tamper-proof location like an encrypted cloud bucket. Tag each transaction with the MOSS quarter it belongs to. This simplifies audits and ensures you can respond quickly to any inquiry from tax authorities.
8. Common Mistakes and How to Avoid Them
One common mistake is applying your home country’s VAT rate instead of the customer’s rate. Another is not collecting location evidence upfront. Many businesses also forget to offer the 14-day withdrawal right clearly on the checkout page. Some store credit card data in violation of GDPR. Others fail to send renewal reminders before automatic billing.
To avoid these: automate VAT rate detection using geolocation tools. Build compliance checks into your signup flow. Use a subscription management platform that handles MOSS reports and GDPR data management. Regularly audit your invoicing and data retention practices.
9. Handling B2B Subscriptions Correctly
When selling to EU businesses, the reverse charge mechanism usually applies. That means the customer self-assesses VAT in their country, and you issue an invoice without VAT, stating “reverse charge” and referencing the relevant EU directive. You must obtain a valid VAT number from the customer and verify it through the EU’s VIES system before treating the sale as B2B.
If the customer cannot provide a valid VAT number, treat the sale as B2C and charge VAT at the customer’s country rate. Also, store a record of the VIES verification along with the invoice. Some businesses skip this step and face penalties during audits—always verify before invoicing.
10. Periodic Compliance Checks and Updates
EU tax and data protection rules evolve. A country may change its VAT rate, or a new data protection guidance may be issued. Schedule a quarterly review of your compliance setup: check VAT rates for the countries where you have subscribers, update your privacy policy if your data processing changes, and test your checkout flows for any new requirements.
Also, review the evidence you collect for location determination. The European Commission occasionally updates the list of acceptable evidence types. If you rely on IP geolocation alone, add a secondary check like billing address to stay compliant. Keeping a change log of your compliance processes helps during audits and internal reviews.
Frequently asked questions
Do I need a physical presence in the EU to charge VAT under MOSS?
No. You can register for the Mini One Stop Shop (MOSS) from anywhere in the world by choosing one EU member state as your ‘member state of identification.’ You don’t need a local office. The scheme covers all EU digital services sales to consumers.
What happens if I don’t comply with EU subscription billing rules?
Non-compliance can lead to fines from tax authorities, retroactive VAT assessments, and interest charges. GDPR violations can cost up to 4% of global annual turnover. Consumer protection agencies may issue penalty notices. Chargebacks from customers also increase. It’s best to address compliance proactively.
Can I use my own currency for billing EU subscribers?
Yes, you can bill in any currency, but for MOSS reporting you must convert amounts to euros. Use the European Central Bank exchange rate from the day before the invoice date. Many businesses bill in euros to simplify reconciliation.
How do I calculate VAT when a customer moves from one EU country to another?
The applicable VAT rate is based on the customer’s country of habitual residence at the time of supply. If a customer moves, you need to update their location and apply the new rate from the next billing period. You must collect evidence of residence at each change.
What information must be on a subscription invoice for EU customers?
The invoice must include your full business name and address, the customer’s name and address, your VAT number, invoice date, sequential invoice number, service description, net amount, VAT rate and amount, and the total in euros. It must also mention if the reverse charge applies for B2B.