Guide to Spain’s E-commerce Legislation (LSSI) and Regulations: What Online Businesses Must Know to Operate Legally
Spain’s e-commerce market continues to expand. According to the CNMC, online sales exceeded €114.8 billion in 2025, representing annual growth of 20.6%. Businesses selling online in Spain must comply with EU legislation and specific Spanish rules, including stricter requirements concerning consumer guarantees and unsolicited marketing. This guide covers Spain’s principal e-commerce law (LSSI), consumer rights, data protection, taxation and environmental obligations.
Spain’s E-commerce Law (LSSI): Overview and Scope
Spain e-commerce legislation is primarily governed by Law 34/2002 on Information Society Services and Electronic Commerce, commonly called the LSSI. Enacted in 2002 to implement the EU E-commerce Directive, the LSSI acts as a code of conduct for online business in Spain, laying down rules to ensure websites and digital services operate transparently and fairly.
Published in the Official State Gazette (BOE) in 2002, the LSSI incorporates principles from European Directive 2000/31/CE into Spanish law. The law has been updated to meet evolving digital commerce needs, with the most recent amendment through Royal Decree Law 9/2024, which includes new regulations on marketplaces and updates to the penalty framework, aligning with Regulation 2022/2065 of the European Parliament.
The LSSI applies to “information society services” – any service provided electronically for commercial gain, whether selling goods, offering services, or monetizing content. Its key objective is enhancing trust in the digital marketplace by protecting consumers and holding online businesses accountable under Spain e-commerce regulations.
Although the internet has evolved enormously since 2002, the LSSI remains the cornerstone of Spanish e-commerce regulation, updated over the years to address new challenges like online marketplaces and to stay aligned with broader EU digital policies.
The LSSI is why Spanish online businesses must identify themselves clearly on their websites, display truthful information, respect consumer rights, and refrain from spam practices.
Spain’s booming e-commerce market presents exciting opportunities, but navigating its legal complexities can be challenging, especially for new entrants. At Lawants, we specialize in assisting foreign entrepreneurs with expert legal guidance to ensure their business setups fully comply with Spanish e-commerce regulations right from the start. Our dedicated team of international lawyers and financial advisors offers comprehensive support, handling every legal detail so you can confidently focus on growing your online business in Spain. Contact us to begin your venture with complete peace of mind.
Purpose and Key Objectives of the LSSI in Spain
The LSSI was introduced to make the internet a safer, more reliable place to do business. Spain wanted to foster digital commerce growth while safeguarding users. Here are its main objectives:
- Protect consumer rights: The LSSI ensures online shoppers have strong protections similar to traditional retail, including transparency about sellers and the right of withdrawal (a period during which consumers can change their mind and return online purchases). By requiring clear information and fair terms, the law shields consumers from fraud or abuse.
- Promote transparency and trust: A core goal of the LSSI is building trust between all parties in online transactions. Businesses must openly provide identifying details, truthful product information, and honest advertising. When shoppers know who they’re dealing with and see all conditions upfront, they feel safer – encouraging more e-commerce activity. This transparency is legally mandated as the foundation of trust in digital business.
- Encourage the digital economy: By setting clear legal frameworks (confirming electronic contracts and signatures are valid, allowing digital customer communications under guidelines), Spain e-commerce law removes ambiguity about what’s allowed, encouraging innovation and expansion of online services.
- Align with EU regulations: The LSSI implements the EU E-commerce Directive, ensuring Spanish e-commerce legislation aligns with European standards for smoother cross-border trade. This alignment makes cross-border online trade easier – if you comply with LSSI, you’re largely in line with EU norms.
- Ensure fair competition: By holding all online businesses to the same standards (honest practices, proper disclosures), Spain e-commerce regulations prevent unscrupulous operators from gaining unfair advantages while building consumer confidence. The law outlaws misleading online practices and spam, leveling the playing field.
Who Must Comply with the LSSI and What Activities are Covered
One of the first questions online entrepreneurs ask is: Does the LSSI apply to me? In Spain, the answer is usually yes if you’re doing business online. The LSSI covers any person or company engaging in economic activity online in Spain for profit, whether directly (selling products/services) or indirectly (earning ad revenue, etc.). Here’s who must comply:
- Online stores and service websites: E-commerce sites selling to Spanish customers fall under Spain e-commerce law, including B2C retail and B2B platforms. Even foreign companies targeting Spanish consumers (offering Spanish-language sites with Euro pricing and Spanish shipping) must comply with LSSI requirements.
- Marketplaces and auction platforms: Running online marketplaces or auction sites triggers LSSI obligations under Spain e-commerce regulations, even if you only connect buyers and sellers without selling goods directly. Recent updates explicitly address marketplace responsibilities to ensure compliance across the board.
- Digital content and monetized platforms: E-commerce law isn’t just about physical products. Monetized blogs, YouTube channels, social media posts generating income, online training programs, or apps earning through ads or subscriptions must comply with Spanish e-commerce legislation. For example, a blog based in Spain with advertising revenue is considered an online service provider and must follow rules on advertising content.
- Online marketing communications: Activities like sending promotional emails, newsletters, WhatsApp messages, or other digital marketing to Spanish recipients is regulated by the LSSI. Even if your website is informational, the moment you start emailing prospects or customers with commercial intent, you must comply with consent and content rules.
- Business websites: Even purely informational company websites must display legal notices with company identification details under Spain e-commerce law, as required by Section 10 of the LSSI. The rationale is transparency: any site representing a business offers an information society service, so users have the right to know who’s behind it.
In summary, if you generate income online and Spain is in your market (either because you’re established there or targeting Spanish users), assume the LSSI applies. Spain doesn’t distinguish between big or small online players – a lone self-employed seller and a giant e-tailer both have obligations if they sell to Spain.
Business Transparency and Information Requirements in Spain E-commerce Legislation
Transparency is a pillar of Spain e-commerce law. Online businesses must be fully transparent about their identity, contact details, pricing, and terms under Spanish e-commerce legislation. Not only is this mandated by the LSSI and consumer protection laws, but it’s also good business practice – clear information builds trust with customers. Think of this as a compliance checklist for your site’s legal info and customer disclosures.
Legal Notice and Company Identification
Every Spanish e-commerce site must display a Legal Notice (Aviso Legal) that clearly identifies the service provider. Article 10 of the LSSI requires online businesses to provide users with certain basic corporate information, easily and permanently accessible on the website. In practice, this usually means a dedicated page (linked in the footer) listing:
- Business name and legal form: Full legal name and legal form (S.L., S.A., autónomo, etc.). This lets users know the official entity they’re dealing with.
- Tax Identification Number (NIF/CIF): Spanish tax ID number. For Spanish companies this is the CIF; for individuals it’s the NIF. This number is required so authorities and customers can easily identify your business in official records.
- Registered address: Physical business address of your registration or principal place of business. Even if you operate purely online, you must provide a real-world address (PO boxes insufficient).
- Contact information: Email and preferably phone number for users to contact you directly and efficiently. Spanish law insists that users have free and easy means of communication with the service provider.
- Public registry details: For companies, mention your entry in the Mercantile Registry (Registro Mercantil) – typically providing the volume, page, and registration number. This is proof that the company is officially incorporated.
- Additional licenses: If your e-commerce activity is regulated (pharmaceuticals, financial services), cite relevant license info and supervising authority. The LSSI mandates including any professional registration number for regulated professions.
Make sure this Legal Notice is prominently accessible – usually a footer link titled “Legal Notice” or “Información legal.” The information should be kept up-to-date. Not only is providing these details a legal requirement, but it also reassures customers that your business is legitimate and reachable.
Clear Pricing and Tax Disclosures
Spain e-commerce regulations require clear information about prices, taxes, and additional charges before purchase:
- Display final prices (VAT included): All B2C prices must show VAT-inclusive amounts or explicitly state if VAT is excluded. Spain’s standard practice shows final prices including the 21% VAT rate.
- Disclose shipping and fees: Additional costs must be communicated upfront. If shipping varies by location, clearly indicate calculation methods.
- Show unit prices: For products sold by weight or volume, display unit prices alongside total prices.
- Transparency about discounts: Display prior prices when offering discounts with clear conditions and duration.
- Total cost clarity: Before purchase confirmation, customers must see complete payable amounts including all taxes and fees.
Terms and Conditions of Sale
Before a customer clicks “purchase,” they need access to comprehensive Terms and Conditions – essentially, the contract that will govern the transaction. Spanish law requires contract terms be clear, fair, and available to the buyer before completing the sale. Your T&C should cover:
- Contract formation: Explain how binding contracts are formed through your website. For instance, state that the customer’s order is an offer to buy, and the contract is concluded when you confirm acceptance by email. Clearly describe goods/services offered and any significant conditions.
- Payment and delivery: Specify payment methods, delivery timeframes, and charges. Outline your delivery policy: how long processing and shipping typically take, which areas you ship to, and associated delivery charges. Include how you handle delivery delays or out-of-stock items. Spanish consumers have a right to timely delivery (typically within 30 days unless otherwise agreed).
- Right of withdrawal: Detail the 14-day cooling-off period for returns, including procedures and conditions. Under EU and Spanish law, consumers usually have 14 calendar days to withdraw from distance contracts without giving reason. Provide details like: the period is 14 days from delivery, the customer can use a model withdrawal form, and what conditions apply (goods should be returned in good condition). State who bears return shipping cost and outline your returns procedure.
- Legal warranty: Explain the 3-year legal warranty for new products covering repair, replacement, or refund. In Spain, for any new product sold to consumers, the law provides a 3-year legal warranty for lack of conformity. Make sure your T&C reflect this: “Products are covered by a legal conformity warranty for 3 years from delivery.” If you sell second-hand goods, you can shorten this period but not below 1 year per Spanish law.
- Governing law: Specify Spanish law governance and mention the European Online Dispute Resolution (ODR) platform. Since you’re operating in Spain, state that Spanish law governs the contract. Also inform consumers about the European ODR platform – usually by providing a link in your T&C.
- Purchase confirmation: Send customers confirmation that service contracting or product purchase has been completed successfully, with payment receipt confirmation.
- Communication opt-out: Provide unsubscribe options in all marketing communications and newsletters.
- Premium telephone services: Obtain customer consent before providing support through premium-rate telephone numbers (like 902 numbers).
The T&C must be available before purchase – typically via a link at checkout. Many sites require users to tick “I agree to the Terms and Conditions” to ensure they’ve had a chance to read them. The language should be clear and jargon-free; Spanish law on unfair contract terms will strike down clauses that create significant imbalance to consumers’ detriment.
LSSI Compliance Checklist
To ensure your website complies with Spain e-commerce law, verify these essential requirements:
✓ Legal Notice Requirements:
- Business name and legal form displayed
- Spanish Tax Identification Number (NIF/CIF) visible
- Complete registered address (no PO boxes)
- Direct contact information (email and phone)
- Professional licensing numbers (if applicable)
✓ Pricing Transparency:
- All prices show VAT inclusion/exclusion clearly
- Shipping costs disclosed or calculation method explained
- Additional fees (assembly, handling) stated upfront
- Unit prices for weight/volume products
- Clear discount terms and original prices
✓ Contract Information:
- Terms and conditions easily accessible
- Return policy clearly stated (14-day withdrawal right)
- Payment confirmation system implemented
- Purchase completion confirmations sent
If you’re an entrepreneur planning to tap into Spain’s digital economy, complying with the LSSI and related legislation isn’t optional—it’s essential for your success. Lawants has extensive experience guiding foreign businesses through the critical early stages of establishment, providing tailored legal advice and support at every step. Whether your business model involves online retail, digital services, or content monetization, we ensure your venture is set up correctly and fully compliant, allowing you to seamlessly integrate into Spain’s thriving e-commerce market. Contact us today for personalized legal assistance.
Spain E-commerce Law: Consumer Rights and Protection Measures
Spain e-commerce law provides strong consumer protection for e-commerce with robust B2C rights under Spanish e-commerce legislation:
- Right to clear information: Consumers must know what they’re buying and from whom. Misleading claims are prohibited.
- Right of withdrawal: Spanish consumers can cancel contracts within 14 days of receiving goods without justification. They’re entitled to product price refunds plus standard shipping costs.
- Right to refunds: Spanish law requires returning payments within 14 days of withdrawal notice.
- Right to 3-year legal guarantee: New products enjoy a three-year legal guarantee of conformity. Sellers must repair, replace, or refund defective products.
- Right to data protection: Consumers have rights to secure personal data handling under GDPR.
- Right to effective redress: Consumers should have straightforward complaint procedures and access to dispute resolution.
Data Protection and Privacy (GDPR Compliance)
Spanish e-commerce legislation requires compliance with GDPR and Spain’s Organic Law 3/2018. Non-compliance with Spain e-commerce regulations can lead to fines up to €20 million or 4% of global turnover:
- Clear Privacy Policy: Publish an accessible policy explaining data collection, purposes, legal basis, and user rights.
- Lawful basis for processing: Every data processing needs proper justification – contract, legal obligation, legitimate interests, or consent.
- Cookie compliance: Non-essential cookies require prior informed consent. Implement cookie banners with clear accept/reject options.
- Data security measures: Implement HTTPS encryption, use reputable payment processors, and have breach reporting procedures.
- User rights requests: Handle access, correction, and deletion requests within one month.
- Email marketing consent: Obtain explicit consent for promotional communications with easy opt-out mechanisms.
Electronic Marketing and Advertising Regulations
Digital marketing under Spain e-commerce law requires strict adherence to anti-spam and transparency rules:
- No unsolicited emails: Promotional communications require prior consent with limited exceptions for existing customers.
- Identify advertising clearly: Marketing messages must be recognizable as advertisements, often prefixed with “Publicidad”.
- Always provide opt-out: Every marketing communication must include free, easy unsubscribe mechanisms.
- Telemarketing restrictions: Unsolicited commercial calls are largely forbidden without consent. Spain maintains a Robinson List (national opt-out list).
- Truthful advertising: All marketing must be honest with clear promotional terms. Avoid false claims or misleading promotions.
- Spain e-commerce regulations can levy fines up to €30,000 per incident for spam violations.
Tax Obligations (VAT and Fiscal Requirements)
Spanish e-commerce legislation requires tax compliance centered on Value Added Tax (IVA):
- VAT registration: Spanish businesses must register for VAT. Foreign companies use the One-Stop Shop (OSS) system for EU sales exceeding €10,000 annually.
- Display VAT-inclusive prices: Consumer prices should include Spain’s 21% standard VAT rate (with reduced rates of 10% and 4% for specific products).
- VAT returns and records: File periodic VAT returns with proper invoice documentation including business details, VAT numbers, and amounts.
- One-Stop Shop (OSS): Simplified system for EU-wide B2C sales, allowing single-country registration and quarterly reporting.
Import considerations: Goods imported from outside EU face import VAT and customs duties. Import OSS (IOSS) can streamline VAT for shipments under €150.
Environmental Obligations: Packaging and WEEE
Spain e-commerce regulations implement “polluter pays” principles:
Packaging Waste Compliance
- Register in Packaging Register: All companies placing packaging on Spanish market must register in the centralized Packaging Producers Register. Foreign companies need Spanish tax identification (NIF).
- Join recycling schemes: Participate in Ecoembes to finance packaging collection and recycling. Pay annual fees based on packaging materials and quantities.
- Annual reporting: Submit yearly packaging reports and pay corresponding eco-fees.
WEEE (Electronic Waste) Regulations
- Register as EEE Producer: Electronics sellers must register with Spanish National Registry before selling.
- Take-back obligation: Offer customers free return of equivalent old devices when purchasing new electronics (1-for-1 policy).
- Join compliance schemes: Participate in WEEE recycling schemes like ECOLEC or ECOTIC to finance e-waste management.
- Marking requirements: Display crossed-out wheelie bin symbol on electronics and provide recycling information.
Penalties for Non-Compliance with the Spanish E-commerce Law
Spain e-commerce law enforces regulations through tiered penalties:
LSSI Fines:
- Minor infractions: Up to €30,000 for issues like sending business communications without clear sender identification, messaging consumers who opted out, or failing to indicate security measures (for internet service providers)
- Serious infractions: €30,001-€150,000 for failing to inform customers of terms and conditions or opposing LSSI compliance inspections
- Very serious infractions: €150,001-€600,000 for failing to delete consumer data or terminate services when ordered by administrative authorities, with potential website closure and publication of sanctions in the BOE
GDPR Penalties: Up to €20 million or 4% of global turnover for severe data protection breaches.
Consumer Law Penalties: Regional fines for violating consumer rights.
Tax Consequences: VAT penalties of 50%-150% of owed amounts plus interest.
Environmental Fines: Significant penalties for packaging and WEEE non-compliance, potentially blocking sales.
Additional Consequences: Repeated serious or severe infractions within three years may result in a ban from commercial activities in Spain for up to two years. Both serious and severe infractions can lead to publication of the sanctioned party’s name in the Official State Gazette (BOE).
Compliance costs are typically lower than penalty and damage costs.
How Lawants Can Help
Lawants provides comprehensive support for Spain e-commerce law compliance:
- Expert legal guidance: Tailored advice on LSSI, consumer laws, and GDPR with website audits and document preparation.
- Tax and accounting support: VAT registration, OSS setup, ongoing filings, and Spanish e-commerce legislation compliance.
- Environmental compliance: Assistance with packaging and WEEE registrations and reporting under Spain e-commerce regulations.
- Ongoing partnership: Continuous monitoring of Spain e-commerce law changes with proactive updates and English-language service.
Conclusion
Spain e-commerce regulations are comprehensive but navigable with proper preparation. Success comes from treating compliance as a competitive advantage. Key priorities include:
- Transparency: Clear legal notices, pricing, and terms build customer trust
- Consumer rights: Honor 14-day returns, 3-year warranties, and provide honest information
- Data protection: Implement GDPR compliance with proper consent and security
- Tax compliance: Ensure correct VAT registration and charging
- Environmental responsibility: Meet packaging and electronics recycling obligations
Next steps: Audit your current operations against Spain e-commerce law requirements, address any gaps, and consider professional guidance for complex aspects of Spanish e-commerce legislation. By following this framework, you’ll build a sustainable, legally compliant business in Spain’s thriving e-commerce market.
Understanding and implementing Spain’s e-commerce regulations can be overwhelming, but you don’t have to navigate these complexities alone. Lawants offers specialized expertise to foreign entrepreneurs looking to start or expand their online businesses in Spain. Our holistic, first-class legal service covers every detail—from company incorporation to ongoing compliance with the latest Spanish and EU regulations. Let our dedicated lawyers and financial experts become your trusted partners in building a legally sound and successful e-commerce venture in Spain. Contact us to ensure your business enjoys sustained growth and compliance.
Frequently Asked Questions (FAQs)
- Is the LSSI the only law regulating online commercial activity in Spain? No. Besides the LSSI, other regulations govern online commercial activities including the General Telecommunications Law (Law 11/2022), GDPR for data protection and cookies, consumer protection laws, and environmental regulations for packaging and electronics.
- Does the LSSI apply to purely informational business websites? Yes. Even if a business doesn’t sell online and uses its website solely for information sharing, Section 10 of the LSSI requires displaying company identification details including business name, address, and tax identification number.
- How do you determine if website activity is considered commercial under Spain e-commerce regulations? If a business generates income from its website information, it’s considered commercial activity under Spain e-commerce law. This includes direct income (selling products/services) and indirect income (advertising revenue, lead generation, or providing business information that supports offline sales).
- Do foreign companies need to comply with Spanish e-commerce legislation? Yes. Foreign companies targeting Spanish consumers (through Spanish-language websites, Euro pricing, or Spanish shipping) must comply with LSSI requirements and other Spain e-commerce regulations.
- What’s the difference between LSSI and GDPR compliance? The LSSI focuses on commercial transparency and fair trading practices, while GDPR governs personal data protection. Both laws work together – LSSI requires clear business identification and honest marketing, while GDPR ensures secure data handling and user privacy rights.
¡Buena suerte con tu negocio online en España!
Related articles:
- Pros and Cons of Starting a Business in Spain
- Starting a Business in Spain After Brexit: Complete Guide for UK Citizens
- E-invoicing in Spain: Regulations, Requirements and Formats
- Buying a Business in Spain After Brexit: A Complete UK Buyer’s Guide
- How to Purchase Shares in a Spanish Company? Guide for Foreign Investors
- European Enforcement Order: What it Is, Certificate, Requirements
