Kalplex

Compliance centre

The revised EU Consumer Credit Directive (EU) 2023/2225 applies from 20 November 2026. It brings third-party “buy now, pay later” and “pay by invoice later” under consumer credit rules — and keeps a narrow exclusion for merchants who give customers time to pay themselves.

8 min read · Updated 26 October 2026

18 Oct 2023

Adopted

The directive was signed in Strasbourg.

Directive (EU) 2023/2225

20 Nov 2025

National laws due

Member states had to adopt and publish their implementing laws.

Article 48(1)

20 Nov 2026

Rules apply

Member states apply the new rules from this date.

Article 48(1)

What CCD2 is

CCD2 replaces the 2008 Consumer Credit Directive. It widens the rules so that products that used to fall outside them — including many “buy now, pay later” and deferred invoice payment services — are treated as consumer credit, with the information, creditworthiness and conduct duties that come with it.

For online shops, the practical effect is on the checkout: if a third party gives your customers time to pay, that third party becomes a creditor or credit intermediary under consumer credit law, and the cost and friction of the option is likely to change.

The exclusion for merchant-run deferred payment

Article 2(2)(h) keeps one form of “pay later” outside the directive. It covers deferred payments where all of these hold:

  • the supplier of the goods or services gives the consumer time to pay, without a third party offering credit;
  • the price is paid free of interest and without any other charges, with only limited late-payment charges allowed by national law; and
  • the payment is made in full within 50 days of delivery of the goods or service.

For larger online sellers there is a stricter version. Where the supplier is not a micro, small or medium-sized enterprise and sells at a distance online, the exclusion applies only if a third party neither offers nor purchases the credit, payment is made within 14 days of delivery, and it is free of interest and other charges.

What this means for your shop

  • If you are an SME and you run “pay within 30 days” yourself — no interest, no fees — you can stay outside CCD2.
  • If a BNPL or invoice provider runs it for you, it becomes regulated credit from 20 November 2026.
  • If you sell a receivable to a third party, or a third party pre-funds the order, the exclusion no longer applies.
  • If you are a large online merchant, the window is 14 days rather than 50.

Kalplex is built around these conditions: it is software only, it never buys or funds receivables, it blocks interest and fees, and it caps the debit date at 50 or 14 days. See compliance guardrails.

Who counts as an SME

CCD2 refers to the EU definition in Recommendation 2003/361/EC. Medium-sized enterprises have fewer than 250 employees and either an annual turnover of up to €50 million or a balance sheet total of up to €43 million. Group structures and partner companies count towards the thresholds, so check with your accountant.

This is general information, not legal advice

CCD2 is a directive: each EU country writes its own law to implement it, and details differ. Before you launch, get a written opinion from a lawyer in your first target country.

Create your account, connect GoCardless and switch on pay later in your own checkout.