CyberTRIZPEDIA

Retail & Consumer

74 regulations apply to this sector.

Written for this sector

3DSE-commerce retailers implement 3DS to authenticate online card paymentsCCPA/CPRARetailers collecting consumer data are directly in scopeDMAOnline marketplaces explicitly named as gatekeeper servicesDSAOnline marketplaces have specific DSA obligations for trader verificationEAAE-commerce services explicitly covered by accessibility requirementsEC 178/2002Retailers selling food products must meet EC 178/2002 obligationsEU Allergen RegulationRetailers selling food must comply with allergen labelling requirements.EU Forced Labour RegulationRetailers must verify labour conditions across product supply chains.EU Textile Labelling RegRetailers selling textiles must display compliant fibre composition labels.GPSRRetailers placing consumer products on EU market must comply with GPSR.GS1 StandardsGS1 barcodes and identifiers are foundational to retail product identification.IFS Food 8Retailers require IFS Food 8 certification from food suppliers.ISO 10002Customer complaints management standard directly relevant to consumer-facing businessesPCI Contactless Payments on COTSMerchants using COTS devices for contactless payments are directly in scope.PCI DSSRetailers processing card payments are core PCI DSS compliance targets.PCI MPOCMerchants using mobile devices for payment acceptance are directly in scope.PCI P2PEMerchants using P2PE solutions to protect cardholder data are in scope.

Also applies

2009/48/ECRetailers must ensure toys on sale comply with safety directiveACERetailers importing goods must file through ACEAD/CVDRetailers importing affected goods face additional duty costsAEOLarge retailers importing at scale benefit from AEO authorisationAFSCABelgian food retailers must comply with AFSCA inspection requirementsBancontact Scheme RulesRetailers accepting Bancontact payments must comply with scheme rulesBattery RegRetailers must accept returned batteries and meet take-back obligationsBE Card Payment Scheme OversightRetailers using card payment schemes affected by oversight rulesBook VII Payment ServicesRetailers offering payment services or installment credit affected.BRC 9Retailers require BRC certification from food suppliers.CITESRetailers selling wildlife-derived products subject to CITES rulesCodex AlimentariusRetail food products subject to Codex labelling and safety standardsCOPPAConsumer-facing websites collecting children's data must complyCSDDDRetailers with large supply chains must conduct due diligence under CSDDD.CTPATRetailers importing goods engage with CTPAT requirements.EC 852/2004Retail food outlets must meet hygiene standards.EMD2Consumer-facing e-money products governed by EMD2 protections.EMVRetailers must use EMV-compliant terminals to accept chip card payments.EMV ChipRetailers accepting chip card payments must comply with EMV terminal standards.ePrivacy DirectiveE-commerce retailers must comply with cookie consent requirements.ESPRRetailers must ensure products on sale comply with ecodesign standards.EU 396/2005Retailers must ensure products sold meet maximum residue level requirements.EU Cosmetics RegRetailers distributing cosmetics must ensure products meet regulatory requirements.EU DUCRetailers selling covered commodities must ensure supply chain compliance.EU Instant Payments Regulation 2024Retailers using PSP services affected by mandatory instant payment infrastructure.EU Platform Work DirectiveOn-demand retail platforms using platform workers fall under directive scope.EUDRRetailers selling covered products must ensure supplier complianceFCMRetailers must ensure food contact products on shelves meet FCM requirementsFDA FSVPRetail importers of food products must comply with FSVP importer obligations.Food Fraud RegulationRetailers must ensure product authenticity to avoid food fraud liability.FOOD_EURetailers must ensure food sold meets EU regulatory standards.FSSC 22000Retailers may require supplier FSSC 22000 certification for food products.FTC AI GuidanceAI used in consumer-facing retail applications subject to FTC guidance.GDPRRetailers collect customer data for transactions and marketing under GDPR.GFSIMajor retailers drive GFSI adoption by requiring certification from suppliers.ISO 22318Retailers manage supply chain disruption risk affecting product availability.ISO 27701Retailers managing customer data apply it for GDPR alignmentISO 29134Retailers use it to assess privacy impacts of customer data initiativesISO 8583Retail payment terminals use ISO 8583 for point-of-sale transactions.NACHARetailers processing ACH payments must comply with NACHA operating rules.NACHA RulesRetailers and merchants processing ACH payments must follow NACHA Rules.NIST Privacy FrameworkRetailers processing consumer personal data use this framework for compliance.NY SHIELD ActRetailers collecting NY consumer data must implement safeguardsPayconiq Scheme RulesRetailers accepting Payconiq payments must comply with scheme rules.PCI DSS ExtensionRetailers subject to PCI DSS are affected by any extensions.PCI PINRetailers using PIN entry devices must meet PCI PIN requirements.PPE RegulationRetailers distributing PPE must verify compliance with the regulation.PPE Regulation 2Retailers selling PPE must ensure compliant products are stocked.PSD2Retailers accepting electronic payments must comply with SCA requirements.PSD3Merchants accepting payments impacted by SCA and liability rules.PSRRetailers using regulated payment systems are indirectly impacted.Red Flags RuleRetailers offering consumer credit accounts must comply with Red Flags Rule.Reg ERetailers offering debit or prepaid card products are impacted.TARICRetailers importing goods must classify products under TARIC for duty calculationToy Safety DirectiveRetailers must ensure toys sold comply with safety and conformity requirementsUS State Privacy LawsRetailers collecting consumer data must comply with applicable state privacy laws.WEEERetailers selling electronics must support WEEE take-back and collection obligations.

TRIZ for Retail & Consumer

Worked contradictions and resolutions for this sector.