The European Union published Regulation (EU) 2026/2108 on 19 September 2026, replacing the legal framework behind the current Union Customs Code. Most provisions apply from 21 September 2027, while selected rules start earlier and distance-sales provisions are phased from 1 July 2028.
For procurement teams, the practical message is immediate even though implementation is phased: product classification, origin, value, supplier records and non-financial compliance data must be treated as transaction inputs, not documents collected after shipment. The reform places clearer responsibility on importers and builds a central EU Customs Data Hub intended to support customs formalities, controls and risk analysis.
What the regulation establishes
The official text establishes a new Union Customs Code and a European Union Customs Authority. It also creates the legal basis for the EU Customs Data Hub, a set of centralised electronic services intended to collect, process and exchange customs information.
The regulation says the previous framework showed weaknesses in handling non-financial risks, the volume of e-commerce imports, digitalisation and inconsistent implementation across Member States. Its response is broader than a software replacement. It clarifies who is responsible for goods, expands the role of customs in enforcing product-related rules and introduces a more central approach to data and risk management.
The law enters into force on 20 September 2026, the day after publication. Most provisions apply from 21 September 2027. Several provisions concerning delegated powers, institutional preparation and selected definitions apply from entry into force, while specified distance-sales and Customs Authority provisions apply from 1 July 2028.
This timing distinction matters. Publication does not mean every trader must move to the new Data Hub immediately. It does mean companies now have a final legal text against which to map future obligations.
Why importers carry more than duty risk
The regulation’s recitals say the definitions of importer and exporter should make those persons responsible for compliance with financial and non-financial requirements. Non-financial requirements can include product safety, security, sustainability, health, environmental protection, human rights and intellectual-property controls where relevant EU law applies at the border.
That broadens the procurement question. A team can no longer treat customs readiness as only a tariff code, invoice value and certificate of origin. The evidence chain may also need to show why a product can legally enter and circulate in the EU market.
For distance sales, the regulation is designed in some cases to place importer responsibility on an economic operator rather than the consumer. Reuters reported in March that the wider reform is also intended to address the volume and safety risks associated with low-value e-commerce parcels. Those provisions have their own timetable and should not be generalised to every B2B import.
The Data Hub changes the value of clean supplier data
The EU Customs Data Hub is intended to support customs formalities, controls, debt calculation, VAT and excise processes, guarantees, customs surveillance and the enforcement of other rules applied by customs authorities. The Commission, the EU Customs Authority and Member States are to design it together.
Implementation is staged. The regulation requires relevant Data Hub functionality for distance-sales use no later than 1 June 2028, with use for specified distance-sales procedures from 1 July 2028. Other importers, exporters and transit holders may use the Hub from 1 March 2031 and must use it from 1 March 2034; the listed functionality is to be fully operational by 1 February 2034.
These dates are legal milestones, not a reason to delay data work. Product descriptions, classification logic, origin evidence, valuation adjustments, supplier identity, licences and product-compliance records are often created in different systems owned by different teams. Cleaning that chain after a shipment is selected for control is slower and riskier than defining it during sourcing.
The European Commission’s August update to the EU Customs Data Model reinforces that point. EUCDM 7.0.11 standardises data requirements across current customs systems and provides structured datasets and code lists. The future Data Hub is new, but the need for consistent customs data already exists.
What procurement teams should prepare
1. Assign ownership for every customs data element
Map who provides classification, origin, value, product-compliance and transport data. Name the internal owner and the external evidence for each field. A customs broker may transmit information, but transmission is not the same as ownership of the underlying decision.
2. Improve the supplier onboarding pack
Require precise product descriptions, manufacturing location, material composition, model or part identifiers, origin support and any licences or conformity records relevant to the goods. Avoid free-text descriptions such as “parts,” “samples” or “equipment” that cannot support reliable classification or risk analysis.
The same principle underpins One Discovery’s EU CBAM supplier-data checklist: border compliance depends on structured, auditable supplier information collected before the reporting deadline.
3. Document classification, origin and valuation decisions
Keep the reasoning and source material behind the declared commodity code, customs origin and value. Record assists, royalties, freight and other adjustments where relevant. If a decision changes, retain the approval and effective date so the audit trail matches the transaction.
4. Review representation contracts
The regulation clarifies that an indirect customs representative assumes importer or exporter obligations, including compliance with other legislation applied by customs authorities. Buyers should review whether their representative is acting directly or indirectly, what data it relies on, how errors are escalated and which party retains records.
5. Treat trusted-trader status as an operating model
The new Trust and Check scheme can offer facilitation, but it requires a high degree of transparency, including customs access to relevant electronic systems. Existing authorised economic operators are also subject to reinforced monitoring, with compliance reviewed at least every three years. Status is not a substitute for controls; it depends on them.
6. Test the complete import path before contracting
Confirm that the proposed importer, representative, product data, permits, route and delivery terms work together. The trade-fragmentation procurement checklist explains why tariff and origin assumptions should be verified before they are embedded in price.
A practical readiness test
One Discovery’s analysis is that the reform shifts customs readiness toward continuous data governance. Before approving an EU-bound purchase, a buyer should be able to answer:
- Who is the legal importer and what form of customs representation will be used?
- Which records support classification, origin, valuation and product compliance?
- Can those records be linked to the specific supplier, product and shipment?
- Who corrects the data if the supplier, route, specification or price changes?
- How will the company retain evidence through the transition to new EU systems?
If those answers are unclear, the risk is not only a delayed customs entry. It may include inaccurate duty, failed product controls, unusable preference claims or disputes over who was responsible for the data.
ONE DISCOVERY VIEW
Customs readiness is becoming continuous data governance. Buyers should assign ownership for classification, origin, valuation and product-compliance evidence before the shipment is booked.
The new Code is not fully operational today, and delegated and implementing measures will continue to shape the detail. But the direction is clear: EU customs is moving toward centralised data, stronger risk analysis and more explicit accountability. Procurement teams should use the transition period to make product and supplier evidence part of the buying process itself.
Sources
Review the evidence chain behind an EU-bound sourcing requirement.
Contact One Discovery