Omnibus Directive and customer reviews: 2026 compliance guide

The Omnibus Directive (EU) 2019/2161 has been in force across the EU since 28 May 2022. It sets transparency requirements for customer reviews, prohibits fake reviews, and strengthens sanctions against misleading commercial practices. In 2026, two developments shift the balance: enforcement bodies recorded a historic level of fines in 2025, and a second directive nicknamed “Omnibus I” was published in February 2026 on an entirely different subject. The result: widespread confusion among online retailers about what they actually need to do. This guide untangles both texts and gives you the precise list of obligations that apply to your customer reviews today.

Which “Omnibus Directive” applies to your reviews?

In 2026, two European directives carry the name “Omnibus”. They share nothing in common. Confusing the two leads to compliance mistakes.

For your customer reviews, only Directive 2019/2161 applies. The Omnibus I Directive of February 2026 amends rules on corporate sustainability reporting (CSRD and CS3D): it does not touch the regulation of online reviews.

Any search for “Omnibus Directive 2026” today returns mostly results about the sustainability directive. If you read recent articles about “Omnibus 2026” and the subject was extra-financial reporting, that is not the one governing your customer reviews.

What the Omnibus Directive actually requires (and what it does not)

This is the point that most articles on the subject get wrong. The directive creates a transparency obligation, not a systematic verification obligation.

What is mandatory:

Any retailer who publishes customer reviews on their website must indicate, visibly and accessibly, whether those reviews are subject to a verification process. This information must specify the method used to ensure that reviews come from consumers who have actually purchased or used the product. Each review must display its publication date and the date of the relevant customer experience. The criteria used to rank reviews (chronological, rating, relevance) must be disclosed.

What is not mandatory:

The directive does not require every review to be verified. A retailer can display unverified reviews, provided this is clearly stated and not buried in the legal notices. Transparency about the absence of verification is compliant. The absence of transparency is not.

What is prohibited:

The distinction between “deemed misleading” and “misleading on a case-by-case basis” is central: the law distinguishes practices automatically considered misleading (the blacklist, prohibited without needing to prove harm) from practices assessed individually. Fake reviews and paid reviews appear on the blacklist. No need to prove consumer harm to establish liability.

Enforcement in 2026: what inspections actually target

Enforcement bodies published their 2025 activity report in mid-2026. The headline figure: record administrative fines and criminal settlements. The rate of inspections leading to corrective or repressive action reached 26%, up from 21% two years earlier.

This tightening is structural, not cyclical. Authorities now have algorithmic tools capable of analysing linguistic patterns, publication frequency, and geographic data to detect coordinated review manipulation campaigns.

What enforcement prioritises for reviews:

Inspections are intensified during peak commercial periods (Black Friday, sales, holiday season), when review volumes surge and manipulation temptations follow. Cross-referencing data displayed to consumers against a company’s internal data is part of the investigation methodology. Cross-border cooperation between European authorities has strengthened since the Digital Services Act came into force in 2024.

Applicable sanctions:

For misleading commercial practices on reviews, individuals face up to two years’ imprisonment and €300,000 in fines. For large-scale infringements at Union level, fines can reach 4% of the company’s annual global turnover.

ISO 20488: the reference standard

International standard ISO 20488 defines best practices for the collection, moderation, and publication of online reviews. It is not legally mandatory, but it has become the de facto reference cited by enforcement authorities when assessing the robustness of a verification process.

What the standard requires:

Reviews must come from consumers who have had a genuine experience with the product or service. The collection process must be open to all buyers, without prior selection based on estimated satisfaction. Positive and negative reviews must be published under the same criteria. Moderation must be documented and justifiable.

A common source of confusion:

Displaying an “ISO 20488 certified” badge without a genuinely compliant process constitutes a misleading practice in itself. Certification is issued by accredited independent bodies: it cannot be self-awarded. Being compliant with the standard without formal certification is possible and recognised.

The difference between “verified reviews” and “ISO 20488 certified”:

“Avis Vérifiés” is a third-party review collection platform. “ISO 20488 certified” is a compliance label for the international standard. The two are distinct. A retailer can have verified reviews in the sense of the standard without using the Avis Vérifiés platform.

UK DMCCA (April 2025): if you target the British market

Since 6 April 2025, the United Kingdom has adopted the Digital Markets, Competition and Consumers Act (DMCCA). This legislation goes further than the Omnibus Directive on several points.

The DMCCA prohibits fake reviews, undisclosed incentivised reviews, but also the importation of reviews from unrelated products. The Competition and Markets Authority (CMA) can impose direct fines of up to £300,000 or 10% of annual turnover, compared to 4% of global turnover under the European directive.

For retailers selling into the UK, Omnibus compliance alone is not enough. The DMCCA imposes stricter verification of review origin and more granular transparency about incentive methods.

How Review Collect helps you stay compliant

Review Collect is built to meet Omnibus Directive obligations with no extra work on your side. Review invitations are sent exclusively to verified buyers, after order confirmation. All reviews received are published, positive and negative, under the same documented moderation criteria. There is no pre-filtering mechanism based on rating.

The average response rate to invitations sent through Review Collect is 39%. Over 30 days, retailers who adopt the platform multiply their review count by 30 on average, without ever soliciting only satisfied customers.

For multi-location businesses, Review Collect centralises collection and publication across all sites, with a single dashboard to verify compliance for each location. Verification process documentation is available in one click for any regulatory inspection.