Consumer protection compliance in Cyprus: Legal guide for businesses

Author: Dr. Andreas Hadjigeorgiou – Senior Associate

Consumer protection compliance in Cyprus is a key legal requirement for businesses selling goods, services, digital products, or online subscriptions to consumers.

The Consumer Protection Law of 2021 (Law 112(I)/2021) sets out key obligations for traders. These obligations cover consumer information, unfair commercial practices, unfair contract terms, distance contracts, withdrawal rights, price transparency, and regulatory enforcement.

For businesses, consumer protection should not be treated as a standard website terms issue. It affects contracts, marketing, pricing, refund policies, customer service, e-commerce procedures, and internal compliance controls.
Failure to comply may lead to consumer complaints, investigations by the Consumer Protection Service, administrative fines, reputational damage, and legal proceedings.

This guide outlines the main consumer protection obligations for businesses in Cyprus and the practical steps they can take to reduce regulatory and commercial risk.

Key takeaways

Businesses operating in Cyprus should pay close attention to consumer protection compliance because:

• Consumer complaints may reveal wider compliance issues.
• Traders must provide clear information before a consumer is bound.
• Online businesses must comply with distance selling and withdrawal rules.
• Pricing, discounts, reviews, and marketing claims must be accurate.
• Consumer terms must not exclude statutory consumer rights.
• Regular legal review can reduce regulatory and commercial risk.

Consumer Protection Law in Cyprus

Consumer protection law in Cyprus is based on domestic legislation and European Union consumer law. Businesses must consider the Consumer Protection Law of 2021, Law 112(I)/2021, together with the relevant EU rules. Law 112(I)/2021 is the main Cyprus law on consumer protection. It includes rules on consumer information, unfair commercial practices, unfair contract terms, distance contracts, off-premises contracts, and enforcement powers.

The law also reflects important developments in EU consumer law, including Directive (EU) 2019/2161, known as the Omnibus Directive. This Directive strengthened consumer protection rules across the European Union and introduced stricter requirements on online marketplaces, consumer reviews, personalised pricing, price reductions, and enforcement penalties.

Businesses that supply physical goods should also consider the rules on sale of goods and statutory conformity. Businesses that supply software, cloud services, online subscriptions, digital content, or digital services should also assess the rules that apply to digital products and online services.

Consumer protection compliance should be reviewed as part of the business model, not only as a legal document exercise.

Why consumer protection compliance matters

Many businesses treat consumer complaints as isolated customer service issues. In practice, a complaint may reveal wider legal or procedural issues in the trader’s commercial practices

For example, a refund complaint may raise questions such as:

• Did the trader provide all required pre-contractual information?
• Was the consumer properly informed about the right of withdrawal?
• Are the terms and conditions fair?
• Was the product or service advertised accurately?
• Were all mandatory charges disclosed clearly?
• Does the business have a proper complaint handling process?

For this reason, businesses should treat consumer protection compliance as an ongoing governance function rather than a reactive legal exercise.

Consumer complaints may also lead to wider regulatory review by the Consumer Protection Service. Businesses that receive formal correspondence or a request for information should respond carefully and with supporting evidence.

Main obligations of traders

The obligations imposed on businesses vary depending on the nature of the transaction. However, several core principles apply to most consumer-facing businesses.

Professional diligence

Every trader is expected to act with the level of skill and care that a consumer may reasonably expect from a professional business in that sector.

A practice may create legal risk even where the trader did not intend to mislead the consumer. Outdated website content, unclear refund terms, incomplete pricing information, or inaccurate promotional claims may attract scrutiny.

Transparency

Transparency is one of the central principles of consumer protection law.

Consumers should understand:

• Who they are contracting with
• What they are purchasing
• The total price payable
• How and when delivery or performance will occur
• Any additional charges
• The right of withdrawal, where applicable
• The duration of the contract
• Cancellation procedures
• Complaint handling procedures
• Statutory guarantees and consumer rights

This information should be provided before the consumer becomes contractually bound. It should be clear, easy to find, and easy to understand.

Fair commercial practices

Law 112(I)/2021 prohibits traders from engaging in unfair commercial practices before, during, and after the conclusion of a consumer contract.

A commercial practice may be unfair where it:

• Contains false information
• Misleads the average consumer
• Omits important information
• Applies undue pressure
• Exploits vulnerable consumers
• Causes the consumer to make a decision they would not otherwise have made

The prohibition applies to websites, social media marketing, influencer campaigns, email communications, online marketplaces, advertising, and customer service interactions.

Fair contract terms

Consumer terms and conditions should be clear, fair, and consistent with the law. Terms that exclude statutory consumer rights, restrict remedies, impose excessive cancellation fees, or permit unilateral amendments to contracts may be considered unfair and unenforceable.

Businesses should review their consumer terms regularly to ensure they reflect current legal requirements and how the business actually operates.

Pre-contractual information

Before a consumer becomes bound by a contract, a trader should provide clear information about the transaction.

This usually includes:

• The main characteristics of the goods or services
• The trader’s identity and contact details
• The geographical address of the business
• The total price, including taxes and mandatory charges
• Delivery costs, where applicable
• Payment and performance arrangements
• Complaint handling procedures
• Statutory legal guarantees
• After-sales services and commercial guarantees, where offered
• Contract duration and termination rules
• The right of withdrawal, where applicable

This information should be easy to find, easy to read, and consistent with the trader’s terms, checkout process, and customer communications.

Failure to provide mandatory information may create legal consequences. In some cases, failure to inform the consumer about the right of withdrawal may extend the withdrawal period.

Distance contracts and the 14-day right of withdrawal

Distance contracts are a common source of consumer complaints. These include online sales, telephone sales, email contracts, and other contracts concluded without the consumer and trader being physically present together.

In many distance and off-premises contracts, consumers have a 14-day right of withdrawal. This allows the consumer to withdraw from the contract without giving a reason, subject to legal conditions and exceptions.

For goods, the withdrawal period usually starts when the consumer receives the goods. For service contracts, it usually starts on the date the contract is concluded.

Traders must inform consumers about:

• The existence of the withdrawal right
• The duration of the withdrawal period
• The procedure for exercising that right
• The model withdrawal form, where applicable
• The consequences of withdrawal
• Return costs
• Any statutory exceptions

This statutory right cannot generally be waived by contractual agreement.

Commencing services during the withdrawal period

Service providers should pay close attention to withdrawal rules.

Where the consumer wants the trader to begin performing services before the withdrawal period ends, the trader should obtain the consumer’s express request to commence performance.

Where the service is likely to be completed before the withdrawal period expires, the trader should also obtain the consumer’s acknowledgement that the right of withdrawal will be lost once the service has been fully performed.

Silence, implied consent, or pre-ticked boxes may not be enough.

When the right of withdrawal may not apply

The right of withdrawal does not apply in every case.

Common exceptions may include:

• Fully performed services, where performance began with the consumer’s express request and acknowledgement
• Goods made to the consumer’s specifications
• Clearly personalised goods
• Sealed goods that are not suitable for return for health or hygiene reasons once unsealed
• Certain digital content supplied immediately after consent and acknowledgement
• Urgent repair or maintenance services specifically requested by the consumer

These exceptions should be applied carefully. Businesses should avoid assuming that an exception applies merely because the consumer received some benefit from the contract.

Digital content and digital services

Digital content and digital services create specific consumer protection obligations.

These rules may apply to businesses that provide:

• Software licences
• Streaming services
• Cloud storage
• Online training
• Digital publications
• Mobile applications
• Subscription platforms

Where digital content is supplied immediately after the contract is concluded, the trader should obtain:

• The consumer’s express consent to immediate performance
• The consumer’s acknowledgement that the withdrawal right will be lost where the legal conditions are met

Failure to obtain these confirmations may preserve the consumer’s right to withdraw even after the digital content has been downloaded or accessed.

This is a common compliance issue for software providers, subscription businesses, online education platforms, and other digital service providers.

Pricing transparency, discounts and hidden charges

Pricing transparency is a key area of consumer protection compliance. Consumers should be able to understand the total price payable before they make a purchase decision.

Businesses should avoid presenting mandatory charges only at the final stage of checkout.

Examples may include:

• Booking fees
• Administration charges
• Handling fees
• Mandatory service charges
• Compulsory insurance costs
• Delivery costs that were not clearly disclosed

This practice is often referred to as drip pricing. It may create legal risk where the consumer is attracted by an initial price that does not reflect the final cost.

Price reduction announcements also require care. Businesses that advertise discounts, Black Friday offers, limited-time offers, or percentage reductions should ensure that the reference price is accurate and supported by evidence.

Artificially raising a price before announcing a discount may create consumer protection risk. Repeated or permanent “sales” may also attract scrutiny where the discount is not genuine.

Businesses should keep records showing how advertised discounts were calculated.

Misleading practices, online reviews and unfair contract terms

Consumer protection law aims to ensure that consumers make purchasing decisions based on accurate, complete, and transparent information.

A commercial practice may be misleading if it contains false information or omits important information that the average consumer needs to make an informed decision.

Businesses should review claims relating to:

• Price comparisons
• Discount campaigns
• Product availability
• Limited-time offers
• Environmental or sustainability claims
• Customer testimonials
• Online reviews
• Influencer marketing and sponsored content
• Delivery times
• Stock availability
• Guarantees and after-sales support

Online interfaces should also be reviewed. Designs that steer consumers toward decisions through pre-selected options, confusing cancellation steps, repeated prompts, or unclear instructions may pose a risk.

Online reviews and endorsements

Modern consumers often rely on online reviews before selecting goods or services.

Businesses should avoid:

• Publishing fake reviews
• Buying positive reviews
• Removing negative reviews without an objective reason
• Presenting paid endorsements without disclosure
• Claiming that reviews come from verified purchasers without a verification process

Businesses should keep records of how customer reviews are collected, verified, moderated, and published.

Unfair contract terms

Standard consumer terms are a common source of compliance risk.

Examples of problematic clauses include terms that:

• Exclude or limit statutory consumer rights
• Allow unilateral price increases without a clear basis
• Allow unilateral changes to important terms
• Impose excessive cancellation charges
• Exclude liability for defective goods or services
• Prevent consumers from terminating continuing contracts
• Restrict access to legal remedies

The use of unfair terms may create contractual uncertainty and regulatory risk.

Practical compliance steps for businesses

Businesses should regularly review their consumer-facing documentation and commercial practices.

Particular attention should be given to:

• Terms and conditions
• Website disclosures
• Checkout procedures
• Cancellation and refund policies
• Withdrawal notices
• Engagement letters for professional services
• Digital content supply procedures
• Pricing strategies
• Marketing campaigns
• Online reviews
• Complaint handling procedures
• Staff training on consumer rights

Compliance should not be treated as a one-time exercise. Legal amendments, EU case law, and enforcement priorities require businesses to review their practices regularly.

A preventive compliance review is usually less costly than responding to a regulatory investigation or defending legal proceedings.

How Michael Chambers & Co. LLC can assist

Michael Chambers & Co. LLC advises businesses on consumer protection compliance in Cyprus.

Our services include:

• Reviewing consumer terms and conditions
• Advising on distance selling and e-commerce obligations
• Reviewing refund and cancellation policies
• Advising on the 14-day right of withdrawal
• Reviewing pricing, discounts, and marketing practices
• Advising on digital content and digital services
• Advising on unfair contract terms and unfair commercial practices
• Supporting internal compliance procedures and staff guidance

Our team assists businesses in identifying legal risks, correcting compliance gaps, and strengthening consumer-facing procedures.

Why regular consumer compliance reviews matter

Consumer protection compliance in Cyprus is an important part of running a consumer-facing business. The legal rules affect contracts, online sales, pricing, refund policies, digital services, advertising, complaint handling, and regulatory responses.

Businesses should not wait until a complaint becomes a regulatory issue. Regular review of consumer-facing documents and commercial practices can help reduce legal risk and improve consumer confidence.

Michael Chambers & Co. LLC assists businesses with consumer protection compliance, e-commerce obligations, contract review, and regulatory risk management.

Frequently Asked Questions