Entering the EU market: legal requirements for non-EU companies

The European Union remains one of the most attractive destinations for international business. With a combined GDP of nearly €18 trillion and a population exceeding 450 million, it offers access to a high-purchasing-power market and a stable economy. The EU operates under a unified framework for trade and the free movement of goods, services, capital, and people. But for companies from outside the EU, entering the market is not always straightforward. At the planning stage, it is crucial to determine the best mode of establishing a presence in Europe: through a subsidiary, branch, or representative office. Equally important are considerations related to taxation, customs procedures, CE marking, and GDPR compliance. In this article, we will outline the key legal steps to secure your position in Europe while minimizing unnecessary risks.

Market entry options

Choosing the right form of presence in the European Union is a key strategic step that affects taxation, the level of regulatory oversight, and access to benefits and support programs. Companies from outside the EU can select from several options, ranging from full incorporation of a subsidiary to establishing a representative office with limited functions.

Establishing a subsidiary

A subsidiary is a separate legal entity incorporated in one of the EU Member States. It has full legal capacity, can enter into contracts, open bank accounts, and participate in public tenders. This format is often chosen when a business intends to operate in the region on a long-term basis.

Advantages:

• Full access to the EU internal market
• Possibility of tax optimization by choosing a jurisdiction with a favorable corporate tax rate
• Higher level of trust from counterparties and banks
• Ability to operate autonomously, with independent management and decision-making

Opening a branch

A branch is a division of a foreign company registered in the EU but legally connected to the parent organization. It can engage in commercial activities but does not have complete autonomy.

Key features:

• The parent company is liable for the branch’s obligations
• Registration in the national trade register and appointment of a local representative are required
• Profits earned in the EU are taxed in the country where the branch is established
• More suitable for companies that already have a reputation and recognition in the market

Setting up a representative office

A representative office is the most limited form of presence, suitable for market testing or marketing activities. It is not allowed to engage in commercial operations.

Key features:

• Not subject to corporate tax but required to maintain accounting records
• Used for research, promotion, and establishing contacts
• Can be converted into a branch or subsidiary as the business expands

Appointing an EU-based legal representative

For companies without a physical office in the EU but required to comply with EU regulations (e.g., GDPR), it is possible to appoint an authorized representative within the EU.

Advantages:

• No need to establish a legal entity
• The representative acts as the official contact point with regulators
• Particularly important for e-commerce, SaaS, and fintech companies serving EU customers
• Considerably more cost-effective compared to incorporating a separate legal entity

Regulatory compliance: meeting EU standards and sector-specific requirements

Entering the EU market requires not only company registration but also strict compliance with both EU-wide and national regulations. Breaching regulatory requirements can lead to fines, license revocation, and prohibition from operating. Companies must determine in advance which standards apply to their sector and obtain the necessary permits.

Sector-specific licensing and permits for operating in the EU

Certain types of business activities in the EU are subject to mandatory licensing: financial services, pharmaceuticals, energy, transportation, telecommunications, and others. Examples include:

1. Financial sector: licenses regulated by authorities such as the European Central Bank (ECB) and national regulators (e.g., BaFin in Germany).
2. Pharmaceuticals: authorization required from the European Medicines Agency (EMA).
3. Food products: compliance with European Food Safety Authority (EFSA) standards.
   The official list of regulated professions and licensed activities is available in the EU Single Market Regulated Professions Database.

Compliance with CE marking and EU product standards

To access the EU market, manufacturers must ensure their products meet technical requirements and obtain CE marking, confirming safety and compliance with standards. This means:

1. Compliance with relevant EU directives (e.g., Machinery Directive 2006/42/EC).
2. Testing and certification by accredited laboratories.
3. Preparing a Declaration of Conformity in one of the official EU languages.
   Detailed information on CE marking requirements is available on the official European Commission portal.

Data protection under GDPR and cross-border data compliance for non-EU companies

In the EU, personal data protection is governed by the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679). This regulation applies not only to companies established in the EU but also to organizations outside the EU if they process the personal data of EU residents (for example, when selling goods, providing services, or tracking user behavior online). Non-compliance with the GDPR can result in fines of up to €20 million or 4% of annual global turnover.

Appointing an EU-based data protection representative

If a company does not have a legal entity or branch in the EU but processes the data of EU citizens, it must appoint an EU Data Protection Representative in accordance with Article 27 of the GDPR.

Key functions of the representative:

1. Acting as the point of contact for supervisory authorities and data subjects;
2. Maintaining copies of processing documentation;
3. Facilitating communication with regulators in case of inspections or complaints.

The full list of requirements for appointing a representative can be found on the European Commission’s portal.

Ensuring compliance with cross-border data transfers

Data transfers outside the EU are permitted only under specific conditions:

1. Transfer to countries with an adequate level of protection (as determined by the European Commission);
2. Use of Standard Contractual Clauses (SCCs), approved by the European Commission, to contractually guarantee data protection;
3. Implementation of Binding Corporate Rules (BCRs) — internal corporate policies for multinational companies.

The latest adequacy decisions can be checked on the official European Commission website.

Taxation, VAT registration obligations and permanent establishment risks for non-EU companies

Taxation of businesses operating in the EU is governed by both EU-wide and national rules. For companies registered outside the EU, the key aspects include VAT registration, determining permanent establishment (PE) status, and using international tax treaties to avoid double taxation.

VAT registration obligations for non-EU businesses

Companies outside the EU that sell goods or provide services to customers in the EU may be required to register for VAT, even without having a legal entity in the EU. Examples include:

1. Selling goods in the EU via an online store with delivery from abroad
2. Providing electronic services (e.g., SaaS) to EU residents
3. Storing goods in the EU (including in marketplace warehouses)

Key mechanisms to simplify VAT administration:

1. One Stop Shop (OSS) – a single online reporting system for companies selling goods/services in multiple EU countries;
2. Import One Stop Shop (IOSS) – for simplified VAT declaration on imported goods valued up to €150.

Permanent establishment risks and tax treaties

A permanent establishment (PE) arises if a foreign company has a fixed place of business in the EU (e.g., office, warehouse, production facility, or even a dependent agent). Having PE status means the company must pay corporate tax in that country on income attributable to the PE’s activities.

Factors that increase the risk of being considered a PE:

1. Having employees permanently working in the EU;
2. Signing contracts on behalf of the company within the EU;
3. Operating a warehouse or order processing center in the EU regularly.

To minimize tax burdens, companies can use double taxation treaties (DTTs). The latest list of such treaties for each EU country can be found on the OECD portal.

Trade and customs compliance: EORI registration, customs declarations and applicable tariffs

For any company importing or exporting goods to the European Union, compliance with EU customs regulations is a mandatory step. These rules apply equally to residents and non-residents; however, for companies outside the EU, the procedure can be more complex and may require appointing a customs representative.

Obtaining an EORI number

An EORI (Economic Operators Registration and Identification) number is a unique registration number required for all companies engaged in trade with the EU. Without it, customs declarations cannot be submitted.

Non-EU residents must register in one of the EU countries through which the first import or export will take place. A single EORI number is valid across all EU member states. Registration is carried out via the national customs authorities.

Customs declarations and documentation

When moving goods across EU borders, customs declarations must be submitted along with supporting documents:

• Invoices and packing lists;
• Certificates of origin;
• Licenses and permits for goods subject to restricted circulation;
• Transport documents (CMR, Bill of Lading, etc.).

Important! Errors in HS codes or inaccurate information in the declaration can lead to fines, cargo delays, or confiscation.

Tariffs and preferential trade agreements

The amount of customs duty depends on the classification of goods under the HS system, as well as their country of origin. The EU has concluded a number of Free Trade Agreements (FTAs), which allow goods to be imported at reduced or zero tariffs, provided that rules of origin are met.

Corporate governance and ongoing compliance obligations for non-EU entities

Entering the EU market requires not only registering a business but also complying with ongoing corporate and reporting obligations. Many of these depend on the specific jurisdiction, but there are general rules applicable across the Union that are particularly important for companies from outside the EU.

Local director and residency requirements

In some EU countries, companies are required to have at least one director who is a resident of that country or the EU. Examples:

1. Netherlands: having a local director reduces the risk of the company being classified as foreign for tax purposes.
2. Cyprus: at least one resident director is needed to establish tax residency in the country.
3. Ireland: company must have at least one EU-resident director or provide an insurance bond.

Failure to meet these requirements can result in fines, difficulties in opening bank accounts, and denial of tax benefits.

Company registration duties

Once a company is incorporated in the EU, it must complete several procedures:

1. Tax registration
2. Registration with the commercial or corporate registry
3. Submission of initial reports to tax and statistical authorities
4. Obtaining the necessary licenses and permits for the specific type of activity

All these steps are recorded in official registers and are available for review by counterparties and government authorities.

Ongoing reporting and compliance

In most EU countries, companies are required to:

1. Publish annual financial statements (and in some countries, interim reports as well)
2. Update information on beneficial owners in the UBO (Ultimate Beneficial Owners) register
3. Comply with accounting document retention requirements (usually 5–10 years)
4. Confirm their registered address and list of directors

Failure to comply with these rules can lead to administrative fines, freezing of corporate bank accounts, and even removal from the registry. The European Commission provides the Business Registers Portal, where you can find information on corporate registries in all EU member states.

How can Key2Law help companies from non-EU countries successfully enter the European market?

Entering the EU market is a complex process that requires a thorough understanding of regulations, tax rules, and industry standards. A mistake at any stage can cost a company time, money, and reputation. The Key2Law team offers comprehensive support to ensure your EU market entry plans are implemented as efficiently and securely as possible.

Our experts are ready to provide the following services:

1. Analysis and selection of the optimal market presence model. We will help you choose between a subsidiary, branch, or representative office, taking into account the tax and compliance nuances in different EU countries.
2. Regulatory compliance support. We will obtain all necessary licenses, certificates, and permits, including CE marking and industry-specific authorizations.
3. GDPR and data protection. We will arrange the appointment of an EU Data Representative and set up processes for the secure transfer of data outside the EU.
4. Taxation and VAT. We will handle VAT registration, minimize the risk of being deemed to have a permanent establishment, and ensure compliance with international tax treaties.
5. Customs and trade. We will obtain an EORI number and establish procedures for customs declarations and duty calculations.
6. Corporate governance. We will arrange the appointment of local directors and ensure compliance with all reporting and registration requirements.

By partnering with Key2Law, you gain not just a regulatory advisor, but a strategic partner who helps you not only comply with EU legislation, but also maximize the opportunities it offers for your business.