Digital delivery does not remove the pre-contract duty
A consumer applying for credit online must still receive the information required under the applicable consumer credit rules. Under Directive 2008/48/EC Article 5, pre-contractual information is supplied on paper or another durable medium, using the prescribed form for covered agreements. CCD2 Article 10 updates the standard presentation and delivery rules for relevant agreements. The question is not whether a website can display information at all, but whether the information reaches the consumer in the legally required manner and in good time before commitment. Firms should separate the EU legal framework from the Member State implementing law and any relevant rules for distance contracting.
Understand what a durable medium must achieve
A durable medium is not defined by a marketing label such as digital document. The relevant legal concept involves enabling a consumer to store information addressed personally to that consumer, access it for an adequate period and reproduce it unchanged. Depending on design, an email attachment, downloadable document or appropriately configured secure inbox might satisfy the relevant requirements. A webpage that changes without an accessible permanent record cannot simply be assumed equivalent. Product and legal teams should assess functionality, retention, immutability and the actual ability of a consumer to access the content. This assessment must consider the applicable legal text and jurisprudence rather than relying only on a software vendor's feature description.
Deliver information early enough for consideration
Both the existing framework and CCD2 emphasise providing pre-contract information in good time before the consumer is bound. Displaying a disclosure link next to the final acceptance control may raise questions about whether the consumer had a meaningful opportunity to review it. CCD2 Article 10 also contains a specific reminder mechanism concerning withdrawal where pre-contract information is provided less than one day before a binding agreement or offer, subject to its terms and national implementation. That reminder is not a general permission to delay information until after contracting. Define the precise legal point of consumer commitment in each application flow, and test document delivery relative to that event.
A visible page is not proof of successful delivery
A creditor can generate an accurate document while its delivery mechanism fails. The link may expire, a pop-up may be blocked, or an applicant may be redirected before a file becomes available. The compliance control should therefore test generation, rendering, language, accessibility, storage and delivery as distinct steps. Record a version identifier, relevant transaction event and an appropriate confirmation of availability without inventing a mandatory EU-wide click-through record. Consumer consent to a particular medium may be relevant under the applicable rules. Do not confuse a checkbox confirming acceptance of general terms with evidence that all prescribed pre-contract information was supplied in the required form.
Handle personalised offers and revised terms
Digital lenders often adjust a credit amount, rate or payment schedule before the consumer signs. Each material change can affect the information previously delivered, making version control essential. Systems should map agreed terms to APR figures, fees, repayment schedules and creditor identity, and regenerate the required form where the legal content changes. A cached PDF referring to a former offer should not remain the only accessible disclosure for a revised agreement. Error states, interrupted applications, joint workflows and resubmitted forms deserve testing. Document who can alter templates and who verifies that the stored document corresponds to the final binding offer.
Create a practical audit record without overcollecting
A defensible operational record may include the governing national rule, template version, time of generation, delivery method, relevant offer parameters, language and system outcome. Audit samples should inspect the consumer-facing artifact rather than relying exclusively on internal field mapping. Record technical incidents and whether affected applications were paused or corrected. Appropriate privacy and information-security controls apply to saved credit documents. Revisit delivery architecture when channels change, legal interpretations of durable media develop, or national CCD2 measures come into application from 20 November 2026. Digital convenience does not substitute for compliance with existing domestic law in the meantime. Review the consequences of inaccessible or corrupted attachments as well as normal delivery. A consumer with assistive technology may have a document technically available but difficult to navigate. A legal and operational check should consider the actual form delivered, its language, usable structure and retention properties. Where the firm relies on a secure account inbox, examine what happens when the account closes or credentials are lost. The record should show how consumers can retrieve what they were supplied without having to depend solely on the creditor's ability to rewrite the content later. Test these scenarios before treating the channel as reliable.
Frequently asked questions
Can a website replace a durable-medium disclosure?
Not automatically. The specific technical solution must meet the applicable durable-medium and timing requirements.
Can disclosures be provided only after acceptance?
The general rule requires them in good time before a consumer becomes bound; CCD2 includes a specific reminder rule for certain timing situations.
Does opening a link prove legal delivery?
A click alone does not demonstrate every requirement; check document content, timing, medium and national law.
Primary sources
Directive 2008/48/EC ↗Directive (EU) 2023/2225 ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.