Harmonisation does not remove national implementation
Directive (EU) 2023/2225 establishes a framework applicable through Member State transposition. Two firms may offer commercially similar personal loans to consumers in different EU countries, yet need to review different national implementing instruments, authorities, choices and enforcement arrangements. Article 41 requires Member States to designate competent authorities with adequate investigative and enforcement powers. It does not itself create a single EU licensing authority for all consumer-credit providers. The 20 November 2026 application date is shared under Article 48, but the operative domestic legal texts remain important. Cross-border credit providers should therefore build a map by consumer market and business role, not merely keep one generic CCD2 controls checklist. Product similarity is not proof of equivalent national authorisation.
Establish where regulated activities take place
A cross-border arrangement can involve a creditor incorporated in one Member State, a broker based in another and consumers targeted in a third. Distribution and advertising may occur through websites, merchants and mobile applications. The relevant legal analysis should identify which entity grants or promises credit, who introduces or arranges it, where it targets customers and where contracting and servicing activities take place. These facts matter when applying territorial rules and licensing obligations. A website accessible from a country is not necessarily the same as deliberately targeting that market, but firms should not rely on a disclaimer alone to settle the question. Document advertising language, customer eligibility controls, geographic targeting and the actual contracting parties before deciding which national measures apply.
Permissions, passports and intermediary status
CCD2 addresses creditors and credit intermediaries but does not by itself provide a general EU-wide passport allowing any authorised consumer lender to operate in every Member State. A bank may have rights or obligations under separate EU financial-services legislation, while a non-bank creditor or broker may face national authorisation and activity-specific rules. These legal routes must not be conflated with CCD2 conduct compliance. The same firm might need to evaluate the supervisory position of a credit intermediary separately from that of the creditor named in the agreement. Record any licence, registration, exemption or cross-border authorisation with its actual statutory basis. Neither membership in a banking group nor possession of a financial-services licence in one territory resolves every regulated activity elsewhere.
Mandatory consumer rights and contract-law questions
Cross-border agreements can raise both contractual governing-law questions and mandatory consumer-protection requirements. A choice-of-law clause is not a blanket exemption from regulatory rules in the consumer's market. In appropriate cases, Regulation (EC) No 593/2008, known as Rome I, is relevant to the law applicable to contractual obligations, including particular consumer contracts. The regulation does not replace credit authorisation or conduct law analysis. Firms should separately examine the applicable mandatory provisions, the contract's chosen law, marketing and establishment facts, and the location of the borrower. Differences in national implementation can affect disclosures, withdrawal procedures and creditworthiness obligations. Specialist legal review may be required where several territories have plausible connections to a transaction.
Adapt advertising and the digital application journey
An online creditor might use a common website yet supply credit through different legal entities or country-specific terms. CCD2 sets harmonised expectations concerning advertising information, pre-contract information and creditworthiness, while implementing measures supply the operative national requirements. Each consumer market may need its own information documents, language review, fee representations, complaints path and controls for intermediaries. A centrally approved template does not prove that the right information was displayed to a consumer in the right jurisdiction and at the required stage. Review country routing, localised terms, mobile screens, representative examples, identity and borrower-purpose inputs, and version control. Test whether a customer could complete an unintended market's application path despite geographic restrictions.
National application dates and existing agreement populations
Member States had to adopt and publish CCD2 implementing measures by 20 November 2025 and must apply them from 20 November 2026. Article 47 preserves specified treatment for credit agreements already existing on that date, including selected CCD2 provisions for existing open-end agreements. A cross-border provider should not assume that every current contract automatically changes to new requirements on the same day. Its transition register needs product, national law, date of conclusion, credit type and applicable legacy servicing provisions. Contract variations and refinancings may need separate analysis. Monitoring should cover national legislation and competent authority guidance rather than presume that an EU Directive's wording by itself resolves operational details.
A cross-border control and evidence register
Keep a country matrix recording borrower market, contracting creditor, intermediary, relevant legal entities, authority, permissions, legal instrument, national CCD2 provisions, product exclusions and customer-journey controls. Link each item to official law and document a current-versus-future status decision. Include a review date and a process for onboarding new countries or changed finance partners. Test applications routed between markets, translations, late changes in the agreed amount and complaints handled by another group entity. Where a country-specific interpretation is unresolved, give it an owner rather than conceal it under an EU-compliant status. Compliance with the harmonised policy is a starting point, not evidence that every cross-border legal question has been settled.
Frequently asked questions
Does CCD2 replace all other EU lending regulation?
No. Other instruments such as the Mortgage Credit Directive and national sector-specific laws retain separate scope and requirements.
When do CCD2 national rules apply?
Member States must apply implementing measures from 20 November 2026, subject to Article 47 transition rules.
Is EU-level compliance enough for cross-border products?
No. National implementing measures, local activity rules and the actual borrower and contract facts must be assessed.
Primary sources
Directive (EU) 2023/2225 ↗Read the source in its current version. National implementing measures and product-specific applicability may require additional research.