EU Digital Services Act (DSA) Trader Traceability: What It Means for Your Google Merchant Center Account

What the DSA Actually Requires of Traders

The EU's Digital Services Act (DSA), in force since 2024, includes a "traceability of traders" obligation aimed at online marketplaces and platforms: before a trader can list products for EU consumers through an intermediary platform, the platform must collect and, in practice, make reasonably accessible certain identifying information about that trader — name, address, contact details, and applicable registration/identification numbers. The regulation is aimed primarily at large online platforms functioning as marketplaces, but the practical effect for individual e-commerce sellers advertising into the EU through Google Shopping is that the underlying transparency expectations — genuinely verifiable business identity, a real physical address, working contact information — increasingly function as a baseline shoppers, payment processors, and ad platforms alike expect to see, independent of which specific regulation technically applies to your business structure.

Where This Overlaps With GMC Business Identity Rules

Google Merchant Center's own business identity requirements — which we cover in more general form in our merchant verification guide — already require a verifiable business name, physical address, and contact method displayed on your site, checked as part of misrepresentation and business identity enforcement. The DSA's trader traceability requirements ask for substantially the same category of information, sometimes with additional specificity depending on your business's registration structure (a registration or VAT number, for instance, where applicable). Sellers who have already done a thorough GMC business identity audit are generally most of the way to DSA-aligned trader information; the gap, where one exists, is usually in registration-number specificity rather than in the basic identity information itself.

The Specific Information You Need to Display

• Legal business name — matching your actual registered entity name, not a storefront brand name alone
• Physical geographic address — a real, verifiable address, not a PO box presented as your operating location
• Contact information — email and/or phone that a consumer or regulator can actually reach a human through
• Applicable registration or identification numbers — company registration number, and VAT number where your business is VAT-registered for EU sales

Do Non-EU Sellers Targeting EU Shoppers Need to Comply?

If your Shopping feed targets EU countries and your store sells to EU consumers, the practical expectation is the same regardless of where your business is legally domiciled — a US-based seller advertising into Germany or France through Google Shopping should still display accurate, verifiable trader information on the pages EU shoppers land on. This is both a legal-exposure question (the DSA and related EU consumer protection law generally apply based on where consumers are located, not where the seller is domiciled) and a practical GMC compliance question, since Google's own business identity checks apply per the countries your feed targets.

Where This Information Needs to Actually Appear

A dedicated "Imprint," "Legal Notice," or "About Us" page carrying the full trader information, linked from your site footer and reachable within one click from any product page, is the standard pattern EU-facing e-commerce sites use (this "Impressum" convention is long-established in EU markets, particularly Germany, well before the DSA). Burying this information only inside a lengthy terms-of-service document, rather than on its own clearly-linked page, is a common gap — Google's automated and manual checks, and EU consumer protection enforcement alike, expect this information to be genuinely discoverable, not merely present somewhere in a document nobody reads.

Common Gaps We See in EU-Targeting Feeds

• US-based sellers who expanded into EU targeting without updating their identity page — the original "About Us" page was written for a US audience and never updated with a registration/VAT number once EU sales began
• Brand name shown, legal entity name never shown anywhere on-site — a shopper (or reviewer) cannot find the actual registered company behind the storefront brand
• Contact form only, no direct email or phone — a contact form alone is generally weaker evidence of genuine reachability than a direct email or phone number displayed in text
• Address present but clearly a fulfillment center or PO box, not an actual business address

Compliance Checklist

If You Sell Through a Marketplace vs. Your Own Site

Sellers who list through a third-party marketplace (rather than, or in addition to, their own Shopify or WooCommerce store) generally have the trader traceability obligation handled at the platform level — Etsy, Amazon, and similar large marketplaces have their own DSA-driven trader verification flows sellers must complete during onboarding, and the platform itself carries much of the regulatory exposure for surfacing that information to consumers. This does not remove the obligation entirely for the individual seller (you still need to provide accurate information to the platform, and false information provided to a marketplace carries its own consequences), but it does mean the "where do I display this" question in this article applies most directly to sellers running their own direct-to-consumer storefront and advertising it through Google Shopping, since there is no marketplace operator handling the disclosure surface on your behalf in that setup.

Treating This as Ongoing, Not a One-Time Fix

Trader traceability and business identity information tends to drift out of date silently — a company relocates, a registration number changes after a corporate restructuring, a support email gets decommissioned during a platform migration and nobody updates the imprint page. Because this information rarely gets checked again once it is first published, it is worth adding a recurring calendar reminder (quarterly is reasonable for most small and mid-size merchants) to verify the address, contact details, and registration numbers on your imprint or legal notice page still match your actual current business records, rather than treating this as a one-time setup task completed once and never revisited.

Frequently Asked Questions

Does this apply to me if I only sell through my own website, not through a marketplace? The DSA's marketplace-specific traceability obligations technically target platform operators, but the underlying transparency expectations increasingly apply as a practical baseline across e-commerce broadly, including direct-to-consumer sites, and overlap with GMC's own business identity checks regardless of DSA applicability specifics to your exact business structure. When in doubt, consult EU consumer law counsel for your specific situation — this article is not legal advice.

Will missing this information get my GMC account suspended? It can contribute to a business identity or misrepresentation flag if Google's review cannot verify who is behind your storefront, independent of DSA enforcement specifically.

How do I check if my business identity information is complete and discoverable? Run a free scan at gmcunbanned.com, which checks your site for the business identity signals GMC reviews look for.

Is a WHOIS-registered domain enough to establish business identity? No — WHOIS registration information is often privacy-shielded and is not a substitute for a clearly displayed legal entity name, address, and contact method on the site itself, which is what both GMC reviewers and EU trader traceability expectations actually look for.

Does a virtual office or registered-agent address satisfy the "real physical address" expectation? Generally, a legitimate registered business address (including a registered agent address used for legal correspondence, where that is a genuine part of your business's legal structure) is acceptable; what is generally not acceptable is a residential-sounding or clearly generic mail-forwarding address presented in a way designed to obscure rather than genuinely represent your business's actual legal presence.

Who within a small team should own keeping this information current? Assign it explicitly to one person (often whoever owns the website or the legal/admin function) rather than leaving it as an implicit shared responsibility — information that "everyone" is responsible for updating tends to be the information nobody actually updates when a detail changes.

Is this article legal advice? No. It summarizes practical patterns we see across GMC accounts targeting the EU, but DSA and broader EU consumer protection law are genuinely complex and jurisdiction-specific — consult qualified counsel for your specific business structure and target markets before finalizing your compliance approach.