Dropshipping Legal Requirements: A Complete Compliance Guide (2025)
Most dropshippers ignore legal compliance until they get sued, fined, or shut down. This guide covers the legal requirements you actually need to know — business registration, consumer protection, advertising rules, and product safety — so you can build a store that lasts.
Important disclaimer
This guide is educational, not legal advice. Laws vary by jurisdiction and change frequently. Always consult a qualified attorney for your specific situation. See our disclaimer.
Business Registration: What Entity Do You Need?
Operating a dropshipping store as a sole proprietor (no formal entity) is legal in most countries, but it exposes your personal assets to business liabilities. If a customer sues your store, your personal savings, car, and home are at risk. Forming a limited liability company (LLC) or equivalent separates your personal and business assets, protecting you from personal liability.
In the US, an LLC costs $50–$500 to form (varies by state) and $0–$300/year in ongoing fees. Delaware, Wyoming, and Nevada are popular states for LLC formation due to low fees and business-friendly laws, but if you live in a state with state income tax, you'll typically want to register in your home state to avoid double registration.
Outside the US: UK Limited Company (£12 to register), Canadian Federal Corporation (CAD $200), Australian Pty Ltd (AUD $506), Singapore Private Limited (SGD $300–$600). The principle is the same everywhere — separate your personal and business liability.
The 6 Legal Documents Every Dropshipping Store Needs
- Privacy Policy — Required by GDPR (EU/UK), CCPA (California), and Google AdSense. Must disclose what data you collect, how you use it, and third-party sharing. See our Privacy Policy for a template.
- Terms of Service — Governs the relationship between you and your customers. Should cover acceptable use, payment terms, shipping times, dispute resolution, and limitation of liability. See our Terms of Service for a template.
- Return Policy — Required by most ad platforms and payment processors. Must specify return window, condition requirements, who pays return shipping, and refund timing. See our Return Policy Guide.
- Shipping Policy — Must clearly state shipping times, costs, and geographic coverage. Critical for dropshipping because shipping times are longer than customers expect.
- Disclaimer — Limits your liability for product claims and clarifies that your content is educational, not professional advice. See our Disclaimer.
- Contact Page — Required by GDPR and most ad platforms. Must include a working email address and ideally a physical mailing address (PO boxes are acceptable).
All 6 documents should be linked in your store footer and accessible from every page. Google AdSense, Meta, Google Ads, and TikTok Ads all check for these during approval — missing any of them can get your application rejected or your ad account suspended.
Consumer Protection Laws You Must Follow
FTC Act (US) — Truth in Advertising
The Federal Trade Commission requires that all advertising be truthful, not misleading, and backed by evidence. Specific rules dropshippers frequently violate:
- False scarcity. "Only 3 left in stock!" when you have 300 is a deceptive practice. Don't create fake urgency.
- Fake compare-at prices. Showing a crossed-out "$79" compare-at price when the product has never sold for $79 is deceptive. Compare-at prices must reflect actual prior selling prices.
- Unsubstantiated claims. "Cures back pain in 7 days" requires scientific evidence. "May help with back pain" is safer.
- Fake reviews. Writing your own reviews or paying for fake reviews is illegal under the FTC Act and carries fines up to $50,000 per violation.
- Endorsement disclosures. If you pay influencers or use affiliate links, the relationship must be clearly disclosed (#ad, #sponsored, "affiliate link").
GDPR (EU/UK) — Data Protection
The General Data Protection Regulation applies to any business that collects data from EU or UK residents, regardless of where the business is based. Key requirements:
- Cookie consent. Visitors must affirmatively consent to non-essential cookies (analytics, advertising) before they're set. Use a GDPR-compliant consent banner.
- Right to access. Users can request a copy of all data you hold about them.
- Right to erasure. Users can request deletion of their data.
- Data processing agreements. You must have DPAs with all third-party services that process user data (Shopify, Klaviyo, Meta, Google).
- Breach notification. You must notify users within 72 hours of a data breach.
GDPR fines can reach €20 million or 4% of global annual revenue, whichever is higher. Even small dropshipping stores have been fined — enforcement is not limited to large companies.
CCPA (California) — Consumer Privacy
The California Consumer Privacy Act gives California residents similar rights to GDPR, but with a higher threshold — it only applies to businesses with $25M+ in annual revenue, 50,000+ California consumers' data, or 50%+ revenue from selling data. Most new dropshippers don't meet this threshold, but it's worth following CCPA best practices anyway because other states are passing similar laws (Virginia, Colorado, Connecticut, Utah).
Product Safety and Compliance
Certain product categories require specific certifications or compliance with safety standards. If you sell these without compliance, you face product seizures, fines, and personal injury liability.
| Product Category | Required Certification | Risk |
|---|---|---|
| Electronics (chargers, batteries) | FCC (US), CE (EU), UKCA (UK) | Fire, electrical shock |
| Children's products (toys, baby items) | CPSC (US), EN 71 (EU) | Choking, toxicity |
| Cosmetics & skincare | FDA registration (US), CPNP (EU) | Skin reactions, toxicity |
| Supplements | FDA GMP, NSF | Adverse health effects |
| Food contact items | FDA, LFGB (EU) | Chemical leaching |
| Jewelry (children's) | CPSC lead testing | Lead poisoning |
Ask your supplier for certification documents before listing any product in these categories. If they can't provide them, don't sell the product. The legal risk vastly exceeds the profit.
Advertising Platform Compliance
Each ad platform has its own policies that go beyond legal requirements. Violating them gets your ad account banned — and bans are often permanent.
Meta (Facebook/Instagram) Advertising Policies
- Prohibited content: adult products, weapons, tobacco, CBD, supplements with weight-loss claims, counterfeit goods
- Restricted content: alcohol, gambling, pharmaceuticals, financial products (require special approval)
- Personal attributes: cannot target or reference personal attributes (race, religion, sexual orientation, health conditions)
- Before/after images: banned for any body-related product
- Misleading claims: "cures," "treats," "guaranteed results" trigger automatic reviews
Google Ads Policies
- Similar to Meta, but Google is stricter on health claims, counterfeit goods, and "get rich quick" offers
- Google requires a working website with all legal pages (Privacy Policy, Terms, Contact) before approving any ads
- Google Merchant Center has additional product feed requirements (accurate pricing, shipping times, GTINs)
TikTok Ads Policies
- Strictest of the three on health and beauty claims
- Banned categories include CBD, supplements, weight loss, financial services (without special approval)
- TikTok requires video creative that doesn't violate community guidelines
Intellectual Property: Trademark and Copyright
Trademark and copyright violations are the #2 cause of ad account bans (after policy violations). The rules:
- Don't use trademarked names in your ads without authorization. "iPhone case" is fine; "Apple iPhone case" without Apple's authorization is a trademark violation.
- Don't use copyrighted images from other websites or stock photo sites without a license.
- Don't sell counterfeit goods. Replica Nike shoes, fake Louis Vuitton bags — these will get your store, ad account, and payment processor shut down, and you may face criminal charges.
- Trademark your store name once you're past $10k/month in revenue. This protects your brand from copycats.
- Don't copy competitor ad creative. Even if it's not technically trademarked, you can be sued for unfair competition.
Payment Processor Compliance
Stripe, PayPal, Shopify Payments, and other payment processors have their own acceptable use policies. Common violations that get accounts frozen:
- Selling prohibited products (CBD, supplements, adult, replica)
- High chargeback rates (above 1% for most processors)
- Unrealistic shipping times (claiming 3-day shipping when actual is 21 days)
- No clear return policy on the store
- Sudden spikes in volume that trigger fraud detection
If your account gets frozen, the processor typically holds your funds for 90–180 days while they investigate. This can bankrupt a small dropshipping store. Always have a backup processor (e.g., primary: Stripe; backup: PayPal; high-risk backup: PaymentCloud).
The Legal Compliance Checklist for New Dropshipping Stores
- Form an LLC (or equivalent) before processing your first order
- Get a federal tax ID (EIN in the US)
- Open a business bank account (never mix personal and business finances)
- Publish all 6 required legal documents (Privacy, Terms, Returns, Shipping, Disclaimer, Contact)
- Set up GDPR-compliant cookie consent if selling to EU/UK
- Register for sales tax in states/countries where you have nexus (see our Taxes Guide)
- Verify product safety certifications for any regulated product categories
- Read and comply with each ad platform's policies before launching ads
- Don't make health, income, or performance claims you can't substantiate
- Trademark your store name once you're past $10k/month in revenue
When to Hire a Lawyer
You don't need a lawyer to start a dropshipping store — the documents in our legal section cover the basics. But consult an ecommerce attorney if any of the following apply:
- You're selling in regulated categories (supplements, cosmetics, electronics, children's products)
- You receive a cease and desist letter or trademark complaint
- You're sued by a customer or competitor
- You're operating in multiple countries with different consumer protection laws
- Your store revenue exceeds $500k/year and you need advanced entity structuring
Most ecommerce attorneys charge $200–$500/hour or $500–$2,000 for document review. The cost is small compared to the cost of non-compliance.