Lille: The northern French city will host the headquarters of a body that does not yet exist and will not operate in full until 2028. On 16 September the European Parliament approved the reform of the Union Customs Code, following the Council’s final green light on 3 September. The text still requires formal signature and publication in the Official Journal, with entry into force targeted for the end of September 2026.
The Union has not rebuilt its customs framework on this scale since the customs union was established in 1968. Three elements carry most of the change.
The first is the EU Customs Authority. Headquartered in Lille, it will have its own legal personality and its own budget, and a mandate that can be summarised as making twenty-seven national administrations act as one. It will run centralised risk management and threat assessment, coordinate joint controls between member states, support sanctions implementation, and cooperate on a structured basis with Europol, Frontex, the European Anti-Fraud Office and market surveillance authorities. Full operations are expected from January 2028.
The second is the EU Customs Data Hub, described by those drafting it as the digital backbone of the new Code. The design intention is to replace the traditional declaration — a document filed at a border by an agent — with a centralised, real-time data exchange platform connecting economic operators, customs authorities and enforcement bodies across all member states. Instead of twenty-seven national systems exchanging messages, one platform holds the data and the authorities read from it.
The third is the treatment of e-commerce. Sellers and platforms facilitating distance sales from outside the Union directly to EU consumers will be treated as importers, and will become responsible for customs data, applicable charges and product-compliance requirements. This reallocates accountability away from the consumer who clicks a button and toward the commercial actor who profits from the sale — a change driven by parcel volumes that have overwhelmed the assumptions on which the 1968 framework, and its 1992 and 2013 revisions, were built.
The redistribution of responsibility is the part that will consume compliance departments over the next two years. A marketplace that has understood itself as an intermediary will find itself carrying importer obligations, with the data quality and liability consequences that follow. Customs brokers, whose business model rests on filing declarations, face a platform designed to make many of those filings unnecessary. Neither transition is a matter of installing software.
National administrations face their own problem. Each has invested heavily in its own IT estate, its own risk-scoring logic and its own trader relationships. Migrating to a shared hub means, in practice, accepting that a centrally computed risk score may override a national judgement about which container to open. That is a sovereignty question dressed as an integration project, and it is why the timeline stretches to 2028 rather than 2027.
The sequencing is deliberate. Entry into force this month starts the legal clock; the Authority stands up over the following period; the Data Hub arrives in phases rather than as a single switchover. Customs administrations have watched enough large public IT programmes to insist on phasing.
What the reform does not do is change tariff rates or trade policy. It changes who holds the data, who assesses the risk, and who is answerable when a non-compliant product reaches a consumer. For a union whose external border is its most tangible shared asset, that is a substantial enough redefinition to be going on with.
