Art. 85 of the Utilities Directive (2014/25/EU) contains provisions allowing contracting public entities to reject foreign goods not covered by any EU international commitments from its tender procedures. In these cases, a tender submitted for the award of a supply contract may be rejected where the proportion of the products originating in third countries exceeds 50% of the total value of the products constituting the tender (Art. 85.2). Additionally, in cases of equivalent offers, the provisions provide for a preference for European tenders and tenders covered by EU's international obligations. In practice, this possibility has rarely been used.
In the Czech Republic, the Directive has been transposed with Act No. 134/2016 on Public Procurement.

Transparency issues are reported to pose significant challenges in public procurement procedures in the Czech Republic, particularly for foreign bidders. Concerns relate to overly narrow tender specifications and implicit biases that appear to favour domestic vendors and state-owned enterprises. Although the government has repeatedly affirmed its commitment to transparency, allegations of corruption persist, underscoring continuing concerns regarding the integrity of procurement processes.

DRC has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

DRC has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

DRC has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

It is reported that the de minimis threshold, that is the minimum value of goods below which customs do not charge duties, is USD 100, below the 200 USD threshold recommended by the International Chamber of Commerce (ICC).

DRC does not have a legal framework that applies consumer protection to online transactions.

The Democratic Republic of Congo has not joined any free trade agreement committing to open transfers of cross-border data flows.

The Digital Code establishes a robust and comprehensive legal framework for data protection in the Democratic Republic of the Congo, applying to all entities, whether public or private, domestic or foreign, that process personal data within or directed towards the country. It regulates the full spectrum of data handling activities, including collection, processing, transmission, transfer, storage, and use, while clearly defining the roles and responsibilities of data controllers, processors, and their representatives. In addition, it enshrines the rights of data subjects, such as access, rectification, erasure, and objection to processing, and provides for the establishment of a dedicated data protection authority to ensure compliance and enforcement. Prior to its enactment, the DRC lacked a unified data protection regime, relying instead on limited and fragmented provisions found in sector-specific legislation, notably Law No. 20/017 on Telecommunications and Information and Communication Technologies.

According to Art. 222 of the Digital Code, every data controller is required to appoint a data protection officer (DPO). This obligation applies irrespective of the size of the organisation or whether the processing is occasional or regular. The DPO, who enjoys independence in the exercise of their functions, is responsible for independently ensuring the internal application of the Digital Code’s provisions relating to data protection and for maintaining a register of processing operations carried out by the data controller.

A basic legal framework on intermediary liability for copyright infringement is absent in DRC's law and jurisprudence.

A basic legal framework on intermediary liability beyond copyright infringement is absent in DRC's law and jurisprudence.

According to Art. 92 of Law No. 20/017 of 25 November 2020 relating to Telecommunications and Information and Communication Technologies, any operator of a telecommunications network open to the public or any provider of telecommunications services Internet access is required to identify its subscribers at the time of subscription to telecommunications services., In addition, Art. 93 strengthens this by indicating that no connection to the network can be granted without prior identification. Moreover, according to Art. 94, the State reserves the right to interrupt any connection of the subscriber who is not or has been misidentified.