EU General Product Safety Regulation Compliance

The baseline obligation is simple and demanding: economic operators must place or make available on the market only safe products. The assessment must look beyond a finished-product label and consider design, technical features, composition, packaging, assembly, installation, use, maintenance, foreseeable interaction with other products, presentation, warnings, consumer categories, food-like or child-appealing appearance, and product-specific cybersecurity or evolving functionality where those features can affect safety.

Manufacturers must turn that assessment into an internal risk analysis and technical documentation before placing a product on the market. The documentation must at least describe the product and the safety-relevant characteristics, and where risks require it, include risk analysis, mitigation decisions, test outcomes, and the standards or other safety elements applied.

Standards and certification do not all have the same legal effect. Conformity with a relevant European standard whose reference is published in the Official Journal creates a presumption of safety only for the risks and risk categories that standard covers. Other European, international, or national standards, voluntary certification schemes, Commission guidance, codes of practice, the state of the art, and reasonable consumer expectations are assessment elements under Article 8, not automatic proof that the product is safe. Market surveillance authorities may still act when evidence shows that a product is dangerous.

GPSR compliance records should identify the manufacturer, importer, distributor, fulfilment or other economic-operator role involved in the supply chain and should not treat those roles as interchangeable. Economic operators need internal product-safety processes and must cooperate with market surveillance authorities on actions that eliminate or mitigate product risks.

A product covered by the GPSR cannot be placed on the Union market unless there is an economic operator established in the Union responsible for the Article 16 tasks. For products sold online or through other distance-sales channels, the offer must visibly show manufacturer contact information, the Union responsible person where the manufacturer is not established in the Union, product identification including picture and type or other identifier, and required warnings or safety information.

Online marketplace providers have GPSR-specific interface and workflow duties. They must designate and register a single market-surveillance contact point in the Safety Gate Portal, provide a consumer product-safety contact point, maintain internal product-safety processes, and organise product listings so traders can provide required safety and traceability information that consumers can access on the listing.

Marketplace teams also need operational timers. They must act on market-surveillance orders to remove, disable, or warn on dangerous-product offers without undue delay and in any event within two working days. Product-safety notices received through the Digital Services Act notice mechanism must be processed without undue delay and in any event within three working days.

When a manufacturer knows of an accident caused by a product it placed or made available on the market, the manufacturer must notify the competent authorities of the Member State where the accident occurred through the Safety Business Gateway without undue delay. The accident notification must include the product type and identification number and the accident circumstances where known; importers and distributors that know of an accident must inform the manufacturer without undue delay, and the Union responsible person must ensure notification where the manufacturer is not established in the Union and the responsible person knows of the accident.

If a manufacturer considers, or has reason to believe based on information in its possession, that its product is dangerous, it must immediately take corrective measures such as withdrawal or recall as appropriate, inform consumers, and inform market surveillance authorities through the Safety Business Gateway. Recall communication should be designed around direct contact first, then a clear and visible recall notice where not all affected consumers can be reached.

A useful GPSR compliance file lets a reviewer reconstruct why the product was considered safe, who carried each legal role, how the listing or marketplace workflow displayed safety information, and how the business would report or correct a dangerous product. It should be product-specific and version-specific; a generic product-safety policy does not prove that a specific consumer product, listing, batch, software version, or recall campaign met the GPSR obligations.

The evidence file should also be ready for authority questions. Safety Gate notification rules point to the types of information authorities need: product identifiers, economic-operator and responsible-person data, supply-chain and traceability information, risk descriptions, test reports or risk assessments, corrective measures, accident or incident information, recall-notice URLs, and online-offer URLs or unique identifiers where the product was sold online.