PlaybookEU

EU Market Surveillance Regulation (EU) 2019/1020 Authority response playbook

How to respond fast without losing evidence quality.

Designed for inspections and investigations: intake, evidence packs, corrective action, and post-closure CAPA.

Author
Sorena AI
Published
Feb 21, 2026
Updated
Feb 21, 2026
Sections
5

Structured answer sets in this page tree.

Primary sources
2

Cited legal and guidance references.

Publication metadata
Sorena AI
Published Feb 21, 2026
Updated Feb 21, 2026
Overview

Under the MSR, "compliance" is tested when an authority asks questions: can you identify the economic operator, provide the declaration/technical documentation quickly, explain decisions in an auditable way, and execute corrective actions (including withdrawal/recall) when needed? This playbook converts MSR requirements into a repeatable, owner-driven response workflow that works across Member States and channels.

Section 1

1) Intake and triage (first 24 hours)

Start by classifying the request: documentary check, test/sample request, marketplace listing investigation, serious-risk escalation, or corrective-action follow-up. Confirm which product family/SKU and which Member State authority is involved.

Decide who is the responsible economic operator contact (especially for Article 4 products) and assign a single case owner (legal/compliance) with a named technical evidence owner (product/quality).

  • Confirm whether the case is a documentary check, customs hold, marketplace investigation, safety incident, or serious-risk escalation.
  • Freeze product identifiers, listing URLs, batch or serial ranges, shipping records, and the current declaration version.
  • Assign one legal or compliance owner and one technical evidence owner, with a written response timetable.
Section 2

2) Build the evidence pack (Article 4-style 'technical file on request')

Article 4 focuses the pack on the declaration and technical documentation, but authorities also have broader investigative powers under Article 14. Build the pack so it can expand from a document response into a full investigation file without losing traceability.

The most reliable pattern is one authority pack per product family with controlled variants and addenda.

  • Core artifacts: DoC/DoP, technical documentation index, standards list, test reports, traceability, change log, and risk/complaint history.
  • Language handling: include an executive summary in the authority's language where feasible; translate only what is required.
  • Provenance controls: tie each artifact to product version, date, owner, and storage location; prevent "orphan PDFs".
Section 3

3) Procedural rights and safe communications

Measures must state the exact grounds and be communicated without delay. Operators must be informed about remedies and time limits, and in normal cases should have at least 10 working days to be heard before a measure is taken.

At the same time, authorities can move urgently and they can use broad investigative powers, so your communication model must combine speed with controlled evidence handling.

  • Use a single written record: timeline of events, requests, deliveries, and decisions with versioned attachments.
  • Separate facts from interpretations: keep technical analyses clearly attributed and dated.
  • Redaction policy: define what counts as trade secret, how to share securely, and how to justify redactions.
Section 4

4) Corrective action: from listing controls to withdrawal/recall

Authorities aim to ensure corrective action is taken by economic operators and can take measures when operators fail to act (Article 11(1)). For serious risk, authorities ensure withdrawal/recall or prohibition of making available on the market where needed (Article 19).

Operationally, corrective action ranges from 'fix the documentation' to 'stop shipping now'. Your playbook must support both.

  • Immediate controls: pause shipments, block listings, quarantine stock, preserve evidence, and notify the Article 4 operator contact.
  • Article 14 online-interface path: prepare for removal requests, warning language, or access restrictions where no other effective means exist to eliminate a serious risk.
  • Customs path: if the case is tied to Article 26 suspension or Article 28 refusal of release, keep customs-facing documents and product identifiers aligned with the authority file.
Section 5

5) Closeout and prevention (CAPA)

Evidence from one Member State can be used in another without further formal requirements (Article 11(6)). That means the same underlying weakness will be found repeatedly unless you fix root causes.

Close every case with prevention: update controls, train owners, and improve evidence retrieval so the next request is easier.

  • Root cause analysis: why did the issue exist (documentation, labeling, supplier evidence, listing governance)?
  • Control upgrades: add release gates, audits, and monitoring for the channel that triggered the case.
  • Metrics: time-to-acknowledge, time-to-evidence, time-to-control, and recurrence rate per product family.
Recommended next step

Turn EU Market Surveillance Regulation (EU) 2019/1020 Authority response playbook into an operational assessment

Assessment Autopilot can take EU Market Surveillance Regulation (EU) 2019/1020 Authority response playbook from operationalizing response workflows and review cycles to a reusable workflow inside Sorena. Teams working on EU Market Surveillance Regulation (EU) 2019/1020 can keep owners, evidence, and next steps aligned without copying this guide into separate documents.

Primary sources

References and citations

Related guides

Explore more topics

Enforcement powers and penalties | EU MSR (Regulation (EU) 2019/1020) | Checks, serious risk, penalties
A practical enforcement guide for Regulation (EU) 2019/1020 covering Article 11 risk-based checks, Article 14 authority powers.
EU Market Surveillance Regulation applicability test | Regulation (EU) 2019/1020 scope, Article 6 distance sales
A practical applicability test for the EU Market Surveillance Regulation (Regulation (EU) 2019/1020).
EU Market Surveillance Regulation requirements | Regulation (EU) 2019/1020 (MSR) obligations
A practical requirements breakdown for Regulation (EU) 2019/1020 covering Article 4 EU economic-operator tasks, Article 6 distance-sales targeting.
EU MSR Article 4 economic operator duties and responsible-person setup | Regulation (EU) 2019/1020
A practical guide to Article 4 of Regulation (EU) 2019/1020: when an EU economic operator is required, who can act, what Article 4(3) tasks they perform.
EU MSR checklist | Regulation (EU) 2019/1020 compliance checklist for inspections
An audit-ready checklist for the EU Market Surveillance Regulation (Regulation (EU) 2019/1020): online targeting and distance sales (Article 6).
EU MSR compliance program | Regulation (EU) 2019/1020 implementation guide
A practical implementation guide for the EU Market Surveillance Regulation (Regulation (EU) 2019/1020).
EU MSR deadlines and compliance calendar | Regulation (EU) 2019/1020 key dates (Article 44, Article 41)
Key dates for Regulation (EU) 2019/1020 covering early application from 1 January 2021 for Articles 29 to 33 and 36, general application from 16 July 2021.
EU MSR FAQ | Regulation (EU) 2019/1020 questions (Article 4, Article 6, investigations)
Answers to common questions about the EU Market Surveillance Regulation (Regulation (EU) 2019/1020): online targeting (Article 6).
EU MSR penalties and fines | Article 41 penalties (Regulation (EU) 2019/1020) | Reduce exposure
Penalty exposure under Regulation (EU) 2019/1020: what Article 41 requires, why penalties differ by Member State.
Investigations and evidence requests | EU Market Surveillance Regulation (EU) 2019/1020 | What authorities check
A practical guide to MSR investigations under Regulation (EU) 2019/1020 covering Article 11 risk-based checks.
Market surveillance for online marketplaces | EU MSR (Regulation (EU) 2019/1020) | Operator controls
A practical guide for online marketplaces under Regulation (EU) 2019/1020: Article 6 distance-sales targeting, Article 7(2) cooperation.
MSR vs GPSR | Market Surveillance Regulation (EU) 2019/1020 vs General Product Safety Regulation (EU) 2023/988
A grounded comparison of Regulation (EU) 2019/1020 and Regulation (EU) 2023/988: MSR as the enforcement and coordination framework.
Online sales under the EU Market Surveillance Regulation | Article 6 distance sales + ecommerce controls
A practical guide for ecommerce sellers under Regulation (EU) 2019/1020: Article 6 distance-sales targeting, Article 4 operator identification.
What changes with EU market surveillance | Regulation (EU) 2019/1020 (MSR) practical impact
A practical 'what changed' guide for Regulation (EU) 2019/1020: stronger EU-wide coordination, explicit online/distance sales targeting logic (Article 6).