GPSR Safety Information for Manufacturers and Sellers

!Decorative title card illustration for GPSR article

Under Regulation (EU) 2023/988, every economic operator placing a non-food consumer product on the EU market must provide clear product safety information: a product identifier (type, model, batch, or serial number), the manufacturer's name and both postal and electronic contact details, any warnings or instructions needed for safe use and disposal, and a Responsible Person's contact details when the manufacturer is based outside the EU. That information must appear in a language easily understood by consumers in each Member State where the product is sold. The regulation became directly applicable on December 13, 2024, replacing the 2001 General Product Safety Directive.

Mandatory safety information elements under GPSR:

• Product identifier: type, model, batch number, serial number, or equivalent
• Manufacturer name and registered address (postal)
• Electronic contact: email address or dedicated web contact form
• EU Responsible Person details (required when the manufacturer is outside the EU)
• Warnings for non-obvious hazards
• Instructions for safe use, where needed
• Disposal or end-of-life guidance, where relevant
• Traceability identifiers that link the physical product to its technical file

GPSR requires every economic operator to provide specific, traceable, multilingual product safety information before placing a non-food consumer product on the EU market, with ongoing obligations that continue throughout the product's life.

• What does GPSR safety information cover, and when did it take effect?
• Who is responsible under GPSR?
• What must safety warnings and instructions actually say?
• Where does safety information go, and in which languages?
• Technical documentation and traceability: what to keep and how to label it
• Risk assessment and ongoing product-lifecycle obligations
• How to report incidents and recalls using Safety Gate
• Online marketplace and ecommerce listing obligations
• A practical GPSR compliance checklist
• Record-keeping, enforcement, and what authorities actually check
• How Digital Product Passports can support GPSR compliance
• What companies consistently get wrong with GPSR safety information
• DPP Grid makes GPSR evidence management practical
• Sources
• FAQ

Regulation (EU) 2023/988 is a directly applicable EU regulation, meaning it required no transposition into national law. It has applied since December 13, 2024, and it replaced the General Product Safety Directive 2001/95/EC across all EU Member States simultaneously.

The scope is broad: virtually all non-food consumer products, including products with both consumer and professional uses. The GPSR acts as a safety net. Where sector-specific harmonized legislation (such as the Low Voltage Directive or the Toy Safety Directive) already covers a specific risk, those rules take precedence. Where harmonized rules are silent on a risk, or where a product category has no dedicated legislation, the GPSR fills the gap.

Two categories that received explicit new attention in the 2023 regulation are AI-integrated and connected products, and products sold through online marketplaces. Both present traceability and post-market monitoring challenges that the 2001 directive was not designed to handle. The GPSR also works alongside Regulation (EU) 2019/1020 on market surveillance and compliance of products, which governs how national authorities inspect, test, and enforce product safety rules. Understanding both regulations together gives a complete picture of what authorities can demand and when.

EU-OSHA notes that national market surveillance authorities implement the regulation and may notify corrective measures through Safety Gate, the EU's rapid alert system.

The GPSR assigns obligations by role, not by company size. A single business can occupy more than one role simultaneously — a brand that manufactures and sells direct-to-consumer through its own website is both a manufacturer and, in some contexts, a distributor.

!Hands applying safety label to clothing product

Manufacturers carry the heaviest burden: they prepare the technical file, conduct the risk assessment, affix the required identifiers, and draft the safety information in the first instance.

Importers must verify that the manufacturer has met its obligations before placing a product on the EU market. If a product arrives without compliant safety information, the importer cannot simply pass it through — they must either obtain compliant documentation or refuse to place the product on the market.

Distributors have a lighter but still real duty: verify that required information is present and legible before making a product available. If they have reason to believe a product is unsafe, they must not distribute it and must notify the manufacturer and competent authorities.

Online marketplace providers face obligations that are new to the GPSR: they must register on Safety Gate, designate a single point of contact for market surveillance authorities, and maintain internal safety processes capable of responding to authority orders.

EU Responsible Person: any manufacturer based outside the EU must designate an EU-established Responsible Person before the product enters the market. That person's name and contact details must appear on the product or its packaging. This is not optional, and it is one of the most commonly missed requirements for non-EU brands selling into Central Europe.

The content of GPSR safety information is not a free-form exercise. The regulation specifies what must be present, and the level of detail scales with the risk profile of the product.

Required content elements:

• Product identity: type designation, model number, batch or lot code, serial number (use whichever identifiers your production process generates; batch and serial together give the strongest traceability)
• Producer name and address: the legal name and registered postal address of the manufacturer, or the importer if the manufacturer is outside the EU
• Electronic contact: a working email address or a web-based contact form — a general website homepage does not satisfy this requirement
• Instructions for safe use: step-by-step guidance where the product presents non-obvious risks during normal or reasonably foreseeable use
• Warnings: explicit statements about hazards that a consumer cannot reasonably be expected to know without being told
• Disposal information: where the product or its components require specific end-of-life handling (batteries, electronics, certain textiles with chemical treatments)

The exception is narrow. If a product can be used safely without instructions because the risks are widely known and the product is simple, instructions may not be required. A basic kitchen knife is the example regulators have cited. Most consumer products do not meet this bar.

Quick examples by product type:

Toys: age suitability ("not suitable for children under 36 months"), choking hazard warnings for small parts, and maximum weight or load limits where applicable. These overlap with the Toy Safety Directive, but the GPSR fills any gaps.

Electronics and connected devices: electrical safety warnings (voltage, IP rating where relevant), firmware update instructions, and a note on how to access safety-critical software updates. For AI-integrated devices, the GPSR now explicitly expects ongoing safety information as the product's behavior may change post-sale.

Textiles: care instructions (which also serve a safety function for flammable fabrics), flammability warnings where applicable, and chemical treatment disclosures where relevant. A clothing Digital Product Passport can carry this information in a machine-readable, consumer-accessible format.

The placement hierarchy under GPSR is clear: on the product itself first, on the packaging second, and in an accompanying document third. Moving down the hierarchy requires a justification based on the product's size or nature — you cannot default to a leaflet simply because it is cheaper to print.

Language rules are determined by the destination Member State, not by the manufacturer's home country. If you sell into Germany, Austria, and Poland, your safety information must be in German and Polish at minimum. Member States set their own language requirements, and some require the national language exclusively. The regulation's standard is that information must be "easily understood" by consumers — which in practice means the official language(s) of each market, not just English.

For online sales, the obligation extends to the product listing itself. Safety information must appear in the listing, not only in a PDF attached to the order confirmation. A product image alone does not satisfy this requirement.

Pro Tip: When you decide to place required information on packaging rather than directly on the product, document that decision at the SKU level. Take dated photographs of the physical product showing why on-product marking is impractical (insufficient surface area, material incompatibility, or similar). Store that rationale alongside the SKU record in your technical file. If a market surveillance authority questions the placement, you need that evidence ready — not assembled after the fact.

The EUR-Lex language requirement guidance confirms that the language is determined by the destination Member State and that the exception for products with widely known risks is narrow.

Technical documentation is the backbone of GPSR compliance. Authorities can request it at any time, and the inability to produce it promptly is itself an enforcement trigger.

Traceability identifiers serve a specific function: they let authorities and businesses pinpoint exactly which units are affected when a problem emerges. A model number alone identifies a product design. A batch code narrows it to a production run. A serial number identifies a single unit. Use all three where your production process allows; at minimum, a model number and batch code together give enough precision for a targeted recall.

The most common practical failure is a mismatch between the identifier printed on the label, the one in the technical file, and the one in the online listing. When a market surveillance authority cross-references these and finds inconsistencies, it raises immediate questions about the reliability of the entire documentation set. Keeping identifiers synchronized across label artwork, packaging, technical file, and product listing is not a bureaucratic nicety — it is what makes a recall or corrective action operationally possible.

For businesses managing traceability data at scale, web data and regulatory research tools can help map identifier chains across supply chains and flag gaps before they become enforcement issues.

GPSR compliance is not a one-time exercise completed before launch. The regulation expects businesses to manage safety across the full product lifecycle.

Before placing a product on the market:

• Conduct a documented risk assessment covering all foreseeable uses, including misuse that is reasonably predictable
• Identify hazards, assess likelihood and severity, and record the mitigation measures taken
• Confirm that the product, as it will be sold, meets the safety standard

After the product is on the market:

• Monitor complaints and accident reports for signals that the product may be causing harm
• Investigate complaints that suggest a possible causal link between the product and an injury or incident
• Maintain an internal register of complaints and accidents — Commission guidance references a five-year retention period for complaint registers
• Update the risk assessment when new information, incidents, or changes to the product or its components emerge
• Take corrective measures (withdrawal, recall, safety notice) when the evidence warrants it, and document those measures with the batch and serial identifiers they apply to

The Safety Business Gateway obligations guidance confirms that businesses must investigate complaints, keep an internal register, and report accidents that may be causally linked to the product.

Pro Tip: Version your risk assessment records and link each version to the batch identifiers it covers. When you update a component supplier or change a manufacturing process, create a new risk assessment version tied to the first batch produced under the new conditions. This gives you a clean audit trail showing that each batch was assessed under the conditions that actually applied to it.

When a product incident occurs or a serious risk is identified, the GPSR requires prompt action. "Without undue delay" is the standard — not after internal sign-off cycles that take weeks.

1. Identify the trigger. A complaint, accident report, or test result that suggests the product may have caused or could cause harm to consumers.
2. Collect preliminary evidence. Product identifiers (model, batch, serial), description of the incident, date and location, affected Member States, and any known injuries or near-misses.
3. Conduct an internal investigation. Assess whether there is a plausible causal link between the product and the reported harm. Document the investigation process and findings.
4. Notify competent authorities via the Safety Business Gateway. Submit the notification with full product identification, a description of the risk, the corrective measures you are taking or propose to take, and the Member States where the product has been placed on the market.
5. Notify consumers directly where possible. If you have purchase records, contact affected buyers directly. Where direct contact is not possible, issue a public recall notice through appropriate channels in the relevant languages.
6. Implement corrective measures. Withdrawal from sale, physical recall, safety modification, or a safety notice — depending on the severity of the risk.
7. Follow up with authorities. Respond to any requests for additional information from national market surveillance authorities and document all communications.

Safety Gate operates three channels: the Rapid Alert System for information exchange between national authorities, the public Safety Gate Portal where consumers can check product safety notices, and the Safety Business Gateway where businesses submit notifications. All three are interconnected — a notification you submit through the Business Gateway feeds into the authority network and, where appropriate, the public portal.

Online marketplace providers have specific duties under the GPSR that go beyond what was expected of them under the 2001 directive.

Marketplace provider obligations:

• Register on Safety Gate and designate a single point of contact accessible to market surveillance authorities
• Maintain internal safety processes capable of receiving and acting on authority orders to remove or restrict dangerous products
• Cooperate with market surveillance authorities and respond to requests within the timeframes set

What sellers must show in product listings:

• Manufacturer's name and contact details (or importer's, where the manufacturer is outside the EU)
• EU Responsible Person's name and contact details, where applicable
• Product identifier (model number, batch code, or equivalent)
• All required warnings and safety information in the language(s) of the target Member State(s)

A single product photograph does not satisfy these requirements. GPSR listing obligations require cumulative disclosure — all required information must be present in the listing, not buried in a downloadable PDF or visible only after purchase.

For Shopify merchants and other ecommerce sellers, this means product description fields need to carry structured safety information, not just marketing copy. A listing that shows a great lifestyle image and a compelling product description but omits the manufacturer's address and batch identifier is non-compliant from day one.

Pro Tip: Keep your listing data synchronized with your SKU-level label and technical file. When you update a batch code or change a supplier, update the listing at the same time. A mismatch between the batch code on the physical product and the one in the online listing is exactly the kind of discrepancy that triggers marketplace enforcement actions and market surveillance requests.

For fashion brands managing GPSR requirements across ecommerce channels, the GPSR readiness guidance for fashion ecommerce covers platform-specific considerations in detail.

Manufacturers — pre-market:

1. Complete a documented risk assessment for each product model before it enters the EU market.
2. Prepare the technical file: product description, risk assessment, test reports, corrective measures history, supplier information.
3. Assign and record traceability identifiers: model number, batch code, serial number where applicable.
4. Draft safety information in all required languages for each target Member State.
5. Confirm placement: on-product where feasible; document the rationale if packaging or accompanying document is used instead.
6. If manufacturing outside the EU, designate an EU Responsible Person and include their details on the product or packaging.

Importers and EU Responsible Persons — pre-market:

7. Verify that the manufacturer's technical file exists and is accessible.
8. Confirm that safety information is present, legible, and in the correct language(s) for your target markets.
9. Register on Safety Gate if not already done.
10. Retain copies of the technical documentation for the duration of the product's market presence.

Distributors — before making available:

11. Check that required safety information is present and legible on the product or packaging before distributing.
12. Do not distribute if safety information is missing or if there is reason to believe the product is unsafe.

Online sellers and marketplace operators — listing:

13. Include manufacturer identity, Responsible Person details (where applicable), product identifier, and all required warnings in every product listing.
14. Update listings when batch codes or supplier details change.
15. Register on Safety Gate (marketplace providers) and designate a single point of contact.

All roles — post-market:

16. Monitor complaints and accident reports continuously.
17. Investigate any complaint that suggests a possible causal link with the product.
18. Maintain an internal complaint and accident register; retain records for at least five years per Commission guidance.
19. Report accidents and serious risks to competent authorities via the Safety Business Gateway without undue delay.
20. Update the risk assessment and technical file when new information or incidents emerge.

For businesses managing multiple SKUs, a translation checklist per market (listing the required languages, the person responsible for each translation, and the review date) prevents the common failure of launching in a new Member State without updating the safety information language.

National market surveillance authorities are the enforcement arm of the GPSR. They operate independently in each Member State, but they share information through Safety Gate's Rapid Alert System. A corrective action notified in one country is visible to authorities across the EU within hours.

What triggers an inspection or rapid-alert notification:

• A consumer complaint submitted to a national authority
• A product flagged through Safety Gate by another Member State's authority
• Routine market surveillance sampling (authorities purchase and test products from the open market)
• A notification submitted by the business itself through the Safety Business Gateway

Possible enforcement outcomes:

• Request for technical documentation (the most common first step)
• Corrective measure order: withdrawal from sale, recall, or modification
• Financial penalties: Member States set their own fine levels, but the GPSR requires penalties to be effective, proportionate, and dissuasive
• Public notice on the Safety Gate Portal, which is visible to consumers across the EU

Practical record-retention guidance:

• Technical file: retain for the full period the product is on the market and for a reasonable period afterward
• Complaint and accident register: Commission guidance references five years as a retention benchmark
• Corrective measures records: retain indefinitely, linked to the batch/serial identifiers they apply to

Preparing a market surveillance response pack:

• Designate one internal owner responsible for responding to authority requests
• Keep the technical file in a format that can be shared promptly (PDF package or equivalent)
• Include a cover sheet mapping each document to the relevant GPSR article it satisfies
• Maintain a log of all authority communications, including dates and the names of officials contacted

Safety management software can help structure internal incident workflows and ensure that complaint registers meet the retention and documentation standards authorities expect.

A Digital Product Passport (DPP) is a structured, persistent digital record tied to a specific product. For GPSR purposes, a well-implemented DPP addresses several of the most operationally difficult compliance requirements simultaneously.

Where DPPs help with GPSR safety information:

• SKU-level identifier storage: a DPP holds model numbers, batch codes, and serial numbers in a single record, eliminating the identifier mismatches that trigger enforcement
• Technical documentation: test reports, risk assessments, supplier declarations, and corrective measures history can be stored as versioned evidence within the passport record
• Multilingual safety information: safety warnings, instructions, and disposal guidance can be maintained in multiple languages within the same record and published to the appropriate market
• QR-code access: a QR code on the product or packaging links consumers and authorities directly to the current, authoritative product page — including any updated safety notices issued after the original sale
• Post-sale safety notices: when a safety issue emerges, a DPP enables targeted communication to registered owners of affected batches, supporting the GPSR's consumer notification requirement

DPP Grid's platform supports GPSR product-safety readiness by allowing businesses to import product data from Shopify, CSV, or API; collect supplier evidence; use AI-assisted extraction with human approval before publication; and publish permanent product-passport pages with QR codes. The platform supports product information at model, batch, and individual-item level, which maps directly to the GPSR's traceability identifier requirements.

For businesses preparing EU Digital Product Passport requirements, centralizing safety information, technical documentation, and traceability identifiers in one place reduces the risk of the label-listing-file mismatches that most commonly trigger enforcement.

DPP Grid does not provide legal certification and does not claim that using the platform automatically makes a product compliant. It provides product-data infrastructure and evidence management workflows that help businesses organize and demonstrate the information relevant to their products and target markets.

The most common failures are not exotic edge cases. They are the same four problems, repeated across product categories and company sizes.

Inconsistent identifiers are the most frequent. The batch code on the physical label does not match the one in the technical file, which does not match the one in the online listing. When an authority cross-references these during a market surveillance check, the inconsistency immediately undermines confidence in the entire documentation set. The fix is straightforward: treat the SKU-to-batch identifier map as a living document, updated every time a new production run begins.

Relying solely on packaging for required information is the second most common gap. Packaging gets discarded. If the only place a consumer can find the manufacturer's contact details or a safety warning is on the outer box, that information is gone the moment the product is unboxed. On-product marking is the default; packaging is the fallback when on-product marking is genuinely impractical.

Missing multilingual listings catch ecommerce sellers off guard. A business that sells into Germany, the Netherlands, and Poland with a single English-language product listing is non-compliant in all three markets simultaneously. The translation requirement applies to the listing itself, not just the physical label.

Incomplete complaint registers are the enforcement risk that surfaces only when something goes wrong. A business that has been trading for two years but has no structured record of complaints received and investigated has no evidence of due diligence if an authority investigates an incident. Starting the register before the first complaint arrives is the only approach that works.

A small illustrative scenario: a clothing brand selling across three EU markets had its product flagged by a consumer complaint in one Member State. The authority requested the technical file. The batch code in the file differed from the one on the label by a single digit — a data entry error from months earlier. What should have been a straightforward documentation review became a corrective action process because the authority could not confirm which units were covered by the risk assessment. The fix took three weeks and required a physical audit of warehouse stock. Synchronizing identifiers from the start would have made the whole process a one-day response.

Quick habits that prevent these problems: document every placement decision at the SKU level, sync identifiers across every system that touches the product, and version-control the technical file so you always know which risk assessment applies to which batch.

Pulling together multilingual safety information, traceability identifiers, technical documentation, and post-market records across dozens or hundreds of SKUs is where most businesses hit a wall. Spreadsheets break. Email threads lose attachments. Listings drift out of sync with labels.

!DDP Grid

DPP Grid gives manufacturers, importers, and Shopify merchants a single place to hold all of it. Import your products from Shopify, CSV, or API. Collect supplier evidence and upload test reports directly to the product record. Use AI-assisted data extraction to organize information, with human review before anything is published. Publish permanent product-passport pages with QR codes that carry current safety information, batch identifiers, and post-sale notices to consumers and authorities alike.

The platform supports product data at model, batch, and individual-item level, which maps directly to GPSR's traceability requirements. When a safety issue emerges, you have the evidence package ready: the risk assessment version tied to the affected batch, the corrective measures record, and the consumer notification content in the right languages.

DPP Grid does not replace legal advice or conformity assessment. For the evidence infrastructure that makes compliance demonstrable, explore the DPP Grid platform or run a free DPP readiness check to see where your current product data stands.

• REGULATION (EU) 2023/988 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 10 May 2023 on general product safety (OJ text)
• Safety Gate — Obligations for Businesses (European Commission)
• Regulation 2023/988/EU - general product safety | Safety and health at work EU-OSHA

This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.

GPSR stands for General Product Safety Regulation. It refers to Regulation (EU) 2023/988, which replaced the General Product Safety Directive and has applied across the EU since December 13, 2024.

Manufacturers and importers must provide a product identifier, producer name and contact details (postal and electronic), an EU Responsible Person's details where the manufacturer is outside the EU, and any warnings or instructions needed for safe use, all in a language easily understood in each Member State where the product is sold.

Yes. National market surveillance authorities in each EU Member State enforce the regulation and share information through Safety Gate's Rapid Alert System. Authorities can order corrective measures, fines, withdrawals, and public recall notices.

Products covered entirely by sector-specific harmonized EU legislation for a given risk are governed by that legislation rather than the GPSR for that risk. Food, medicinal products, and certain other categories have their own dedicated regulatory frameworks. The GPSR applies where harmonized rules do not cover a specific risk or where no sector-specific legislation exists.

Yes. GPSR requires that online product listings include manufacturer identity, Responsible Person details where applicable, product identifiers, and all required warnings and safety information in the language(s) of the target Member State. A product image alone does not satisfy this requirement.

• GPSR product-safety readiness
• Rekwiżiti tal-GPSR għall-kummerċ elettroniku tal-marki tal-moda fl-UE