EU GPSR In 2026: The Responsible Person Was The Easy Part

What GPSR Requires

Regulation (EU) 2023/988 replaced the previous product safety directive and has applied since 13 December 2024. It covers consumer products generally, filling gaps left by sector-specific legislation, and it was written with ecommerce and third-country imports explicitly in view.

The core structure for a non-EU brand reduces to four obligations.

Note the phrase in that definition: for as long as the product is sold. This is not a filing you complete. It is a relationship you maintain.

Why The Penalties Arrived Late

This explains the eighteen months of quiet that lulled a lot of brands, and it is a structural feature of how EU law works rather than an oversight.

GPSR is a regulation, so it applies uniformly across member states without each country writing its own version. Penalties for breaching it are a different matter and are set nationally. Reporting indicates those national penalty frameworks were only being finalised roughly a year and a half after the regulation came into force.

So the obligations were live from December 2024 while the consequences of ignoring them were still being written. A brand could be non-compliant for a year with nothing happening, and reasonably conclude that nothing was going to.

The practical consequence is that an absence of problems between 2024 and 2026 is not evidence your compliance was adequate. It is evidence you were not checked, and those are very different things to be relying on going into 2027.

What Enforcement Checks Now

The sequence of enforcement follows what is cheap to detect, and understanding that tells you what is coming.

When marketplaces first rolled out GPSR fields in late 2024, checks focused almost entirely on one question: does the listing have a valid EU Responsible Person on file? That was automatable at scale, so it went first, and it is why the Responsible Person became synonymous with GPSR compliance in most sellers' minds.

Reporting from 2026 describes platforms expanding checks to labeling requirements, the presence of safety and warning information on the listing itself, and, for some categories, requests for the underlying documentation such as risk assessments and technical files rather than just contact details.

Reporting notes specifically that sellers who resolved the Responsible Person issue but did not update product labeling are now receiving new compliance notices. If that describes you, the work is not finished; it was never started on the parts that were not being checked.

Three Places You Get Caught

Exposure comes from three independent directions, and fixing one does nothing for the others.

The marketplace. Platforms act as gatekeepers under the regulation and run their own automated checks, which is why platform enforcement often feels harsher and faster than regulatory enforcement. Listings get paused before an authority is involved, and restrictions can propagate across marketplaces. One compliance vendor reports that in June 2026 German and French market surveillance authorities jointly flagged over 2,000 ASINs for missing Responsible Person data, with Amazon issuing final-notice emails carrying fourteen-day deadlines before permanent removal. That comes from a single commercially interested source, so treat the specifics as reported rather than established, though the pattern it describes is consistent with everything else.

Customs. Reporting indicates EU customs officials have been trained on GPSR requirements and are checking products at the border, holding goods whose labeling lacks the required details including the Responsible Person's name and address. This is the one that hurts operationally, because it stops inventory rather than a listing.

Market surveillance authorities. National bodies with power to order withdrawal or recall and to impose penalties under their national frameworks. Slower, and the consequences are larger.

The customs route deserves particular attention from brands doing physical relabelling, because a compliant listing paired with non-compliant packaging fails at exactly the point where you have already paid for freight.

Article 19 And Your Listings

The distance selling provision is where most remaining listing-level failures sit, and it is more demanding than the Responsible Person field alone.

Article 19 requires online offers to display a defined set of particulars. Per coverage quoting the regulation, that means the manufacturer's name, postal address, and electronic address; where the manufacturer is not established in the Union, the same details for the Responsible Person; information identifying the product including a picture of it, its type, and any other product identifier; and any warning or safety information required to be affixed to the product or packaging, in a language easily understood by consumers as determined by the member state where the product is made available.

• Both sets of details, not one. Manufacturer and Responsible Person are separate entries. Brands frequently supply only the latter.
• Electronic address, not just postal. A contactable email, not a web form.
• Safety information in the offer. Warnings that appear on the packaging need to appear in the listing too.
• Language per member state. Selling into five markets means five language versions of your warnings, not English throughout.

The language requirement is the one that scales badly and gets deferred. It is also entirely visible in your own listings, which makes it a poor thing to leave broken while platforms are actively expanding automated checks in exactly that direction.

Article 22 places cooperation obligations on marketplaces themselves, which is the mechanism by which your compliance becomes the platform's problem and therefore, promptly, your problem.

Labeling Is A Physical Problem

Everything else in this article can be fixed by editing data. This one cannot, which is why it gets postponed and why it is now the live issue.

The Responsible Person's name and address must appear on the product or its packaging, not only in the listing. For a brand with existing stock that means either relabelling inventory already produced or accepting that current stock cannot lawfully be sold into the EU.

Three practical routes exist and each has a real cost.

1. Relabel existing inventory. Applying compliant labels to units already manufactured, either at a prep facility or before shipping. Slow and per-unit expensive, and it is the only option for stock that already exists.
2. Change artwork at the factory. Correct from the next production run. Cheap per unit and it does nothing for what is already in the network.
3. Separate EU packaging. A distinct SKU or packaging variant for the EU market. Clean, and it fragments your inventory and increases minimum order quantities.

Most brands end up doing the first and second together, relabelling current stock while correcting artwork upstream. If you are planning production anyway, this is the cheapest moment to fix it, and it is worth folding into your landed cost model rather than treating it as a one-off compliance expense. Our landed cost guide covers where it belongs.

The Dashboard Is Not The File

A distinction that separates brands who will survive a documentation request from brands who will not.

A Responsible Person entry that looks complete on a marketplace compliance dashboard does not guarantee the file behind it would hold up if an authority asked. Those are two different standards. The platform is checking whether a field contains plausible data. A market surveillance authority is checking whether a competent person holds a risk assessment and technical documentation for that product and can produce it.

The gap opens in a predictable way. A brand buys a low-cost Responsible Person service that supplies a name and an address to satisfy the marketplace. No risk assessment is prepared, no technical file is assembled, no ongoing relationship exists. The listing passes every automated check for two years, and the first genuine test is a request the arrangement was never built to answer.

Wave four in section three is precisely this test arriving. Documentation requests cannot be satisfied retrospectively in a few days, because assembling a risk assessment for a product you have been selling for two years is real work.

Choosing A Responsible Person

Several routes exist and they carry different costs and risks.

Your EU importer. If you already sell through an established EU distributor, they may be positioned to act, since importers carry their own obligations under the regulation. Cheapest where the relationship exists, and it ties compliance to a commercial partner you might later change.

An authorised representative service. Specialist providers who act as Responsible Person for a fee. The standard route for smaller sellers, since it avoids forming an EU entity for a single regulatory requirement. Quality varies enormously, per section seven.

Your own EU entity. Full control and full cost. Sensible if EU revenue justifies a subsidiary you were considering anyway, and disproportionate otherwise.

The evaluation criteria that matter are whether they will genuinely hold and produce documentation, whether they will handle authority correspondence rather than forwarding it, whether they cover every market you sell into, and what happens to your compliance position if the relationship ends. That last question is the one nobody asks and the one that creates the worst surprises.

Cost should not be the leading criterion here, which is unusual advice from us. The cheap options are cheap because they supply an address and nothing behind it, and the saving is realized right up until the moment it matters.

Safety Gate Is Ongoing

The Commission operates Safety Gate, the EU rapid alert system for dangerous non-food products, and it carries obligations that continue rather than concluding.

Registration enables market surveillance authorities to contact the Responsible Person directly about safety concerns or incidents, and reporting describes it as an ongoing obligation requiring updates whenever product details change, rather than a one-time step.

The incident-reporting duty is the part with teeth. If an accident occurs involving your product, you are required to report it. That means you need a procedure for recognizing when a customer complaint constitutes a reportable safety incident rather than an ordinary return, and most brands have never drawn that line explicitly.

It is worth drawing it now, while nothing has happened. A brand discovering during an actual incident that it has no process, no threshold, and no named person is discovering it at the worst possible moment. Practically this means someone owns safety complaints, there is a written threshold for escalation, and the Responsible Person knows they will be contacted.

The Liability Directive Alongside It

A parallel development worth knowing about, because it changes the consequences of the failures GPSR is trying to prevent.

Directive (EU) 2024/2853 updates the product liability framework that dated from 1985. Being a directive rather than a regulation, it requires transposition into national law by member states, with application expected as those national laws take effect.

The division of labour between the two instruments is worth understanding. GPSR is preventive: it governs what you must do before and while a product is on the market. The liability directive is remedial: it governs who compensates whom when a defective product causes harm.

For a non-EU brand the connection is direct. GPSR requires an economic operator established in the Union, and having such an operator affects where liability can be pursued. The compliance structure you build for one regime shapes your exposure under the other.

This is firmly territory for qualified advice rather than an article. It is mentioned so that brands treating GPSR as a listings problem understand there is a liability dimension sitting behind it.

A Re-Audit For Brands Already Selling

Written for the brand that did GPSR work in 2024 and has not revisited it. Run it in this order, because it moves from cheapest to most expensive.

1. Confirm the Responsible Person relationship is live. Not just that a name is in a field. Do they answer, do they know they represent you, is the arrangement current?
2. Check every listing against Article 19. Manufacturer details and Responsible Person details, electronic address included, product identification with an image, and safety warnings present.
3. Check the language of your warnings against every member state you sell into. This is the most common remaining listing failure.
4. Inspect actual packaging. Physically. Does a unit in your EU inventory carry the required details? Photograph one rather than trusting the artwork file.
5. Locate your risk assessment and technical file. If you cannot find them in an afternoon, you cannot produce them on request either.
6. Confirm Safety Gate registration is current and reflects your present product details.
7. Write the incident procedure if it does not exist. Who decides, what threshold, who is contacted.
8. Fix labeling on the next production run and plan relabelling for existing stock.

Steps one to three cost time only and close the exposure most likely to be detected in the near term. Steps four to eight cost money and address the exposure that is harder to remedy under pressure.

Whether The EU Is Worth It

The question this post has been circling, and the honest answer for a good number of brands is no.

GPSR compliance carries a recurring cost: a Responsible Person on retainer, documentation you maintain, labeling that differs from your domestic packaging, listings in multiple languages, and an incident process. That overhead is roughly fixed regardless of how much you sell.

Against that, run your actual EU revenue. Brands frequently discover EU sales are a small single-digit percentage of the business while consuming a disproportionate share of compliance attention and risk. If that is your situation, withdrawing is a legitimate strategic choice rather than a defeat, and it is cheaper than half-complying and hoping.

The brands for which it clearly works have EU revenue material enough that fixed overhead spreads thinly, a catalog narrow enough that documentation is tractable, and products whose safety profile is straightforward. If you sell forty SKUs into six member states with meaningful volume, do the work properly. If you sell three SKUs and take occasional orders from Germany, price the compliance honestly before assuming you should continue.

If You Do Nothing Else

Photograph a unit of your current EU inventory and check whether the Responsible Person's name and address are physically on it. That single check separates brands who did the visible half of GPSR from brands who did all of it, and it takes five minutes. If the answer is no, you have found the thing that will stop your next shipment at a border rather than merely pause a listing.

And if you are still choosing whether to enter the EU at all, build this cost into the decision before you launch rather than after. Our product research guide covers where regulatory constraints belong in evaluation, which is early, alongside margin rather than after it.