EU Product Safety Regulation for Importers
1. Introduction
If you are importing physical products into the European Union, compliance with EU product safety law is not optional — and the consequences of getting it wrong range from market withdrawal orders to criminal liability. The regulatory landscape has shifted substantially in recent years, and 2026 marks a pivotal moment: the General Product Safety Regulation (GPSR, EU 2023/988) is now fully in force, replacing the decades-old General Product Safety Directive. Alongside it, sector-specific frameworks — covering machinery, electronics, personal protective equipment, toys, medical devices, and more — continue to impose their own CE marking obligations.
For importers specifically, the legal burden is significant. You are not merely a logistics intermediary. Under EU law, if your supplier is established outside the EU, you assume many of the responsibilities that would otherwise fall to the manufacturer. That means technical documentation, conformity assessments, labelling obligations, and post-market surveillance all land squarely on your desk. This guide gives you the practical knowledge to manage that responsibility without costly missteps.
2. Key Requirements & Legal Basis
The General Product Safety Regulation (GPSR)
Regulation (EU) 2023/988 became the primary horizontal framework for consumer product safety on 13 December 2024 and governs any consumer-facing product not covered exhaustively by a sector-specific directive. Unlike its predecessor directive, it is a regulation — meaning it applies uniformly across all 27 member states without national transposition. Key obligations for importers under the GPSR include placing only safe products on the market, maintaining traceability records for ten years, ensuring products carry an identifiable contact address for a responsible EU-based economic operator, and reporting serious risks to the Safety Gate (formerly RAPEX) system without delay.
CE Marking Directives and Regulations
CE marking is mandatory for products falling under specific harmonised legislation. The most commonly applicable frameworks in 2026 are:
Low Voltage Directive (LVD), 2014/35/EU — applies to electrical equipment operating between 50–1000V AC or 75–1500V DC. Compliance requires conformity with harmonised EN standards such as EN 62368-1 (audio/video, IT, and communication technology equipment) or EN 60335 series (household appliances).
Electromagnetic Compatibility Directive (EMC), 2014/30/EU — covers nearly all electrical and electronic products. Harmonised standards include ETSI EN 301 489 series for radio equipment and EN 55032 for multimedia equipment emissions.
Radio Equipment Directive (RED), 2014/53/EU — applies to any product that intentionally emits or receives radio waves. This includes Bluetooth devices, WiFi-enabled products, and cellular-connected equipment. Relevant standards include EN 300 328 (2.4 GHz band) and EN 62479 for SAR assessments.
Machinery Regulation (EU) 2023/1230 — this regulation replaces the Machinery Directive 2006/42/EC and applies from 20 January 2027, though importers sourcing equipment with long lead times should be designing for compliance now. It introduces updated Essential Health and Safety Requirements and a new category of high-risk machinery requiring third-party conformity assessment.
Toy Safety Directive, 2009/48/EC — currently under revision, but still in force. Chemical limits under EN 71-3 and EN 71-9 were tightened in amendments that came into effect in 2023 and remain applicable.
Personal Protective Equipment Regulation (EU) 2016/425 — governs gloves, helmets, respiratory protection, and similar equipment. Category III PPE (life-critical) requires EU-type examination by a Notified Body.
Technical Standards and Presumption of Conformity
Harmonised standards published in the Official Journal of the EU confer a presumption of conformity with essential requirements. Manufacturers and importers should always work from the current version of a standard; superseded versions lose their presumption of conformity on the withdrawal date. Standards bodies CEN, CENELEC, and ETSI publish updated standards continuously — your compliance calendar must account for transitions.
3. Step-by-Step Process
Achieving and maintaining EU product compliance is a structured process. The following steps apply to the majority of regulated product categories.
Step 1: Classify your product and identify applicable legislation.
Start with a product classification exercise. Determine whether your product falls under one or more CE marking directives, under the GPSR as a standalone obligation, or both. Many products — a wireless power tool, for example — simultaneously fall under the RED, the LVD, the EMC Directive, and will soon fall under the new Machinery Regulation. Use the European Commission’s NANDO database to identify applicable legislation and relevant Notified Bodies.
Step 2: Identify the harmonised standards that apply.
Once you know the applicable directives, identify the specific EN standards that cover your product’s design and intended use. Download the current version from the CENELEC or ETSI websites. Confirm the withdrawal date of any previous version you may already be using. Document your standard selection in your technical file — auditors and market surveillance authorities will want to see the rationale.
Step 3: Conduct or commission the required conformity assessment.
For low-risk categories (most LVD and EMC products), the manufacturer or importer may perform internal production control (Module A) — meaning no third-party testing body is mandatory, but you must conduct genuine testing against the harmonised standards. For higher-risk categories (Category III PPE, certain RED equipment, most medical devices), EU-type examination by an accredited Notified Body is mandatory. Select a Notified Body from the NANDO database; confirm it is specifically notified for your product category and the relevant directive.
Step 4: Compile the technical documentation.
The technical file must contain: a general product description and intended use; drawings, schematics, and component lists; a list of harmonised standards applied; test reports; a risk assessment; and the EU Declaration of Conformity. Under the GPSR, importers must also document the supply chain traceability information. There is no prescribed format, but the file must be sufficient for a market surveillance authority to assess conformity. Retain the file for a minimum of ten years from the date you last placed the product on the market.
Step 5: Affix CE marking and prepare the EU Declaration of Conformity.
The CE mark must be affixed visibly, legibly, and indelibly to the product or, where that is not possible due to the product’s nature, to the packaging and accompanying documentation. The EU Declaration of Conformity must include: the product identification, the name and address of the economic operator, a reference to the applicable directives, the standards applied, and the signatory’s name, function, and date. It must be available in the language(s) of the member states where the product is placed on the market.
Step 6: Appoint an EU-based responsible economic operator.
For importers based outside the EU, the GPSR and several sector-specific regulations now require a responsible person or authorised representative established within the EU. This entity must hold a copy of the technical documentation, liaise with market surveillance authorities, and cooperate on corrective actions. This is not a postal address arrangement — the responsible person must have genuine authority and access to your compliance documentation.
Step 7: Establish post-market surveillance.
Compliance does not end at first sale. You are required to monitor the market for safety issues, track complaints and incidents, and report serious risks through the Safety Gate. Maintain a documented procedure for product recalls and market withdrawals. Under the GPSR, economic operators must inform consumers directly and effectively when a safety recall is required — general press notices are no longer sufficient for most categories.
4. Common Mistakes and How to Avoid Them
Mistake 1: Relying on a supplier’s CE marking without independent verification.
This is the single most common and costly error importers make. A CE mark on a product from a non-EU manufacturer carries no legal weight unless you, as the importer, have verified the underlying technical documentation. If the supplier cannot provide the full technical file, test reports, and a valid EU Declaration of Conformity, you are legally exposed. Conduct supplier audits or commission independent document reviews before your first shipment. The cost of a document gap analysis from a competent consultant is trivial compared to the cost of a market withdrawal.
Mistake 2: Using outdated or withdrawn harmonised standards.
Importers sometimes carry forward test reports based on a standard version that has since been withdrawn. Once the transition period for a new standard version closes, the old version no longer confers a presumption of conformity. Check the withdrawal date for every standard in your technical file at least annually and retest against updated versions when transitions occur. Subscribe to CENELEC and ETSI update notifications for the standards relevant to your product portfolio.
Mistake 3: Incomplete or generic EU Declarations of Conformity.
A Declaration of Conformity that lists every possible directive and every vaguely applicable standard is a red flag to any market surveillance authority. The DoC must be specific, accurate, and signed by a person with the authority to legally bind the organisation. Generic templates downloaded from the internet and minimally edited are frequently deficient. Each declaration should be reviewed by someone who actually understands the applicable directives and has verified the test evidence behind it.
Mistake 4: Failing to maintain the required language versions of documentation.
EU regulations require that instructions for use, safety warnings, and in many cases the Declaration of Conformity be available in the official language(s) of each member state where the product is sold. An English-only instruction manual is not acceptable for products sold in France, Germany, or Poland. Build translation into your product launch timeline and budget, not as an afterthought.
Mistake 5: No documented post-market surveillance procedure.
Many importers treat compliance as a one-time event at product launch. Regulators do not. The GPSR explicitly requires economic operators to actively monitor their products after market placement. If an incident occurs and you cannot demonstrate a functioning post-market surveillance system, your legal exposure increases substantially. Establish a written procedure, assign responsibility, and keep records of any incidents reviewed — even those that turned out to be non-issues.
5. Cost and Timeline Estimates
Budgeting for EU compliance requires an honest look at both testing costs and internal resources. The figures below reflect typical ranges for 2026 for a mid-complexity consumer electronics product seeking CE marking under the LVD, EMC, and RED.
Third-party laboratory testing typically runs between €3,000 and €8,000 for a straightforward wireless consumer electronics product, covering EMC, LVD safety, and RED radio testing. Mechanical, chemical, or additional safety tests add to this figure. Medical devices, PPE, and more complex machinery carry substantially higher costs — Notified Body assessments for Category III PPE or Class II medical devices commonly range from €15,000 to €40,000 depending on product complexity and the body selected.
Technical documentation preparation, if outsourced to a compliance consultant, typically costs €2,000 to €5,000 for a well-documented product where the supplier has already provided adequate technical input. Poorly documented products from suppliers who have not previously exported to the EU can push this to €8,000 or more.
Timeline from project start to CE marking: for a well-prepared product with an organised technical file and an available test slot at an accredited lab, allow 8 to 14 weeks. Products requiring Notified Body involvement should budget 16 to 30 weeks, depending on queue times. Machinery transitioning to the new Machinery Regulation (EU) 2023/1230 should begin compliance work now, well ahead of the January 2027 applicability date.
Ongoing annual compliance maintenance — standard monitoring, DoC updates, and documentation management — typically costs between €1,500 and €4,000 per product line per year when managed by an external consultant.
6. Frequently Asked Questions
Q: If my product already has FCC and UL certification for the US market, can I use those test reports for EU CE marking?
Not directly, but they provide a useful starting point. FCC and UL certifications address US regulatory requirements, which differ from EU harmonised standards in scope, methodology, and limits. For example, FCC Part 15 emissions limits and test methods differ from those in EN 55032, and UL safety standards often diverge from the relevant EN 60335 or EN 62368-1 requirements. That said, a reputable EU test laboratory will often accept a well-documented US test report as a basis for a gap analysis, which can reduce the cost and duration of EU testing considerably. Ask your chosen EU-accredited laboratory specifically whether they will accept prior test data for this purpose, and confirm which tests must be repeated in full versus which results can be cross-referenced. Never assume equivalence — the legal risk remains entirely with you as the importer.
Q: Do I need a local EU representative if I am based in the UK post-Brexit?
Yes. Since the UK’s withdrawal from the EU’s single market, UK-based businesses are treated as third-country economic operators for the purpose of EU product safety law. Under the GPSR and most CE marking directives, a responsible person or authorised representative must be established within the EU — meaning one of the 27 current member states. This entity must hold your technical documentation, be authorised to act on your behalf with EU market surveillance authorities, and be capable of initiating corrective actions or recalls if required. A UK address no longer satisfies this requirement. Note that Great Britain also operates its own UKCA marking system for its domestic market, so if you sell on both sides, you are managing two parallel compliance regimes. Several specialist compliance service providers offer EU authorised representative services for a fixed annual retainer, typically ranging from €500 to €2,500 per year depending on the product category and level of documentation support included.
Q: What happens if a market surveillance authority in an EU member state finds my product non-compliant?
The consequences depend on the severity and nature of the non-compliance, but they can escalate quickly. At the administrative level, the authority may issue a formal notification requiring you to bring the product into compliance within a specified period, typically 10 to 30 days for documentation deficiencies. If the product presents a serious risk, the authority can order an immediate withdrawal from the market and, under the GPSR, is required to notify the Safety Gate system, which triggers alerts to all other member state authorities simultaneously. Economic operators can be required to fund the costs of product recalls, including direct consumer notifications. In cases of persistent or deliberate non-compliance, national authorities have the power to impose fines — in major EU markets these can reach tens of thousands of euros per violation — and in extreme cases, criminal referrals are possible under national implementing law. Your technical documentation, post-market surveillance records, and response to authority communications all factor into how an investigation is resolved. Importers who respond promptly, provide complete documentation, and demonstrate a functioning compliance system consistently receive more proportionate treatment than those who cannot produce records or who delay cooperation.
