When a US brand emails me asking how to keep selling into Europe, the conversation almost always starts in the wrong place. They want to talk about shipping rates and duties. I have to stop them and ask a blunter question: who is your Responsible Person in the EU, and is that name printed on the packaging right now? Nine times out of ten there is silence on the line. That silence is exactly why parcels are sitting in a customs shed in Rotterdam instead of moving to a customer in Munich.
The rule behind that silence is the General Product Safety Regulation, Regulation (EU) 2023/988, known as the GPSR. It has applied across the EU since 13 December 2024, and by 2026 it is no longer a paperwork abstraction. I have watched a shipment get held because a listing had no reachable EU contact, and I have seen an established Etsy seller wake up to a delisted catalogue. This guide is the operational version of the advice I give paying clients: what a seller based outside the EU must actually do to keep consumer goods flowing into the bloc.
What GPSR is, and what it quietly replaced
The GPSR replaced the General Product Safety Directive, 2001/95/EC, a text that had governed European consumer safety since 2001. That distinction matters more than it sounds. The old instrument was a directive, so each member state transposed it into national law on its own timetable, with local variation. The GPSR is a regulation. It applies directly and identically in all 27 member states from the same date, which is why enforcement feels so much sharper now than it did under the directive. EUR-Lex
Scope is deliberately wide. The GPSR covers essentially all non-food consumer products placed on the EU market, whatever category and wherever the seller sits. Manufacturers, importers, distributors, and online or marketplace sellers all fall inside it. If a private person in the EU can buy your product to use it, and it is not covered by a more specific safety law, assume the GPSR reaches you. European Commission
One reassurance for anyone panicking about a warehouse full of stock: the GPSR does not demand a new certificate stamped on every item. It is a safety-net baseline. It asks you to prove a product is safe, to make a specific EU-based person accountable for it, and to give buyers the information they need before they click "buy". Simple to state. Easy to get wrong at scale.
The Responsible Person is the requirement that catches everyone
Here is the clause that reshapes how a non-EU business operates. Under Article 16 of the GPSR, a product covered by the regulation may not be placed on the EU market unless there is an economic operator established in the Union who is responsible for it. That operator is the Responsible Person, and their name and contact details must appear on the product itself, or on its packaging, the parcel, or an accompanying document. European Commission
If you sell from Shenzhen, Austin, or Manchester, you now need a real presence inside the EU standing behind your goods. Not a mailbox. A contactable entity that market-surveillance authorities can knock on. This echoes the "economic operator" duty that Regulation (EU) 2019/1020 already imposed on many CE-marked goods, so the concept is not brand new to Brussels. What the GPSR did was widen it to cover the general run of consumer products that were previously outside that net.
The Responsible Person is not a rubber stamp. On my compliance checklist, this operator carries four working duties: they keep the technical documentation available to authorities, they verify that the required compliance and safety information actually exists, they cooperate with market-surveillance authorities on request, and they take corrective action (including alerting the authorities) when a product turns out to be unsafe. Read that last one twice. The Responsible Person can be legally obliged to trigger a recall on your behalf.
So who can hold the role? The regulation gives you a short menu, and choosing wrongly is one of the most common mistakes I unwind for new clients.
| Who can act as Responsible Person | Established in the EU? | Typical fit for a non-EU seller |
|---|---|---|
| EU-based manufacturer | Yes, by definition | Rare if you manufacture outside the bloc |
| EU-based importer | Yes | Strong fit when you already sell through an EU importer of record |
| EU authorised representative | Yes, appointed by written mandate | The usual route for a pure overseas seller |
| Fulfilment service provider in the EU | Yes | Works when your 3PL formally accepts the duties |
Most sellers I onboard land on an EU authorised representative or lean on the entity that already acts as their importer of record. A word of caution about the fulfilment-provider option: a warehouse storing your pallets has not agreed to be your Responsible Person by default. That obligation has to be accepted in writing, and plenty of 3PLs decline it. Confirm the arrangement in a contract, not in a hopeful assumption.
Your product listing is now a compliance document
The part that ambushes e-commerce sellers is that the GPSR reaches into the listing page itself, not just the physical carton. Before a buyer purchases, the online listing has to show the manufacturer's identity and contact details, the Responsible Person's identity and contact details, product identifiers such as a model or batch reference, and any warnings or safety information the buyer needs to make a safe choice.
That means a photo, a price, and a cheerful paragraph of marketing copy no longer satisfy the rule. If your product needs a choking-hazard warning for small parts, that warning belongs on the listing, in a language the consumer in that country understands, before checkout. I tell clients to treat each product page as if a market-surveillance officer will read it, because in 2026 they sometimes do.
The technical file: what I would actually demand
When I audit a seller, the technical documentation is where I find out whether they are genuinely compliant or merely hopeful. The GPSR expects a Responsible Person to hold this file and produce it for authorities. There is no single universal template, but a defensible file for a general consumer product usually pulls together a clear product description and identifiers, a risk assessment covering foreseeable use and misuse, any test reports or standards the product was checked against, and the labelling and warnings as they appear on the goods. Keep that file for at least 10 years after the product goes on the market, and scale its depth to the product's risk, since a lithium-powered gadget warrants far more evidence than a plastic bookmark. Building to the current European standards helps you here: a product made to the harmonised standards the Commission lists, a set refreshed by an implementing decision in April 2026, is presumed to meet the GPSR's safety expectations. European Commission
Build this once, keep it current, and store it where your Responsible Person can retrieve it fast. Authorities do not send a polite two-month notice. The reporting standard for accidents under the regulation is to notify the relevant authority "without undue delay" through the EU Safety Business Gateway once you become aware of a serious incident, and that same urgency colours documentation requests. If your file lives in a founder's inbox on the other side of an ocean, you will miss the window.
Sellers who already run a due-diligence process for other EU rules have a head start here. The habits you build for the EU deforestation due-diligence regime, where you assemble evidence and keep it query-ready, translate almost directly to a GPSR technical file. The muscle is the same. Only the subject matter changes.
Enforcement in 2026: border blocks, delisting, and where liability lands
The enforcement backbone is not new, but it has teeth. The EU Safety Gate rapid-alert system lets national authorities flag dangerous products to each other, and recalls or withdrawals get coordinated across member states rather than fought one country at a time. When a product is pulled in one place, it can vanish from shelves bloc-wide within days.
What changed for sellers is where the pressure now shows up. The major marketplaces did the enforcing before many customs officers did. Amazon, Etsy, eBay, and Shopify sellers now face requirements to supply GPSR documentation and to name a Responsible Person before a non-EU account can list into the EU. Through 2026 that scrutiny widened to labelling requirements, to the safety information carried on listings, and to direct documentation requests. Non-compliant shipments are being blocked at the border. Landmark Global
The penalties behind that screening now have national teeth. Italy, for one, brought in a decree in May 2026 setting out fines and, in the most serious cases, criminal liability for GPSR breaches, a reminder that penalties are defined member state by member state and can run well past a delisting into real legal exposure. Complir The scale of the problem is visible in the enforcement data: market-surveillance checks in 2025 found no reachable EU Responsible Person on roughly 32% of the product listings they reviewed. European Commission Regulators know the gap is that wide, which is exactly why the screening keeps tightening.
Then there is the liability shift, which is the point I hammer hardest. If a product causes harm, say a charger that starts a fire, EU authorities and injured consumers pursue the accountable party inside the EU. They go after the importer, the Responsible Person, and the seller. They do not chase a distant overseas factory that no European court can easily reach. Naming a Responsible Person is not a bureaucratic courtesy to Brussels. It is you deciding, in advance, who catches the liability. Choose that entity carefully, and make sure it is properly insured and briefed.
This border-facing reality now sits alongside the EU's other import controls. A seller preparing for the carbon border adjustment obligations is already learning that the EU frontier has become a document checkpoint, not just a duty calculation. GPSR adds product safety to that same checkpoint. If you also ship into Britain, note that the UK is building its own divergent stack, including the UK carbon border measures arriving in 2027, so an EU Responsible Person does not cover you for Great Britain.
GPSR is not CE marking, and it is not the Digital Product Passport
Two points of confusion cost sellers real money, so let me draw the lines clearly.
First, the GPSR does not replace CE marking or the product-specific rules that already govern toys, electrical goods, or cosmetics. It sits underneath them as the safety net. If your product is a toy, you still meet the toy-safety rules and the GPSR baseline. The regulation fills the gaps for products that no specific directive covers, and it never lets a specialised product escape its own dedicated law.
Second, do not confuse the GPSR with the Digital Product Passport. They get mentioned in the same breath at trade shows, but they are separate initiatives with separate legal bases and timelines. The GPSR is here now and about consumer safety and accountability. The Digital Product Passport is a distinct EU project about product data and traceability that rolls out later and by product category. Treat them as two different workstreams, because compliance calendars that muddle them tend to slip on both.
The practical checklist I run with every non-EU client
When a seller hands me a catalogue and asks where to start, this is the sequence I work through. It is deliberately ordered. Skip a step and the later ones wobble.
- Appoint a Responsible Person established in the EU, in writing, and confirm they accept the Article 16 duties. Get the mandate signed before you rely on it.
- Print or attach that Responsible Person's name and contact details, plus the manufacturer's details, on the product, its packaging, the parcel, or an accompanying document.
- Assemble the technical file: description and identifiers, a risk assessment, test evidence, and the labelling as it ships. Store it where your Responsible Person can reach it instantly.
- Fix every listing so it shows manufacturer and Responsible Person identity, product identifiers, and the required warnings before checkout, in the buyer's language.
- Answer marketplace documentation requests fast and completely. On Amazon, Etsy, eBay, and Shopify, a slow or partial response is what triggers a delisting.
- Localise safety information for the countries you actually ship to, because a warning nobody can read is treated as no warning at all.
None of these steps is intellectually hard. What defeats people is scale and ownership. A catalogue of 400 SKUs across four marketplaces turns each line item into six small compliance jobs, and nobody has been told it is their responsibility until a shipment is already stuck.
If you take one thing from me, make it this: appoint your Responsible Person this quarter, before your marketplace forces the issue or a customs officer does it for you. I would rather spend a week now naming an EU entity, signing the mandate, and rewriting listings than spend a month untangling a border hold with an inbox full of frozen orders and a marketplace threatening to close the account. Treat the GPSR as the price of the EU market rather than an obstacle to it, get the accountable party in place first, and the rest of the file becomes routine housekeeping instead of a fire drill. The sellers who moved early in 2025 are the ones still shipping smoothly in 2026, and that head start is the whole game.