Regulatory radar / Contracts & Commercial

EU GPSR for Online Sales: Product Listings Are Part of the Safety File

A practical General Product Safety Regulation map for online sellers, importers and marketplaces, covering listing data, responsible persons and evidence.

Last verified — 13 August 2026. The EU General Product Safety Regulation (GPSR) has applied since 13 December 2024. For covered online sales, safety information is not confined to a label inside the parcel: Article 19 requires specified information to appear clearly and visibly in the distance offer.

The owner-level question is: can the product, its safety record, the EU responsible person and the exact online listing be connected before a consumer can order?

Fact

Operative rule

The current consolidated GPSR applies to consumer products placed or made available on the market where specific EU law does not regulate the same safety aspects and risks. It also reaches products not intended for consumers when they are likely, under reasonably foreseeable conditions, to be used by consumers. Medicines, food, feed and the other categories listed in Article 2(2) are excluded.

Manufacturers must place only safe products on the market. Before placing a product, they must carry out an internal risk analysis and draw up technical documentation containing at least a general description and the essential characteristics relevant to safety. Where appropriate, the file includes possible risks, mitigation and relevant test or standards evidence. Manufacturers keep it current and available for ten years.

Article 16 provides that a covered product cannot be placed on the EU market unless an economic operator established in the EU is responsible for specified tasks. That operator’s name, trade name or trademark and postal and electronic address must appear on the product, packaging, parcel or accompanying document as the Article permits.

For online or other distance sales, Article 19 requires the offer to show clearly and visibly:

  • the manufacturer’s name or trade mark and postal and electronic address;
  • where the manufacturer is outside the EU, the EU responsible person’s name and postal and electronic address;
  • information identifying the product, including a picture, type and other identifier; and
  • required warnings or safety information in a language easily understood by consumers, as determined by the relevant Member State.

The GPSR treats a sale offer as made available on the market when it is targeted at EU consumers. A website’s corporate location is therefore not the only geographic fact.

Transition date

The GPSR applies from 13 December 2024. Article 51 allows products compliant with the former General Product Safety Directive and placed on the market before that date to continue being made available. That is a product-specific transition, not a continuing exemption for new stock or relisted products.

Business trigger

The Regulation can affect manufacturers, private-label brands, importers, distributors, fulfilment service providers, online sellers and providers of online marketplaces. A person that markets a product under its own name or trademark, or substantially modifies it in a safety-relevant way, may take on manufacturer duties.

An ordinary online shop selling its own inventory is not automatically a “provider of an online marketplace.” Marketplace providers have separate Article 22 obligations, including Safety Gate registration, contact points, listing-interface design and notice processing. A business must analyse the service it actually provides rather than borrowing the label with the lighter-sounding duty.

Proposal or uncertainty

The Commission’s 2026 regulatory action plan announces a future European Product Act intended to simplify and align product rules. That policy announcement is not an enacted replacement for GPSR. Until legislation changes, businesses should implement the current Regulation and monitor the proposal process separately.

Signal

PARAVEILUX judgment. The hidden failure point is version control between the physical product and the listing. A compliant technical file for revision A does not rescue a live page showing revision B, an obsolete responsible person, a cropped warning or a supplier’s reused product image.

Investigate when:

  • the product page is created from marketplace copy rather than controlled safety data;
  • manufacturer and responsible-person details appear only after checkout or inside the parcel;
  • a product identifier in the listing does not match the packaging, invoice and technical file;
  • translations omit, compress or materially change warnings;
  • the seller cannot show when a listing changed or which customers saw it;
  • a software or component update can alter product safety without a fresh risk review; or
  • accident and complaint data sits in customer support without a Safety Business Gateway escalation route.

Counter-signals

  • A controlled product record drives labels, packaging, listings, instructions and recall data.
  • The responsible person has accepted the role and can access the relevant technical documentation.
  • Listing publication is blocked until the Article 19 fields and language checks pass.
  • Complaints, accidents, corrective action, withdrawal and recall decisions have named owners and evidence retention.

These controls support execution; they do not certify that a product is safe.

Action

Implementation checkpoints

  1. Confirm scope and sector overlap. Record the product, foreseeable consumer use, target Member States and which safety risks are already governed by sector-specific EU law.
  2. Assign roles. Identify the manufacturer, importer, distributor, fulfilment provider, EU responsible person and any marketplace provider.
  3. Build or verify the safety file. Obtain the risk analysis, technical documentation, product identifier, instructions, warnings, tests and revision history.
  4. Gate online publication. Make the Article 19 fields mandatory and test their visibility on mobile, desktop and marketplace feeds before an order can be placed.
  5. Control product changes. Require notice and safety reassessment for component, material, software, supplier, factory, label and intended-use changes.
  6. Rehearse incidents. Connect support complaints to accident notification, Safety Business Gateway, consumer contact, withdrawal and recall workflows.

Limitations

GPSR scope depends on the product, risks, role and target market. Sector-specific harmonisation legislation can displace some GPSR provisions while leaving other safety aspects within it. Member States determine penalties and the language consumers can easily understand. This page does not assess product safety, conformity with a sector regime, recall necessity or liability.

Official sources checked

This is general information, not legal or professional advice. Law and facts vary. Consult qualified advisers for a specific situation.

Primary source

Consolidated General Product Safety Regulation — version of 29 May 2026. This source supports the identified facts; Paraveilux signals and recommendations remain interpretation.