GPSR Technical File: 2026 EU Importer Compliance Guide
Under the EU’s General Product Safety Regulation (GPSR), the entity that places a consumer product on the EU market bears legal liability for its safety.
If your Asian factory cannot produce a defensible Technical Product Safety File, you — the EU importer — become the “Responsible Person” by default. When a product fails a spot check or causes harm, you go to court. This briefing shows you how to audit the factory’s safety documentation before a single unit boards a vessel.
What GPSR Actually Demands
GPSR replaced the old General Product Safety Directive (GPSD) and is now in full enforcement. The regulation mandates three core obligations for any consumer product entering the EU:
- Responsible Person: An EU-based entity must be designated as legally accountable for product safety. This is typically the importer or a mandated EU Authorized Representative.
- Technical Product Safety File: A structured, multi-document legal artifact containing risk assessments, test reports, traceability data, and labeling evidence. It must be producible within 48 hours of a market surveillance request.
- Post-Market Surveillance: The Responsible Person must monitor complaints, report safety incidents to the EU Safety Gate (RAPEX) system, and coordinate recalls if necessary.
Most EU importers think they are just buying goods. They are wrong. GPSR makes them the legally liable backstop if the factory’s documentation is inadequate.
The Technical File: Structure Over Certificates
The Technical File is not a folder of test reports. It is a structured legal artifact with specific modules:
- Product Identification: Model numbers, variants (color, size, material), and batch/serial tracking codes.
- Risk Assessment: A formal, documented hazard analysis covering all reasonably foreseeable risks (mechanical, chemical, electrical, thermal, choking hazards, etc.). Generic CE declarations are insufficient.
- Applicable Standards: The specific EN standards or ISO frameworks used to assess safety (e.g., EN 71 for toys, EN 62115 for electrical toys, REACH for chemical safety).
- Test Reports: Third-party lab results from ISO 17025-accredited facilities, less than 3 years old. The factory must be able to produce raw test data, not just pass/fail summaries.
- Labeling Evidence: Photos or proofs that the product bears the manufacturer’s name, the importer’s EU address, safety warnings in the destination country’s language, and traceability codes.
- Traceability Data: A bill of materials (BOM) with supplier names and addresses for critical components, enabling full supply chain mapping.
The file must be version-controlled and updated with every design or material change. If it cannot be submitted to EU market surveillance authorities within 48 hours, the product is non-compliant by definition.
The Risk Assessment Trap: Generic Declarations vs. Documented Analysis
GPSR demands a documented hazard analysis, not a checkbox. The most common failure point is the risk assessment:
- Red Flag: The factory provides a single-page “CE Declaration of Conformity” with no supporting risk analysis.
- Red Flag: Test reports are older than 3 years or come from non-accredited laboratories.
- Red Flag: The factory says “we have never had a recall” but cannot show a documented complaint-tracking system or post-market surveillance procedure.
A defensible risk assessment identifies specific hazards, assigns risk levels, and documents the mitigation measures implemented. If the factory cannot produce this, you are holding a liability bomb.
Traceability and Labeling: The Border Checkpoint
GPSR mandates full traceability from raw material to end consumer. The most common labeling failures:
- Missing EU Address: The product must bear the importer’s name and EU postal address (if the importer is the Responsible Person). A “we can add a sticker later” approach will get the shipment intercepted at customs.
- Language Mismatch: Safety warnings must be in the language(s) of the destination EU member state. English-only labels for a German market = non-compliance.
- No Batch Tracking: Products and packaging must bear batch/serial numbers or traceability codes. Without this, recalls are impossible to execute.
Post-Market Surveillance: Compliance Doesn’t End at the Border
GPSR requires ongoing vigilance after the product enters the EU:
- Complaint Tracking: The factory must have a documented procedure for handling safety complaints and a log of all incidents.
- Incident Reporting: Safety defects must be reported to the Responsible Person within 24 hours. The Responsible Person must then notify the EU Safety Gate (RAPEX) system.
- Quarterly Reporting: The factory should provide quarterly safety performance reports to the Responsible Person.
If the factory’s quality manager says “we have never had a recall” but cannot show a complaint-tracking system, they are either lying or unprepared. Both are dealbreakers.
Working with EU Authorized Representatives
If you use an EU Authorized Representative (AR) instead of acting as the Responsible Person yourself, the chain of accountability must be crystal clear:
- Written Mandate: The AR mandate must be in writing and specify the exact products covered.
- File Access: The AR must have immediate access to the Technical File and be able to retrieve it within 48 hours.
- Market Surveillance Response: The AR must be aware of and able to respond to inquiries from EU market surveillance authorities.
- Labeling: The AR’s contact details must appear on the product labeling or accompanying documents.
Red Flag: The AR is a “virtual office” that has never seen your product or Technical File. If they cannot answer basic safety questions, they are not a real Responsible Person — they are a liability shield that will fail under scrutiny.
The Forensic Audit: What to Verify Before Signing the PO
Before you sign a purchase order, conduct a forensic audit of the factory’s safety documentation. The downloadable checklist below walks you through every verification point, but here are the critical questions:
- Can the factory name the Responsible Person and provide a signed mandate?
- Does the Technical File contain all six modules (product ID, risk assessment, standards, test reports, labeling, traceability)?
- Are test reports from ISO 17025-accredited labs and less than 3 years old?
- Can the factory produce raw test data, not just summaries?
- Does the product bear the importer’s EU address and safety warnings in the correct language?
- Is there a documented complaint-tracking and incident-reporting procedure?
If the factory cannot answer “yes” to all of these, you are the Responsible Person — and you are holding a liability bomb.
The Responsible Person is the Last Line of Defense
Download the GPSR Technical File Audit Checklist. Verify risk assessments, test reports, traceability, and post-market surveillance before your next shipment leaves the factory.
Frequently Asked Questions
What is the difference between GPSR and the old GPSD?
The General Product Safety Regulation (GPSR) replaced the General Product Safety Directive (GPSD) and is now directly applicable in all EU member states without national transposition. Key differences include mandatory Responsible Person designation, stricter Technical File requirements, and enhanced post-market surveillance obligations.
Do all products need a Technical File under GPSR?
Yes, for consumer products. GPSR applies to all non-food consumer products placed on the EU market, whether new, used, or refurbished. Professional/industrial products have different rules under sector-specific legislation.
Can the factory be the Responsible Person?
No. The Responsible Person must be established in the EU. If the factory is outside the EU, the importer or a mandated EU Authorized Representative becomes the Responsible Person by default.
Conclusion
GPSR is not a checkbox exercise. It is a legal architecture that determines who goes to court when a product fails. Factories that treat the Technical File as an afterthought are factories that will leave you holding the liability. Audit the file before you sign the purchase order. The Responsible Person is the last line of defense — make sure it is you, not an unprepared factory.
Last updated: September 2026
References & Further Reading
- EU General Product Safety Regulation (GPSR) – Official Text
- EU Safety Gate (RAPEX) – Product Safety Notification System
- ISO 12100:2010 – Safety of Machinery – General Principles for Design
📧 | 📞 +372 699 1530
Hansato Europe OÜ – Global Supply Chain Services
Navigating EU compliance. Sourcing from Asia.
