General Product Safety Regulation 2023/988 — when it applies

The General Product Safety Regulation (EU) 2023/988 was published in the Official Journal L 135 on 23 May 2023 and applies from 13 December 2024. It replaces Directive 2001/95/EC on general product safety, which served as the EU's safety net for consumer products for over two decades but predated e-commerce, drop-shipping marketplaces, and product-by-product cybersecurity expectations.

GPSR modernises three things at once. It captures online marketplaces directly with enforceable due-diligence obligations. It tightens traceability so that every product placed on the EU market can be linked back to an identified manufacturer, importer or responsible person inside the Union. And it operationalises the Safety Gate system (the successor to RAPEX) as the spine of cross-border recalls and safety warnings.

When GPSR applies — and when sector law wins instead

Article 2 of GPSR sets the scope. The Regulation applies to products placed or made available on the market insofar as there are no specific provisions with the same objective under Union law which regulate the safety of the products concerned (Article 2(1)). This is the classic lex specialis rule. Where a sector law — RED, LVD, Machinery, MDR, Toy Safety, EU 2023/1230, etc. — already covers a specific safety risk, that sector law governs and GPSR steps back.

The practical effect:

• CE-marked product fully covered by a sector directive — sector law primary; GPSR fills gaps for risks not addressed (e.g. residual mechanical/choking risk on a radio toy may engage GPSR aspects beyond the radio directive's scope).
• Non-harmonised consumer product — GPSR is the only EU safety regime that applies. Examples: textiles, furniture, kitchenware, sports gear, childcare articles outside the Toy Safety scope.
• Excluded categories — medicinal products, food, feed, plants, animals, animal by-products, plant-protection products, antiques, equipment used by service providers in supplying a service to consumers (with carve-outs) are excluded per Article 2(2).

The general safety requirement

Article 5 is the keystone:

Economic operators shall place or make available on the market only safe products.

A safe product is defined in Article 3 as one which, under normal or reasonably foreseeable conditions of use including duration of use, presents no risk or only the minimum risks compatible with the product's use, considered acceptable and consistent with a high level of protection of the health and safety of consumers. Article 6 lists the factors to weigh when assessing safety — characteristics, interaction with other products, presentation and labelling, categories of consumers at risk (children, elderly, persons with disabilities), cybersecurity features where they affect safety, and the evolving function of products learning over time. The cybersecurity-as-safety aspect is new versus the 2001 Directive and aligns GPSR conceptually with the Cyber Resilience Act timeline.

Traceability and labelling

GPSR introduces a hard EU baseline for product-level traceability. Every product placed on the market must carry an identification (type, batch or serial number or other element allowing identification), the name and contact address of the manufacturer (including an EU postal address), and where the manufacturer is established outside the Union, the name and contact address of the responsible person inside the EU — importer, authorised representative under Regulation (EU) 2019/1020 Article 4, or fulfilment service provider in the residual case.

This obligation applies regardless of whether the product is also CE-marked under sector law — and overlaps materially with the importer-and-authorised-representative regime laid down by Article 4 of Market Surveillance Regulation 2019/1020.

Online marketplaces — Article 22

This is the most substantive new layer. Providers of online marketplaces — Amazon Marketplace, AliExpress, eBay, Etsy, Bol.com, Allegro, Cdiscount and platforms of that pattern — owe specific GPSR duties:

• Register with Safety Gate — designate a single point of contact in the Safety Gate Portal for the receipt of orders from market surveillance authorities.
• Single point of contact for consumers — for direct communication on product safety issues.
• Internal processes to ensure compliance with the Regulation, including pre-listing the Article 4 of Regulation (EU) 2019/1020 economic-operator information so consumers can see who is responsible.
• Cooperate with market surveillance authorities and act on takedown notices and Safety Gate alerts without undue delay, and in any event within two working days from receipt.
• Prevent recurrence — design processes that stop removed listings from reappearing under another seller or product title.
• Customer notification on recall — use the marketplace's data on past buyers to inform them when a product previously sold via the platform is recalled.

For sellers, the implication is that listing on an EU-facing marketplace now requires having an EU-based responsible person on record before the listing can stay live — and being able to evidence GPSR compliance when the platform asks.

Recalls, safety warnings, and Safety Gate

When an economic operator believes that a product it has placed or made available is dangerous, it must immediately take the corrective action necessary to bring it into conformity, withdraw it, or recall it. It must also inform the competent market surveillance authorities of the Member States in which the product is or has been made available, via the Safety Business Gateway.

When a recall is initiated, GPSR mandates structured consumer communication:

• A standardised recall notice template referred to in the Regulation, so consumers recognise it as official rather than mistaking it for marketing.
• A safety warning if recall is not feasible.
• Use of all reasonable means to reach consumers — customer registers, loyalty databases, app push notifications, and the Safety Gate Portal public alerts.

Member State authorities and the Commission exchange real-time notifications through the Safety Gate Rapid Alert System. Cross-border bans propagate quickly — a Belgian withdrawal can mean takedowns on listings sold into Germany, Italy, and Slovakia within days.

How GPSR sits next to CE marking

For most hardware on the EU market, both regimes apply in parallel. The CE marking workflow under CE Marking 101 handles sector compliance; GPSR adds the general safety net, the traceability baseline, the marketplace obligations, and the Safety Gate plumbing.

Common mistakes

• Treating GPSR as optional once you have CE marking. The two regimes overlap. Sector law takes precedence on its in-scope risks, but residual safety risks, traceability obligations and recall plumbing remain GPSR's domain.
• Forgetting the EU responsible person on non-CE-marked consumer products. Furniture, kitchenware, textiles and similar non-harmonised goods still need a manufacturer name + EU postal address; if the manufacturer is outside the EU, an importer or designated responsible person must be on-pack.
• Missing the 2-working-day takedown duty on marketplaces. Article 22 is enforceable from 13 December 2024 — slow action on Safety Gate notices exposes the platform itself.
• Generic “customer service” recall emails. GPSR requires a structured recall notice using the official template referred to in the Regulation — generic marketing emails are not compliant.
• Assuming GPSR replaces RAPEX informally. The system formally became Safety Gate in 2021; GPSR codifies it across three components (Rapid Alert System, public Portal, Business Gateway) with enforceable usage obligations.
• Ignoring connected-product safety. GPSR Article 6 explicitly weighs cybersecurity features where they affect consumer safety. Connected toys, baby monitors and smart home devices have GPSR exposure even before CRA enforcement in December 2027.

How Cenitia helps

Cenitia's compliance platform tracks the GPSR regime alongside the sector CE marking directives, so a product placed on the EU market is checked against every layer that applies. We map non-harmonised consumer products to their GPSR obligations end-to-end: general safety requirement, traceability + labelling, internal processes, Safety Gate registration where applicable, and standardised recall notice generation if a corrective action is needed.

For online marketplace operators and large importers, Cenitia produces the Article 22 internal-process documentation, the Safety Business Gateway notification templates, and the consumer-facing recall notices that follow the official template — so that the response to a Safety Gate alert is measured in hours, not the days that put platforms at risk of regulatory action.

Frequently asked questions

When does GPSR 2023/988 apply?

Regulation (EU) 2023/988 applies from 13 December 2024 across all EU Member States. It was published in OJ L 135 on 23 May 2023 and entered into force on the twentieth day after publication, with the 18-month delayed application giving economic operators time to adapt. From the date of application, Directive 2001/95/EC on general product safety is repealed.

Does GPSR apply to products already covered by CE marking directives?

GPSR applies where no specific Union law with the same product safety objective covers the product. For CE-marked products under sector legislation (Radio Equipment Directive, Low Voltage Directive, Toy Safety Directive, Machinery Regulation, Medical Devices Regulation, etc.) the sector law takes precedence on its in-scope safety aspects. GPSR fills the gap for residual safety risks not addressed by the sector law and for non-harmonised consumer products entirely.

What are an online marketplace's obligations under GPSR Article 22?

Providers of online marketplaces must register a single contact point with the Safety Gate Portal, designate a single contact point for consumers, cooperate with market surveillance authorities, act on Safety Gate notices to remove unsafe-product listings without undue delay, and have internal processes to prevent reappearance of removed dangerous offers. They must also enable economic operators to comply with the traceability and pre-listing information requirements set by the Regulation.

What is Safety Gate?

Safety Gate is the EU rapid alert system for dangerous non-food consumer products. It has three components — the Safety Gate Rapid Alert System (Member State authorities and the Commission exchange notifications on dangerous products), the Safety Gate Portal (public-facing site where consumers see alerts and can submit complaints), and the Safety Business Gateway (where economic operators and marketplaces notify accidents and dangerous products to authorities and consumers). It is the successor to the RAPEX system.

Does GPSR require a CE mark or a Declaration of Conformity?

No. GPSR does not introduce a CE mark or a sector-style DoC. It imposes a general safety requirement, traceability and labelling obligations, internal processes, and recall and information duties. Products that are also subject to sector CE-marking legislation continue to need the CE mark and the DoC under that sector law — GPSR is additional, not replacement.

Who is responsible for placing only safe products on the market?

Article 5 of GPSR states that economic operators shall place or make available on the market only safe products. The duty cascades across the supply chain — manufacturer, authorised representative, importer, distributor, fulfilment service provider, and provider of online marketplace — each with calibrated obligations under Chapter III. Outside the EU, a manufacturer must designate a responsible person established in the Union before placing a product on the EU market.

What happens when a manufacturer discovers a safety problem post-sale?

The economic operator must immediately take corrective measures (withdraw, recall or warn), notify the competent national market surveillance authority via the Safety Business Gateway, and use customer data at its disposal — purchase records, registration data, loyalty programmes — to notify affected consumers directly. Recall notices must follow the standard template referred to in the Regulation so that consumers can recognise them as authentic safety notices.

Related from the Library

• CE Marking 101 — the complete EU guide for hardware manufacturers — the sector framework GPSR layers on top of
• EC REP vs Importer vs Manufacturer — responsibilities compared — the EU responsible person GPSR demands
• EU Authorised Representative (EC REP) guide — for non-EU manufacturers
• Declaration of Conformity 101 — sector-law DoC, not required by GPSR but typically needed in parallel
• Top 10 CE marking mistakes — pitfalls that compound with GPSR

Further reading

• Regulation (EU) 2023/988 on EUR-Lex — full official text and consolidated versions
• Directive 2001/95/EC (repealed) — the regime GPSR replaces
• European Commission — Product safety policy page — Commission guidance and harmonised standards
• Safety Gate portal — public-facing alerts, complaints, and the Safety Business Gateway
• Regulation (EU) 2019/1020 on market surveillance — Article 4 economic operator framework that GPSR slots into
• Implementing Decision (EU) 2024/3173 on harmonised standards under GPSR — first batch of GPSR harmonised standards published in late 2024

Last reviewed: 5 July 2026. Cited regulations watched continuously by Cenitia — when one amends, this article is flagged for update.