Esc

Site search arrives with the platform catalogue. Until then, start from one of these:

Incidents, recalls and authorities Manufacturer · Importer 5 min read

We keep no register of complaints

Under the General Product Safety Regulation (EU) 2023/988, manufacturers must keep an internal register of safety complaints, product recalls and corrective measures, and importers must file the complaints they investigate there or in their own register. Set up a public complaint channel, decide what goes in the register, and store only the personal data the investigation needs, for as long as it needs it and never longer than five years.

Free account · no card · opens in the Demo Company

Reviewed 5 October 2026 by the Conphora compliance team · Not legal advice

Why this happens

The General Product Safety Regulation (EU) 2023/988, which applies from 13 December 2024, turned complaint handling from good practice into a written duty. Article 9(11) requires manufacturers to make publicly available communication channels, such as a telephone number, an electronic address or a dedicated section of their website, through which consumers can submit complaints and report accidents or safety issues. Article 9(12) then requires them to investigate the complaints and accident information that concern the safety of their products and that the complainant alleges to be dangerous, and to keep an internal register of those complaints as well as of product recalls and any corrective measures taken.[1]

Importers carry a parallel duty. They verify whether the manufacturer's communication channels are available to consumers and provide their own if they are not (Article 11(9)). They investigate the safety complaints and accident information they receive and file them, together with recalls and corrective measures, either in the manufacturer's register or in their own (Article 11(10)). They also keep the manufacturer, distributors and, where relevant, fulfilment service providers and online marketplaces informed in a timely manner of the investigation and its results.[1]

The register is limited by data protection. It may store only the personal data necessary to investigate the complaint, kept only for as long as the investigation needs and in any event no longer than five years after the data were entered (Articles 9(13) and 11(11)). The product facts and the outcome of the investigation are a different matter: on request, every economic operator must give the market surveillance authority a full description of the risk, related complaints and known accidents, and of any corrective measure taken, and must be able to present that information for 10 years after it was supplied with or supplied the product (Article 15(2) and 15(4)).[1]

A register is what makes that request answerable. Market surveillance authorities follow a risk-based approach that takes into account, among other factors, the economic operator's past record of non-compliance and consumer complaints and other information received from other sources (Regulation (EU) 2019/1020, Article 11(3), applied to GPSR products by Article 23(1)). An operator that already records and investigates complaints can show what it knew and what it did.[2]

How to solve it

  1. Open a channel consumers can actually use

    Publish a telephone number, an electronic address or a dedicated section of your website where consumers can submit complaints and report accidents or safety issues, and take accessibility needs into account. If you import, check that the manufacturer's channel exists; if it does not, provide one yourself.

  2. Decide what the register must capture

    The register covers complaints and accident information that concern the safety of your products and that the complainant alleges to be dangerous, plus product recalls and every corrective measure taken to bring a product into conformity (GPSR Articles 9(12) and 11(10)). The articles fix no fields; in practice, give each entry the product type, batch or serial number, the date, the description of the issue, the investigation and the outcome.

  3. Investigate each entry and record the result

    The duty is to investigate, not only to log. Record what you checked, what you concluded about the risk and what you decided. An entry without an outcome will not help you when an authority asks for a description of complaints and known accidents.

  4. Link recalls and corrective measures to the same register

    When an investigation leads to a withdrawal, a recall or another corrective measure, record the measure in the register with the complaints that triggered it, so the history of the product reads as one file.

    Recall managerTools Open the app
  5. Limit and delete personal data

    Store only the personal data needed to investigate the complaint, keep it only as long as the investigation needs it, and in any event no longer than five years after it was entered. Keep the product facts and the outcome after the personal data is gone.

  6. Keep the chain informed of the results

    Importers keep the manufacturer, distributors and, where relevant, fulfilment service providers and online marketplaces informed in a timely manner of the investigation and its results. Manufacturers keep other economic operators, responsible persons and online marketplaces in the supply chain informed of any safety issue they identify (GPSR Articles 9(10) and 11(10)).

Work through the steps in the platform with your own product.

What you need to show

DocumentWhere it comes fromLegal ground
The internal register of complaints, recalls and corrective measuresThe manufacturer; the importer files its complaints there or in its own registerGPSR Articles 9(12) and 11(10)
The published complaint channelThe manufacturer, or the importer where the manufacturer has noneGPSR Articles 9(11) and 11(9)
A description of the risk, related complaints and known accidentsYou, on request of a market surveillance authorityGPSR Article 15(2)(a)
A description of the corrective measures takenYou, on request of a market surveillance authorityGPSR Article 15(2)(b)

If you do nothing

You cannot answer the authority's request

On request, every economic operator must give the market surveillance authority a full description of the risk, related complaints and known accidents, and be able to present it for 10 years (GPSR Article 15(2) and 15(4)). Without a register, that description has to be rebuilt from mailboxes.[1]

The authority requires corrective action

Where a product is found not to comply, the authority requires appropriate and proportionate corrective action within a period it specifies, and takes measures itself if the operator does not act (Regulation (EU) 2019/1020, Article 16(2) and 16(5), applied by GPSR Article 23(1)).[2]

Penalties under national law

Each Member State lays down effective, proportionate and dissuasive penalties for infringements of the regulation by economic operators (GPSR Article 44).[1]

Questions about this problem

Do distributors have to keep a complaint register?

The register duty in the GPSR is written for manufacturers (Article 9(12)) and importers (Article 11(10)). Distributors have their own duties to act on dangerous products and to inform the manufacturer or importer (Article 12(4)), and like every economic operator they must be able to give the authority a description of the risk, related complaints and known accidents for 10 years (Article 15(2) and 15(4)).

Does every complaint go into the register?

The regulation names complaints and accident information that concern the safety of the product and that the complainant alleges to be dangerous (GPSR Article 9(12)). Complaints about colour or delivery time are not what the article is about.

How long may we keep the complainant's name and address?

Only as long as the investigation needs it, and in any event no longer than five years after the data were entered (GPSR Articles 9(13) and 11(11)).

Can we use the manufacturer's register instead of our own?

Yes, as an importer. Article 11(10) lets you file complaints, recalls and corrective measures in the manufacturer's register under Article 9(12) or in your own internal register.

Does the register have a prescribed format?

Articles 9 and 11 of the GPSR do not prescribe a format. What they fix is the content (complaints, recalls, corrective measures), the duty to investigate and the limits on personal data.

Follow changes to the rules behind this problem

One mail when the rules change. Unsubscribe in any mail.

Sources

  1. Regulation (EU) 2023/988 on general product safety EUR-Lex · accessed 4 October 2026
  2. Regulation (EU) 2019/1020 on market surveillance and compliance of products (consolidated text of 12 August 2026) EUR-Lex · accessed 4 October 2026

About this page

Reviewer
Conphora compliance team
Reviewed
5 October 2026
Cite this page
Conphora (2026). We keep no register of complaints. Retrieved 13 October 2026 from https://www.conphora.com/solutions/problem/complaints-register/
Reviewed
Demo Company

See it working before you add a product

The Demo Company is a complete, read-only example — products, documents, supplier requests and deadlines. Open it with a free account; no card, no trial clock.

Free account · no card · opens in the Demo Company