Nobody in the company owns product compliance
EU product law places every duty on the company as economic operator, and the General Product Safety Regulation requires internal processes for product safety (Article 14). No act read for this page names a compliance officer, so management has to assign the work. Give each duty a named owner and one person authority to stop a product. With few hours, start where the law sets a gate or a clock.
Free account · no card · opens in the Demo Company
Reviewed 5 October 2026 by the Conphora compliance team · Not legal advice
Why this happens
EU product law does not address departments or job titles. Its duties fall on the economic operator: the manufacturer, the importer, the distributor. Under the General Product Safety Regulation (EU) 2023/988, the manufacturer carries out an internal risk analysis and draws up technical documentation before placing a product on the market, keeps it up to date and at the disposal of authorities for 10 years, and ensures that procedures are in place for products produced in series to remain in conformity (Article 9(2) to (4)). It provides channels for complaints, investigates them and keeps an internal register (Article 9(11) and (12)). An importer ensures before placing a product on the market that the manufacturer has met its documentation and marking duties (Article 11(1)).[1]
The Regulation adds one organisational requirement: economic operators shall ensure that they have internal processes for product safety in place, allowing them to comply with the relevant requirements (Article 14). The Commission's guidelines give staff trained on product safety issues and knowledgeable on EU product safety legislation as an example (Commission Notice C/2025/6233, section 3.1.1). It does not say what the processes look like or who runs them. That is the company's decision, and a company in which nobody owns the question has not made it.[1][5]
Several duties cannot wait for someone to feel responsible. Where a manufacturer considers or has reason to believe that a product is dangerous, it must immediately take corrective measures, inform consumers and inform the authorities (Article 9(8)). An accident caused by a product is notified without undue delay from the moment the manufacturer knows about it, and importers and distributors that learn of an accident inform the manufacturer without undue delay (Article 20(1) and (3)). On request, an economic operator identifies its suppliers and business customers, for six years (Article 15(3) and (5)). Each of these presupposes that information arriving in one part of the company reaches a person who can decide.[1]
The duties do not shrink when one person does the work next to another job; the manufacturer and importer articles make no exception for small operators. They do give the work a structure. Some duties are gates: they must be met before a product is placed on the market, and an importer that has reason to believe they are not must not place the product (Article 11(2)). Some are clocks, such as immediate action on a dangerous product (Articles 9(8) and 11(8)) and accident notification (Article 20(1)). The rest is continuous: keeping the documentation up to date and series production in conformity (Article 9(4)), keeping the register. The amount of documentation is itself tied to risk: the file contains at least a general description of the product and its essential characteristics relevant for assessing its safety, and the analysis of the possible risks and solutions adopted, test reports and the standards applied are added where appropriate with regard to the possible risks (Article 9(2)), so a simple low-risk product needs a short file. The Commission must also adopt specific guidelines for economic operators, with particular regard to the needs of SMEs, including micro-enterprises, on how to fulfil the Regulation's obligations (Article 17(2)).[1]
For products under a CE act, the GPSR chapter containing these organisational articles does not apply (Article 2(1), third subparagraph, point (b)); the sector acts set their own. Under the Low Voltage Directive 2014/35/EU, for example, manufacturers ensure that procedures are in place for series production to remain in conformity and adequately take into account changes in product design or characteristics and in the standards or specifications by reference to which conformity is declared (Article 6(4)). The Commission's Blue Guide states the principle behind all of it: the manufacturer has ultimate responsibility for the conformity of the product and may in no circumstances discharge itself from its responsibilities to an authorised representative, a distributor or a subcontractor (section 3.1). When authorities find a non-compliance, they require the relevant economic operator, the company, to act (Regulation (EU) 2019/1020, Article 16(2)).[2][3][4]
How to solve it
-
List the duties that come with your role
Write down, per product group, whether the company is manufacturer, importer or distributor, and the duties that follow: risk analysis and technical documentation, marking, instructions, checks on suppliers, complaints, accident and risk notifications, traceability, answers to authorities.
-
Find where each duty is handled today
Ask design, purchasing, quality, marketing, customer service and logistics what they already do for each duty and what nobody does. Most companies find that the work exists in pieces and that the gaps are at the hand-overs: a change nobody assessed, a complaint nobody escalated.
-
Appoint one owner with a mandate from management
Name one function that owns the overview and has the authority to hold a launch, a purchase order or a shipment until an open point is closed. Name a deputy. Put the mandate in writing and tell the organisation, so the owner does not have to argue its authority case by case.
Compliance ManagerAcademy · account needed Free Open -
Write the process down
Describe four routines briefly: the gate a new product passes before it is placed on the market, how changes to a product or supplier are assessed, how complaints and accidents are received, investigated and registered, and who decides and notifies when a product may be dangerous.
-
With few hours, guard the gates and the clocks first
If one person does compliance next to another job, write a one-page instruction for the situations where the law says immediately or without undue delay: a product that may be dangerous, an accident, a request from an authority. Name a deputy who can act when that person is away. Agree with purchasing and sales that no product is ordered or listed before its documents are in.
Product validationCompliance engine Open in the console -
Rank the existing range by risk
Nobody reviews everything at once. Sort the products by who uses them and what can go wrong: products for children, electrical products, products with chemicals or batteries first; high volumes before low. As importer, ask each supplier for a fixed list of documents per product and check that every report names the model you buy; do not rebuild a file the manufacturer is obliged to hold.
-
Report to management at fixed intervals
Agree a short recurring report: products without complete documentation, open complaints and investigations, changes waiting for assessment, requests from authorities and customers, and which products or duties the hours available do not cover. Management cannot weigh a risk it does not see, and accepting a gap, adding time or dropping a product is its decision.
Work through the steps in the platform with your own product.
What you need to show
| Document | Where it comes from | Legal ground |
|---|---|---|
| Written description of the internal product safety process, with owners and deputies | Management and the appointed owner | GPSR Article 14 |
| Technical documentation per product, kept up to date | The function that owns the product file | GPSR Article 9(2) and (3) |
| Procedures that keep series production in conformity | Production, quality or the supplier, under the owner's oversight | GPSR Article 9(4); Low Voltage Directive Article 6(4) |
| Register of complaints, recalls and corrective measures | Customer service together with the owner | GPSR Article 9(12) |
| Records of suppliers and business customers per product | Purchasing and sales | GPSR Article 15(3) and (5) |
| Product list ranked by risk, with the status of each file | The appointed owner, from the product master data | GPSR Article 14 |
| Copy of the manufacturer's technical documentation for imported products | The manufacturer outside the Union | GPSR Article 11(1) and (6) |
| One-page escalation instruction naming the deputy | The appointed owner, approved by management | GPSR Articles 9(8), 11(8) and 20 |
If you do nothing
The duty to act is immediate, and nobody acts
A manufacturer or importer that has reason to believe a product it placed on the market is dangerous must immediately take or ensure corrective measures, inform consumers and inform the authorities through the Safety Business Gateway (GPSR Articles 9(8) and 11(8)). Without an owner and a deputy, the information sits where it arrived, also during holidays.[1]
A product without documents may not be placed
An importer that has reason to believe a product does not conform to the general safety requirement or lacks the manufacturer's documentation, identifier or contact details must not place it on the market until it has been brought into conformity (GPSR Article 11(2)).[1]
An accident is not notified
The manufacturer must ensure that an accident caused by a product is notified through the Safety Business Gateway without undue delay from the moment it knows about it (GPSR Article 20(1)).[1]
Authorities address the company
Authorities require the relevant economic operator to take corrective action within a period they specify, and ensure withdrawal or recall if it fails to do so (Regulation (EU) 2019/1020, Article 16(2) and (5)). Member States set the penalties (GPSR Article 44; Regulation (EU) 2019/1020, Article 41).[3]
Questions about this problem
Does EU law require us to appoint a compliance officer?
Not in the acts read for this page. The GPSR requires economic operators to have internal processes for product safety that allow them to comply (Article 14) and leaves the organisation to the company. Some sector acts have their own rules on responsible persons; check the acts that apply to your products.
Which department should own it?
The law does not say. What matters is that the owner sees the whole chain from design or purchasing to complaints, has the knowledge to read the requirements, and has the authority to stop a product. In small companies this is often a manager with another main job.
Can we hand the responsibility to a consultant or an authorised representative?
Tasks, yes; responsibility, no. An authorised representative performs the tasks specified in a written mandate. The Blue Guide states that a manufacturer may in no circumstances discharge itself from its responsibilities to an authorised representative, a distributor or a subcontractor.
Does Article 14 apply to our CE-marked products?
Chapter III, Section 1 of the GPSR, which contains Article 14, does not apply to products under a product-specific harmonisation act, such as the CE directives (Article 2(1), third subparagraph, point (b)). The sector acts have their own process duties, such as procedures for series production to remain in conformity (Low Voltage Directive, Article 6(4)). One internal process can serve both.
Is there a lighter regime for small companies?
Not in the manufacturer and importer articles of the GPSR read for this page; they apply to every economic operator. The Regulation does oblige the Commission to adopt specific guidelines for economic operators, with particular regard to the needs of SMEs, including micro-enterprises, on how to fulfil its obligations (Article 17(2)).
One person does it part-time. What can wait?
Nothing the law requires before a product is placed on the market can wait for that product. What you can plan is the order in which you close gaps on products already on sale, starting where the risk to users is highest, and the depth of the routines around them.
Sources
- Regulation (EU) 2023/988 on general product safety (consolidated text of 29 May 2026) EUR-Lex · accessed 5 October 2026
- Directive 2014/35/EU on electrical equipment designed for use within certain voltage limits (consolidated text of 30 May 2026) EUR-Lex · accessed 5 October 2026
- Regulation (EU) 2019/1020 on market surveillance and compliance of products (consolidated text of 12 August 2026) EUR-Lex · accessed 5 October 2026
- The 'Blue Guide' on the implementation of EU product rules 2022 (2022/C 247/01) European Commission, via EUR-Lex · accessed 5 October 2026
- Commission Notice — Guidelines on the application of the EU general product safety legislative framework by businesses (C/2025/6233) EUR-Lex · accessed 5 October 2026
About this page
- Reviewer
- Conphora compliance team
- Reviewed
- 5 October 2026
General information, not legal advice. Check the legal text or ask an adviser about your own product.
Conphora (2026). Nobody in the company owns product compliance. Retrieved 13 October 2026 from https://www.conphora.com/solutions/problem/who-owns-compliance/
Conphora (2026) Nobody in the company owns product compliance. Available at: https://www.conphora.com/solutions/problem/who-owns-compliance/ (Accessed 13 October 2026).
@misc{conphora2026nobodyinthecompanyownspr,
author = {Conphora},
title = {Nobody in the company owns product compliance},
year = {2026},
url = {https://www.conphora.com/solutions/problem/who-owns-compliance/},
note = {Retrieved 13 October 2026}
} See it working before you add a product
The Demo Company is a complete, read-only example — products, documents, supplier requests and deadlines. Open it with a free account; no card, no trial clock.
Free account · no card · opens in the Demo Company