Esc

Site search arrives with the platform catalogue. Until then, start from one of these:

Roles and responsibilities Manufacturer · Importer 6 min read

Nobody in the company owns product compliance

EU product law places every duty on the company as economic operator, and the General Product Safety Regulation requires internal processes for product safety (Article 14). No act read for this page names a compliance officer, so management has to assign the work. Give each duty a named owner and one person authority to stop a product. With few hours, start where the law sets a gate or a clock.

Free account · no card · opens in the Demo Company

Reviewed 5 October 2026 by the Conphora compliance team · Not legal advice

Why this happens

EU product law does not address departments or job titles. Its duties fall on the economic operator: the manufacturer, the importer, the distributor. Under the General Product Safety Regulation (EU) 2023/988, the manufacturer carries out an internal risk analysis and draws up technical documentation before placing a product on the market, keeps it up to date and at the disposal of authorities for 10 years, and ensures that procedures are in place for products produced in series to remain in conformity (Article 9(2) to (4)). It provides channels for complaints, investigates them and keeps an internal register (Article 9(11) and (12)). An importer ensures before placing a product on the market that the manufacturer has met its documentation and marking duties (Article 11(1)).[1]

The Regulation adds one organisational requirement: economic operators shall ensure that they have internal processes for product safety in place, allowing them to comply with the relevant requirements (Article 14). The Commission's guidelines give staff trained on product safety issues and knowledgeable on EU product safety legislation as an example (Commission Notice C/2025/6233, section 3.1.1). It does not say what the processes look like or who runs them. That is the company's decision, and a company in which nobody owns the question has not made it.[1][5]

Several duties cannot wait for someone to feel responsible. Where a manufacturer considers or has reason to believe that a product is dangerous, it must immediately take corrective measures, inform consumers and inform the authorities (Article 9(8)). An accident caused by a product is notified without undue delay from the moment the manufacturer knows about it, and importers and distributors that learn of an accident inform the manufacturer without undue delay (Article 20(1) and (3)). On request, an economic operator identifies its suppliers and business customers, for six years (Article 15(3) and (5)). Each of these presupposes that information arriving in one part of the company reaches a person who can decide.[1]

The duties do not shrink when one person does the work next to another job; the manufacturer and importer articles make no exception for small operators. They do give the work a structure. Some duties are gates: they must be met before a product is placed on the market, and an importer that has reason to believe they are not must not place the product (Article 11(2)). Some are clocks, such as immediate action on a dangerous product (Articles 9(8) and 11(8)) and accident notification (Article 20(1)). The rest is continuous: keeping the documentation up to date and series production in conformity (Article 9(4)), keeping the register. The amount of documentation is itself tied to risk: the file contains at least a general description of the product and its essential characteristics relevant for assessing its safety, and the analysis of the possible risks and solutions adopted, test reports and the standards applied are added where appropriate with regard to the possible risks (Article 9(2)), so a simple low-risk product needs a short file. The Commission must also adopt specific guidelines for economic operators, with particular regard to the needs of SMEs, including micro-enterprises, on how to fulfil the Regulation's obligations (Article 17(2)).[1]

For products under a CE act, the GPSR chapter containing these organisational articles does not apply (Article 2(1), third subparagraph, point (b)); the sector acts set their own. Under the Low Voltage Directive 2014/35/EU, for example, manufacturers ensure that procedures are in place for series production to remain in conformity and adequately take into account changes in product design or characteristics and in the standards or specifications by reference to which conformity is declared (Article 6(4)). The Commission's Blue Guide states the principle behind all of it: the manufacturer has ultimate responsibility for the conformity of the product and may in no circumstances discharge itself from its responsibilities to an authorised representative, a distributor or a subcontractor (section 3.1). When authorities find a non-compliance, they require the relevant economic operator, the company, to act (Regulation (EU) 2019/1020, Article 16(2)).[2][3][4]

How to solve it

  1. List the duties that come with your role

    Write down, per product group, whether the company is manufacturer, importer or distributor, and the duties that follow: risk analysis and technical documentation, marking, instructions, checks on suppliers, complaints, accident and risk notifications, traceability, answers to authorities.

  2. Find where each duty is handled today

    Ask design, purchasing, quality, marketing, customer service and logistics what they already do for each duty and what nobody does. Most companies find that the work exists in pieces and that the gaps are at the hand-overs: a change nobody assessed, a complaint nobody escalated.

  3. Appoint one owner with a mandate from management

    Name one function that owns the overview and has the authority to hold a launch, a purchase order or a shipment until an open point is closed. Name a deputy. Put the mandate in writing and tell the organisation, so the owner does not have to argue its authority case by case.

    Compliance ManagerAcademy · account needed Free Open
  4. Write the process down

    Describe four routines briefly: the gate a new product passes before it is placed on the market, how changes to a product or supplier are assessed, how complaints and accidents are received, investigated and registered, and who decides and notifies when a product may be dangerous.

  5. With few hours, guard the gates and the clocks first

    If one person does compliance next to another job, write a one-page instruction for the situations where the law says immediately or without undue delay: a product that may be dangerous, an accident, a request from an authority. Name a deputy who can act when that person is away. Agree with purchasing and sales that no product is ordered or listed before its documents are in.

    Product validationCompliance engine Open in the console
  6. Rank the existing range by risk

    Nobody reviews everything at once. Sort the products by who uses them and what can go wrong: products for children, electrical products, products with chemicals or batteries first; high volumes before low. As importer, ask each supplier for a fixed list of documents per product and check that every report names the model you buy; do not rebuild a file the manufacturer is obliged to hold.

  7. Report to management at fixed intervals

    Agree a short recurring report: products without complete documentation, open complaints and investigations, changes waiting for assessment, requests from authorities and customers, and which products or duties the hours available do not cover. Management cannot weigh a risk it does not see, and accepting a gap, adding time or dropping a product is its decision.

Work through the steps in the platform with your own product.

What you need to show

DocumentWhere it comes fromLegal ground
Written description of the internal product safety process, with owners and deputiesManagement and the appointed ownerGPSR Article 14
Technical documentation per product, kept up to dateThe function that owns the product fileGPSR Article 9(2) and (3)
Procedures that keep series production in conformityProduction, quality or the supplier, under the owner's oversightGPSR Article 9(4); Low Voltage Directive Article 6(4)
Register of complaints, recalls and corrective measuresCustomer service together with the ownerGPSR Article 9(12)
Records of suppliers and business customers per productPurchasing and salesGPSR Article 15(3) and (5)
Product list ranked by risk, with the status of each fileThe appointed owner, from the product master dataGPSR Article 14
Copy of the manufacturer's technical documentation for imported productsThe manufacturer outside the UnionGPSR Article 11(1) and (6)
One-page escalation instruction naming the deputyThe appointed owner, approved by managementGPSR Articles 9(8), 11(8) and 20

If you do nothing

The duty to act is immediate, and nobody acts

A manufacturer or importer that has reason to believe a product it placed on the market is dangerous must immediately take or ensure corrective measures, inform consumers and inform the authorities through the Safety Business Gateway (GPSR Articles 9(8) and 11(8)). Without an owner and a deputy, the information sits where it arrived, also during holidays.[1]

A product without documents may not be placed

An importer that has reason to believe a product does not conform to the general safety requirement or lacks the manufacturer's documentation, identifier or contact details must not place it on the market until it has been brought into conformity (GPSR Article 11(2)).[1]

An accident is not notified

The manufacturer must ensure that an accident caused by a product is notified through the Safety Business Gateway without undue delay from the moment it knows about it (GPSR Article 20(1)).[1]

Authorities address the company

Authorities require the relevant economic operator to take corrective action within a period they specify, and ensure withdrawal or recall if it fails to do so (Regulation (EU) 2019/1020, Article 16(2) and (5)). Member States set the penalties (GPSR Article 44; Regulation (EU) 2019/1020, Article 41).[3]

Questions about this problem

Does EU law require us to appoint a compliance officer?

Not in the acts read for this page. The GPSR requires economic operators to have internal processes for product safety that allow them to comply (Article 14) and leaves the organisation to the company. Some sector acts have their own rules on responsible persons; check the acts that apply to your products.

Which department should own it?

The law does not say. What matters is that the owner sees the whole chain from design or purchasing to complaints, has the knowledge to read the requirements, and has the authority to stop a product. In small companies this is often a manager with another main job.

Can we hand the responsibility to a consultant or an authorised representative?

Tasks, yes; responsibility, no. An authorised representative performs the tasks specified in a written mandate. The Blue Guide states that a manufacturer may in no circumstances discharge itself from its responsibilities to an authorised representative, a distributor or a subcontractor.

Does Article 14 apply to our CE-marked products?

Chapter III, Section 1 of the GPSR, which contains Article 14, does not apply to products under a product-specific harmonisation act, such as the CE directives (Article 2(1), third subparagraph, point (b)). The sector acts have their own process duties, such as procedures for series production to remain in conformity (Low Voltage Directive, Article 6(4)). One internal process can serve both.

Is there a lighter regime for small companies?

Not in the manufacturer and importer articles of the GPSR read for this page; they apply to every economic operator. The Regulation does oblige the Commission to adopt specific guidelines for economic operators, with particular regard to the needs of SMEs, including micro-enterprises, on how to fulfil its obligations (Article 17(2)).

One person does it part-time. What can wait?

Nothing the law requires before a product is placed on the market can wait for that product. What you can plan is the order in which you close gaps on products already on sale, starting where the risk to users is highest, and the depth of the routines around them.

Follow changes to the rules behind this problem

One mail when the rules change. Unsubscribe in any mail.

Sources

  1. Regulation (EU) 2023/988 on general product safety (consolidated text of 29 May 2026) EUR-Lex · accessed 5 October 2026
  2. Directive 2014/35/EU on electrical equipment designed for use within certain voltage limits (consolidated text of 30 May 2026) EUR-Lex · accessed 5 October 2026
  3. Regulation (EU) 2019/1020 on market surveillance and compliance of products (consolidated text of 12 August 2026) EUR-Lex · accessed 5 October 2026
  4. The 'Blue Guide' on the implementation of EU product rules 2022 (2022/C 247/01) European Commission, via EUR-Lex · accessed 5 October 2026
  5. Commission Notice — Guidelines on the application of the EU general product safety legislative framework by businesses (C/2025/6233) EUR-Lex · accessed 5 October 2026

About this page

Reviewer
Conphora compliance team
Reviewed
5 October 2026
Cite this page
Conphora (2026). Nobody in the company owns product compliance. Retrieved 13 October 2026 from https://www.conphora.com/solutions/problem/who-owns-compliance/
Reviewed
Demo Company

See it working before you add a product

The Demo Company is a complete, read-only example — products, documents, supplier requests and deadlines. Open it with a free account; no card, no trial clock.

Free account · no card · opens in the Demo Company