A GPSR Risk Assessment: A Practical Method for Consumer Products identifies product hazards, exposed users, reasonably foreseeable use and the measures needed to keep a product safe. You should complete it before placing consumer products on the EU market, retain the supporting evidence and update it when the product, safety information or customer feedback changes.
Key takeaways
- Regulation (EU) 2023/988 requires consumer products placed on the EU market to be safe.
- A GPSR risk assessment must connect each identified risk with evidence and a practical risk-control measure.
- Products subject to sector-specific rules, including toys and certain electrical equipment, must also meet those specific requirements.
- Online sellers need to prepare the safety and traceability information required for their distance-selling offer.
- A non-EU manufacturer may need an EU-established responsible economic operator before the product is marketed.
Which products and sellers need a GPSR Risk Assessment: A Practical Method for Consumer Products?
A GPSR risk assessment applies to consumer products, or products likely to be used by consumers, including products sold online. It matters to manufacturers, importers, distributors and, depending on the sales route, the operator making the product available through a marketplace.
Regulation (EU) 2023/988 on general product safety, known as the GPSR, has applied since 13 December 2024. It covers new, used, repaired and reconditioned products, subject to its exclusions and any applicable sector-specific rules.
In practice, a water bottle, flat-pack furniture, a kitchen accessory, sports equipment, a night light or a childcare item can create hazards through its design, materials, packaging, assembly or reasonably foreseeable use. A product being familiar, long established outside the EU or already listed on a marketplace does not prove that it is safe under EU requirements.
The GPSR is a general framework. Where harmonised EU legislation covers a particular risk, that sectoral legislation takes priority for that risk. A toy is therefore subject, among other rules, to Directive 2009/48/EC on the safety of toys. Radio equipment may fall under Directive 2014/53/EU on radio equipment, while electrical equipment may also be subject to low-voltage or electromagnetic-compatibility requirements.
Imagine a US manufacturer selling a rechargeable night light through Amazon Germany. It needs to assess overheating, battery, small-part, cable and child-use risks, as well as whether the instructions are suitable. If the product is subject to CE requirements, the GPSR assessment does not replace the sectoral conformity assessment or any testing required.
To identify the product, customs, VAT and representation obligations to check for your trade flows from the outset, use the EU Market Entry Compliance Assessment.
EU Seller Kit — For a first EU launch or a mixed catalogue, the EU Market Entry Compliance Assessment helps you structure the checks to complete before shipping stock or publishing listings.
What must a GPSR risk assessment contain?
A useful assessment describes the product, identifies hazards, evaluates exposure scenarios and explains why the selected measures make the risk acceptable. It should be understandable and verifiable from real documents, not merely from supplier statements.
Describe the product being assessed precisely
Start by fixing the scope: product reference, variant, photographs, composition, dimensions, intended age group or users, accessories, packaging, instructions and country of manufacture. One commercial product family may need several assessments where materials, power, size, mechanism or intended users differ.
Record intended uses and reasonably foreseeable misuse. A folding chair may be used as a step stool; a water bottle may be handed to a child; a charger may be used with a different cable. You do not need to predict every imaginable behaviour, but you do need to address uses made plausible by the design or context.
Identify hazards and exposed users
A hazard is a potential source of harm. It may be mechanical, thermal, electrical, chemical, flammability-related, choking-related, hygiene-related, radiation-related or caused by insufficient information. Keep hazard and risk separate: a sharp edge is a hazard; the possible cut while handling it is the risk.
The people exposed matter as much as the product. An informed adult, a child, an older person or someone with reduced mobility may not use the item in the same way. Young children require particular attention, especially where small parts, cords, button cells or packaging are involved.
Assess and reduce the risk
For each scenario, assess at least the possible severity of harm and the likelihood of it occurring. A simple matrix can be enough if it is applied consistently: low, medium or high for severity and likelihood, with a written rationale.
Risk reduction should follow a practical order. First change the design or material; then add a physical safeguard; use warnings and instructions for residual risks. A warning does not fix an unsafe design. For example, stating “keep out of reach of children” does not make an easily detachable small part acceptable on a product intended for a family home.
The European Commission's Blue Guide on the implementation of EU product rules explains the importance of technical documentation and economic-operator identification under harmonised rules. For CE-marked products, see our practical CE marking guide for EU sellers to separate GPSR duties correctly from sector-specific obligations.
When should you prepare and update the risk assessment?
Your assessment should be ready before the product is placed on the market or made available. It must then evolve when product characteristics, available information or reported incidents change your view of the risk.
Do not prepare it only when Amazon, eBay, Etsy or an authority asks for it. By then, you may have to reconstruct evidence, supplier correspondence and labelling versions under pressure. A blocked product listing can sometimes be corrected quickly; a market-surveillance request about safety requires a more substantial file.
Update the assessment in particular where there is:
- a change of supplier, factory, material, component or battery;
- a new product or packaging version;
- an added accessory, connected function or new age group;
- repeated customer returns, safety complaints or an incident;
- a change in a standard, sectoral rule or information issued by an authority;
- expansion into another country where languages, national requirements or extended producer responsibility schemes need reviewing.
Example: you import a decorative lamp from Shenzhen to an Amazon FBA warehouse in Germany. The supplier changes the power supply or cable without telling you. Even if the exterior design is identical, you should review the documents and risk assessment because electrical characteristics and available evidence may have changed.
Before ordering, Supplier Check helps you centralise identity, payment and delivery information for review. It does not replace a technical product audit or required testing, but it can reveal documentary inconsistencies before purchase.
How do you carry out a GPSR risk assessment step by step?
The most reliable method links every decision to verifiable evidence: a specification, photograph, test report, instruction manual, quality control record, declaration or technical correspondence. Work product reference by product reference, then state clearly which variants are covered.
Step 1: build the initial product file
Ask the manufacturer for the technical specification, bill of materials and components, product and label photographs, instructions, available test reports, any certificates claimed and the modification history. Check that the documents match the exact model being sold. A generic photograph or a report for a similar reference is not enough.
For imported products, retain commercial and logistics documents that allow you to link batches to the assessed product. If you need to prepare customs documents, TradeFlow AI can help structure them and identify information to check, subject to the tool's stated limitations and available sources.
Step 2: check the applicable legislation
First establish whether the product is subject to harmonised legislation and CE marking. A toy, radio device, electrical appliance or cosmetic product cannot be handled like an ordinary household accessory. The European Commission explains the principles of CE marking, but the exact classification depends on the product and its functions.
A common mistake is treating a CE logo applied by the supplier as sufficient proof. CE marking is the manufacturer's declaration of conformity, based on the applicable assessment, technical documentation and, where necessary, testing or notified-body involvement. It does not replace your GPSR risk assessment or remove the need to review consumer safety information.
Step 3: list hazard scenarios
Review the reasonably foreseeable lifecycle: unboxing, assembly, first use, normal use, cleaning, charging, storage and end of life. At each stage, record the hazard, exposed user, possible harm and cause.
Example: for flat-pack furniture, consider pinching during assembly, tipping after installation, cuts from metal parts, a child swallowing a screw and overloading a shelf. Measures may include a more stable design, suitable fixings, clear assembly instructions, a wall-fixing warning where relevant and a check of supplied parts.
Step 4: assess evidence and corrective measures
Link every hazard to the evidence supporting your conclusion: a test report, calculation, production control, material specification, inspection, labelling photograph or instruction. If evidence is missing, mark the issue as unresolved and do not market the product as though the file were complete.
Record the measures taken, who owns them, their date and the relevant product version. This traceability is essential if the product changes or an authority asks for an explanation.
Step 5: check the online offer before publication
Distance selling does not remove product-safety duties. Article 19 of the GPSR sets information requirements for distance offers; see our explanation of GPSR information to display on an online product listing. Before publication, the Marketplace Product Compliance Scanner reviews traceability, safety and compliance information to check in a listing.
EU Seller Kit — Before publishing on Amazon, eBay, Etsy or Shopify, use the Marketplace Product Compliance Scanner to identify information missing from the listing. If you are a non-EU manufacturer, also assess whether you need an EU-based GPSR Responsible Person.
Checklist before placing the product on sale
- The product reference, variants, materials and accessories are identified without ambiguity.
- Intended uses and reasonably foreseeable misuse are documented.
- Mechanical, electrical, thermal, chemical and vulnerable-user hazards have been considered as relevant to the product.
- Every significant risk is linked to a risk-reduction measure and verifiable evidence.
- Instructions, warnings and safety information suit the product and target countries.
- Required contact details and traceability information are ready for the product, packaging and online offer.
- Applicable CE or sector-specific rules have been checked separately from the GPSR.
- A process exists for complaints, incidents, withdrawals and file updates.
Which documents should you retain with the risk assessment?
Keep a technical file proportionate to the product, showing your reasoning and the measures taken. The GPSR requires economic operators to cooperate with authorities and provide necessary information when requested; the market-surveillance rules in Regulation (EU) 2019/1020 reinforce the need for an accessible, consistent file.
The exact content depends on the product. For a non-harmonised item, it may include the description, risk assessment, photographs, instructions, warnings, traceability information, control evidence and correspondence with the manufacturer. For a CE product, add the material required by the relevant legislation: conformity assessment, relevant test reports, analysis of applicable standards, EU declaration of conformity and technical documentation.
Minimum file to organise
| Item | Purpose | Example evidence |
|---|---|---|
| Product identification | Links the file to the item sold | Reference, photographs, version, batch |
| Risk assessment | Supports the safety evaluation | Hazard, exposure and control matrix |
| Technical evidence | Supports the conclusions | Test report, specification, inspection |
| Customer information | Reduces residual risks | Instructions, warnings, label |
Do not confuse retention with simply storing files. Organise documents by product reference and version, retain the originals received, record dates and avoid changing a supplier PDF without keeping an audit trail. If questioned, you should be able to explain which document applied to which batch and product version.
For CE products, our guide to the CE technical file explains the documents commonly expected before placing a product on the market. A CE authorised representative, where relevant and validly appointed, never replaces the manufacturer's conformity assessment, testing, technical documentation or EU declaration of conformity.
Who is responsible when the manufacturer is outside the EU?
A manufacturer established outside the EU cannot assume that a marketplace, freight forwarder or software subscription automatically becomes its representative. Identify each operator's role before marketing the product, with a written mandate where the applicable rules require one.
The GPSR provides that a product may be placed on the market only where an economic operator established in the EU is responsible for the tasks set out in the Regulation. Depending on the supply chain, this may be an EU-established manufacturer, importer, authorised representative or responsible person, subject to the applicable conditions. The duties of economic operators are explained further in our guide to GPSR Article 16.
A GPSR responsible person and a CE authorised representative are not interchangeable. The first operates under the GPSR; the second may be appointed under a written mandate where the applicable CE legislation permits it. Read our comparison of the GPSR Responsible Person and CE authorised representative to understand the distinction.
An EU Seller Kit GPSR Responsible Person service becomes active only after product review, entity assignment, a signed mandate and active payment. A SaaS subscription alone does not appoint a representative. Likewise, the CE Authorised Representative service does not replace the manufacturer's technical obligations.
Which mistakes weaken a GPSR risk assessment most?
The most common failings are an overly generic file, confusion between commercial documents and safety evidence, or late preparation after a listing has been blocked. Depending on the circumstances, these problems can lead to an information request, listing suspension, product withdrawal or corrective action.
Copying a generic matrix
A template can provide structure, but an identical assessment for a candle, a child's scooter and a USB charger has no practical value. Adapt the hazards, users, relevant standards or tests and controls to the product you actually sell.
Relying on a certificate without checking its scope
Check the laboratory name, exact reference, date, test conditions, applicant and whether the tested sample matches your product. A report may be genuine yet concern another variant, voltage, material or former factory.
Treating the label as a final formality
Warnings, the relevant operator's contact details, product identification and instructions should follow from the assessment. Adding them at the end without reviewing the product often creates contradictions between the marketplace listing, instructions and packaging. Use our guide to GPSR labelling requirements and mandatory information when preparing the required details.
Overlooking connected obligations
Product safety alone does not cover import procedures, VAT, packaging, electrical equipment or batteries. If you ship stock into the EU, review your customs and tax arrangements as well. The Customs Cost Simulator helps structure known import costs where a valid tariff rate is available; however, confirm classification in TARIC or with a professional where the stakes justify it.
Tools and services to take action
- EU Market Entry Compliance Assessment: use it before your first shipment or a new catalogue launch to organise the GPSR, CE, customs, VAT and environmental checks to review.
- GPSR Responsible Person (EU): use this service if you are a non-EU seller or manufacturer and need an EU-established responsible economic operator; activation depends on review, entity assignment, a signed mandate and active payment.
- Marketplace Product Compliance Scanner: use it before publication or after a platform rejection to check the safety, traceability and compliance information to complete in a listing.
- CE Authorised Representative: consider it for a CE product where the applicable legislation permits appointment by written mandate; it does not replace the manufacturer's testing, technical file or EU declaration of conformity.
- EU Seller Kit pricing and plans: consult this page for available SaaS plans and add-on services.
Frequently asked questions
Is a GPSR risk assessment required for every product?
You must be able to show that the product placed on the market is safe and that its risks have been assessed and controlled. The level of detail should be proportionate to the product, its hazards and intended users. Materially different variants should be assessed separately or covered by an explicit technical justification.
Does CE marking replace a GPSR risk assessment?
No. CE marking applies under harmonised legislation for certain product categories and rests on the manufacturer's obligations. The GPSR can remain relevant to risks or aspects not covered by that legislation, as well as general safety, traceability and distance-selling duties.
Can I use test reports supplied by my manufacturer?
Yes, provided you verify that they are relevant to the product actually sold. Check the reference, variant, components, test conditions, date and laboratory. If the product or factory has changed, an older report may no longer be sufficient.
Does a marketplace become my GPSR Responsible Person?
No. Listing a product on a marketplace does not automatically appoint that platform as the responsible economic operator for your product. You must identify the relevant operator and provide required information in the distance-selling offer. Platform requirements may be additional to regulatory duties.
What should I do if a customer reports a safety incident?
Record the report immediately, identify the batch and version involved, examine the product and reassess the risk. Depending on the seriousness and facts, you may need to pause sales, correct information, contact relevant operators or seek professional advice. Do not delete evidence or correspondence connected with the incident.
Are second-hand products covered by the GPSR?
The GPSR generally covers second-hand, repaired and reconditioned products intended for consumers, subject to the Regulation's exclusions. An older or reconditioned product must still be safe in the conditions in which you offer it. Repairs and modifications may create new risks that need assessment.
Official sources
- Regulation (EU) 2023/988 — General Product Safety Regulation (GPSR) — GPSR framework for consumer products, economic operators and distance sales.
- Regulation (EU) 2019/1020 — market surveillance and compliance of products — Market-surveillance powers and cooperation concerning product compliance.
- Commission Notice — The 'Blue Guide' on the implementation of EU product rules (2022) — Principles for implementing harmonised EU product rules.
- Directive 2009/48/EC — safety of toys — Sector-specific requirements for toys.
- Directive 2014/53/EU — radio equipment (RED) — Requirements for radio equipment.
- Your Europe — CE marking — Official overview of CE-marking principles.
This content provides general information and is not legal advice.