GPSR Responsible Person | EU Product Safety

The General Product Safety Regulation means no consumer product can be placed on the EU market unless an economic operator established in the Union is responsible for it. Where you have no EU establishment, Engage Compliance holds that role for you, and holds the file behind it for as long as the law requires.

The short answer: under Article 16 of the General Product Safety Regulation, Regulation (EU) 2023/988, operating through Article 4 of Regulation (EU) 2019/1020, a consumer product cannot be placed on the EU market unless there is an economic operator established in the Union who is responsible for it. If you are a manufacturer outside the Union selling to EU consumers with no EU importer, you appoint an authorised representative under written mandate to be that operator. Engage Compliance is established in the Union and takes that role.

The appointment is not the hard part. The obligation that sits behind it is document custody that runs for ten years after a product is placed on the market, and that is the part worth getting right, because a name on a label is only as good as the file still being there when an authority asks for it.

Key takeaways

No product covered by the GPSR may be placed on the EU market unless an economic operator established in the Union is responsible for it. This is the core of Article 16, read with Article 4 of Regulation (EU) 2019/1020.
Article 4(2) lists who may hold the role: an EU-established manufacturer, an importer where the manufacturer is not in the Union, an authorised representative under written mandate, or a fulfilment service provider where none of the others exists.
The four tasks under Article 4(3) are to keep the declaration of conformity and technical documentation available, to provide conformity information to authorities on request, to inform authorities of a risk, and to cooperate on corrective action.
Under Article 4(4) the responsible operator’s contact details must appear on the product, its packaging, the parcel, or an accompanying document.
There is no qualification, registration, professional body membership, or insurance requirement. The only condition is establishment in the Union.
The technical documentation must be kept available for ten years after the product is placed on the market, so continuity matters more than this year’s price when you choose an operator.
The EU GPSR does not apply in Great Britain, but it does apply in Northern Ireland, and one EU appointment can cover both the EU and Northern Ireland.

What a GPSR responsible person is

The General Product Safety Regulation, Regulation (EU) 2023/988, has applied since 13 December 2024. Its Article 16 carries a simple rule with a wide reach: a product covered by the Regulation may be placed on the EU market only if there is an economic operator established in the Union who is responsible for the tasks in Article 4 of Regulation (EU) 2019/1020. Where there is no such operator, the product may not be placed on the market at all.

So the responsible person is that operator. In practice it is a named EU point of contact for market surveillance authorities, and, behind the contact point, the keeper of the product’s conformity file. The role is defined by the tasks it carries, not by a title, and those tasks come from Article 4 of the Market Surveillance Regulation.

Who can hold the role

Article 4(2) sets an order of preference. The responsible operator is:

A manufacturer established in the Union. If you already have an EU establishment behind the product, you are the operator and no appointment is needed.
An importer, where the manufacturer is not established in the Union. If an EU importer places the product on the market, the importer is the operator.
An authorised representative, holding a written mandate from the manufacturer. Where a non-EU manufacturer sells into the EU with no EU importer, it appoints an authorised representative established in the Union to be the operator. This is the role Engage takes.
A fulfilment service provider established in the Union, where none of the above exists. The backstop, for the case where a product reaches EU consumers with none of the first three in place.

Most companies that come to us are in the third line: a manufacturer or online seller outside the Union, shipping direct to EU consumers, with no EU importer and no EU entity of their own. The written mandate is what makes the appointment real, and an informal arrangement does not satisfy it.

The four tasks

Article 4(3) gives the responsible person four duties, and they are the whole of the role:

Keep the paperwork available. Verify that the EU declaration of conformity, or the declaration of performance where that applies, and the technical documentation have been drawn up, and keep them at the disposal of market surveillance authorities for the required period.
Answer authorities on request. Provide those authorities, on a reasoned request, with all the information and documentation needed to demonstrate the product’s conformity, in a language they can readily understand.
Flag a risk. Where the responsible person has reason to believe a product presents a risk, inform the market surveillance authorities.
Cooperate on corrective action. Cooperate with the authorities on any action taken to eliminate or, where that is not possible, mitigate the risks presented by the product.

The first of these is the one that shapes how the role should be delivered. Keeping documentation available is not a mailbox function; it is custody, and it has a clock on it.

The contact details on the product

Article 4(4) requires the name and contact details of the responsible operator to be indicated on the product, or on its packaging, the parcel, or an accompanying document. This is what lets a consumer or an authority reach the operator, and it is why the appointment has to be to a real, reachable entity rather than a nameplate. We give you the exact wording and the contact point to put on the product and its documentation.

No qualification, no registration, no insurance

It is worth being plain about what the role does not require, because a lot of noise around it implies otherwise. There is no qualification requirement, no registration, no professional body membership, and no insurance requirement in the Regulation. The single condition is establishment in the Union.

That simplicity cuts a particular way. When the law asks for no credential, the thing that separates a good responsible person from a bad one is not a certificate. It is whether the operator will still be established, still reachable, and still holding your file, years after the product shipped.

The ten-year obligation against the one-year contract

The technical documentation must be kept available for ten years after the product is placed on the market. That is the fact the market prices around rather than through. The role is widely sold on one-year contracts, renewed annually, against a duty that runs for a decade after a single product goes on sale.

The mismatch is the whole argument for how you choose a responsible person. A gap in the chain, a provider that lapses, a mandate that is not renewed, and the product is left on the EU market with no operator responsible for it, which is exactly the state Article 16 forbids. So the question worth asking a provider is not what it charges this year. It is whether it will be there, with the file current, when an authority writes in year seven. We take the role on that basis: continuity first, and the conformity file held and kept current for the full period rather than for the length of a contract.

Northern Ireland is covered, Great Britain is separate

The EU GPSR does not apply in Great Britain. Great Britain runs on the General Product Safety Regulations 2005, a separate regime, and Engage does not currently offer a Great Britain product-side service.

Northern Ireland is different, and it is worth stating positively because most providers leave it unsaid. The EU GPSR applies in Northern Ireland by direct effect under the Windsor Framework. The UK Office for Product Safety and Standards confirms that a single responsible economic operator can serve both the EU and Northern Ireland, regardless of which of the two it is established in. So the EU appointment we provide covers Northern Ireland as well, and you do not need a second operator for it.

What Engage delivers

The appointment, as your authorised representative under a written mandate that meets the Article 4(2) requirement.
A named EU contact point for market surveillance authorities, in the form you put on the product, its packaging, or its documentation under Article 4(4).
Custody of the conformity file. We hold the declaration of conformity and technical documentation and keep them available for the ten-year period, and we tell you what is missing rather than assuming it exists.
Handling of authority contact, with requests answered and the substance passed to you, and corrective action coordinated where it is needed.
A scoping check first. If you already have an EU establishment or an EU importer, you have an operator and do not need us, and we will say so.

What it costs

Pricing is scoped to the mandate, because it depends on your product range and where your documentation sits today. Tell us what you place on the EU market and we will scope it. You can reach us through the contact page.

What we do not offer, and why

We would rather name the edges of this service than let you assume it stretches further than it does.

Medical device authorised representation. We do not act as an authorised representative under the Medical Device Regulation, Regulation (EU) 2017/745, or the In Vitro Diagnostic Regulation, Regulation (EU) 2017/746. The reason is structural: MDR Article 15 requires a person responsible for regulatory compliance with defined qualifications, and MDR Article 11(5) makes the representative jointly and severally liable with the manufacturer for defective devices. That is a different role with a different risk profile, and we route those enquiries to a partner.
CBAM representation. We do not act under the Carbon Border Adjustment Mechanism, because that requires authorisation as an indirect customs representative, which is a separate customs status.
A Great Britain product-side service. As above, Great Britain runs on its own 2005 regime and we do not cover it. Northern Ireland is covered by the EU mandate.

Sources and references

Representative mandates

These mandates stack rather than replace each other. One company selling into Europe can be caught by several at once, each is a separate appointment with its own published contact point, and an EU representative does not cover the UK. Engage Compliance holds them together so you have one point of contact across the set.

Established in the Union
Ten-year technical documentation custody
Named EU contact for market surveillance

Talk to us

FAQ

Frequently asked questions

What is a GPSR responsible person?

It is the economic operator established in the European Union who is responsible for a consumer product placed on the EU market, under Article 16 of the General Product Safety Regulation, Regulation (EU) 2023/988, which operates through Article 4 of the Market Surveillance Regulation, Regulation (EU) 2019/1020. No product covered by the GPSR may be placed on the EU market unless such an operator exists. The role is a named EU contact for market surveillance authorities, backed by custody of the product's conformity file.

Who can act as the responsible person?

Article 4(2) sets out the order. It can be a manufacturer established in the Union; an importer, where the manufacturer is not established in the Union; an authorised representative holding a written mandate from the manufacturer; or a fulfilment service provider established in the Union, where none of the others exists. A non-EU manufacturer selling direct to EU consumers with no EU importer typically appoints an authorised representative, which is the role Engage takes.

Does the responsible person need a licence, registration, or insurance?

No. There is no qualification requirement, no registration, no professional body membership, and no insurance requirement in the Regulation. The only condition is establishment in the Union. That keeps the appointment simple, and it means the thing that actually matters is not a credential but whether the operator will still be there, with the file, in year eight.

What are the responsible person's tasks?

Article 4(3) sets four. Verify that the EU declaration of conformity, or the declaration of performance, and the technical documentation have been drawn up, and keep them available to market surveillance authorities for the required period. Provide those authorities, on request, with the information and documentation to demonstrate conformity, in a language they can understand. Inform the authorities where there is reason to believe the product presents a risk. Cooperate on any action to eliminate or mitigate a risk.

How long must the technical documentation be kept?

Ten years after the product is placed on the market. That is the obligation most providers do not price honestly: the market sells this role on annual contracts, and the document-custody duty runs for a decade. The point of appointing a responsible person is continuity, so the file is still there and still current when an authority asks in year seven.

Does the GPSR apply in Great Britain or Northern Ireland?

The EU GPSR does not apply in Great Britain, which runs on the General Product Safety Regulations 2005 instead. It does apply in Northern Ireland, by direct effect under the Windsor Framework. The UK Office for Product Safety and Standards confirms that a single responsible economic operator can serve both the EU and Northern Ireland, regardless of which of the two it is established in, so one EU appointment can cover both.