Skip to content
spilma

EU market surveillance and Safety Gate (formerly RAPEX)

Market surveillance is what happens to a product after it has been placed on the EU market: inspections, sampling, customs checks, withdrawals, recalls and alerts. Three texts carry it today. Regulation (EU) 2019/1020 gives national authorities their powers over products covered by Union harmonisation legislation. Regulation (EU) 2023/988 (GPSR), applicable since 13 December 2024, sets the general safety rules and is now the legal basis of the Safety Gate Rapid Alert System, formerly RAPEX. Delegated Regulation (EU) 2024/3173, applicable the same day, fixes how notifications are made and how the level of risk is graded. This page sets out what each text actually says, article by article, with the 2025 Safety Gate figures and the claims that the texts contradict.

DateEventSource
2 March 1984Council Decision 84/133/EEC sets up a Community system for the rapid exchange of information on dangers from consumer productsOJ L 70, 13.3.1984
2001Directive 2001/95/EC (GPSD): Article 12 becomes the legal basis of RAPEXGPSD
8 November 2018Implementing Decision (EU) 2019/417 adopts new RAPEX guidelines and states that the RAPEX website "will in future be called Safety Gate"OJ L 73, 15.3.2019
25 June 2019Regulation (EU) 2019/1020 published (OJ L 169); in force 15 July 2019Article 44
1 January 2021Articles 29 to 33 and 36 of 2019/1020 apply (Network, ADCO groups, financing)Article 44
16 July 2021Regulation (EU) 2019/1020 applies, including the Article 4 EU operator requirementArticle 44
23 May 2023GPSR, Regulation (EU) 2023/988 of 10 May 2023, published (OJ L 135, p. 1)GPSR
27 August 2024Delegated Regulation (EU) 2024/3173 adopted under Article 26(10) GPSR, published 13 December 20242024/3173
13 December 2024GPSR and 2024/3173 apply; Directives 2001/95/EC and 87/357/EEC repealedGPSR Articles 50 and 52
5 March 2026Commission presents the 2025 Safety Gate report: 4,671 alerts, a recordIP/26/537
6 October 2026Date the Commission gave for adopting its proposal to revise the market surveillance rules (European Product Act)EP Legislative Train, update of 20 September 2026

The European Product Act is at proposal stage. Until it is adopted by Parliament and Council and becomes applicable, Regulation 2019/1020 remains the text that authorities apply.

Regulation (EU) 2019/1020: what each article gives the authorities

Section titled “Regulation (EU) 2019/1020: what each article gives the authorities”

Annex I of the regulation listed 70 Union harmonisation acts when it was adopted (EMC 2014/30/EU, LVD 2014/35/EU, RED 2014/53/EU, the Machinery Directive 2006/42/EC, the Toy Safety Directive 2009/48/EC, ATEX 2014/34/EU, the medical device Regulations 2017/745 and 2017/746, among others).

ArticleContentWhat it means for a manufacturer
4A product under the acts listed in Article 4(5) may be placed on the market only if an economic operator established in the Union is responsible for verifying the DoC and technical documentation, answering authorities, informing them of risks and cooperating on corrective action. Name and contact details on the product, packaging, parcel or accompanying document (4(4))Eighteen acts are listed, including EMC, LVD, RED, RoHS 2011/65/EU, ATEX, the Machinery Directive, toys, PPE 2016/425 and gas appliances 2016/426. Medical devices are not among them
6An online offer is "made available" in the EU if it targets end users in the UnionA non-EU web shop selling into the EU is in scope
10Each Member State designates its market surveillance authorities and one single liaison officeSeveral authorities usually coexist per country
14Minimum powers: documents (including access to embedded software), supply-chain data, unannounced inspections, purchase of samples under a cover identity and reverse engineering, removal of online content where no other means remove a serious riskEmbedded firmware can be demanded
16Corrective action within a set period: (a) bring into compliance, (b) prevent making available, (c) withdraw or recall, (d) destroy or render inoperable, (e) to (g) warnings, prior conditions, alerting end usersIf the operator does not act, the authority withdraws, recalls or prohibits and informs the Commission (16(5))
18Right to be heard within a period of not less than 10 working days before a measure, except in urgencyAnswer inside that window
19Products presenting a serious risk are withdrawn, recalled or prohibited; the decision rests on a risk assessment of the hazard and its likelihoodHigher achievable safety elsewhere is not grounds for "serious"
20Measures under Article 19 with effects beyond one Member State are notified through RAPEX, now Safety GateHarmonised products enter Safety Gate through this article
25 to 28Customs controls; suspension of release for free circulation (26), release if not confirmed within four working days (27), refusal with the notice "Dangerous product" or "Product not in conformity" (28)A missing Article 4(4) EU operator address is in itself a ground for suspension (26(1)(d))
29 to 32Union Product Compliance Network (EUPCN) and the administrative cooperation groups (ADCO)The EUPCN adopted its rules of procedure in February 2021
34Information and communication system (ICSMS in the recitals)Measures under Article 16(5) are entered there
41Penalties set by each Member State, effective, proportionate and dissuasive, for infringements of the regulation and of the acts in Annex IINo EU-wide fine ceiling

GPSR: which chapters reach a CE-marked product

Section titled “GPSR: which chapters reach a CE-marked product”

GPSR is often described as the regime for "non-harmonised" products only. Article 2(1) is more precise. For a product subject to Union harmonisation legislation, Chapter II (safety requirement) does not apply to the risks that legislation covers, and Chapter III Section 1, Chapters V and VII and Chapters IX to XI do not apply. Everything else does, insofar as no specific provision with the same objective exists.

GPSR chapter (articles)ContentApplies to a harmonised consumer product (RED, LVD, EMC)
II (5 to 8)General safety requirementOnly for risks the harmonisation act does not cover
III Section 1 (9 to 18)Obligations of manufacturers, importers, distributors, responsible person (Article 16)No. The EU operator comes from Article 4 of 2019/1020
III Section 2 (19 to 21)Distance sales information, accident notification through the Safety Business Gateway (Article 20)Yes
IV (22)Online marketplacesYes
V (23, 24)Market surveillanceNo (2019/1020 applies)
VI (25 to 27)Safety Gate Rapid Alert System, Safety Business GatewayYes
VII (28 to 32)Commission role, sweepsNo
VIII (33 to 39)Safety Gate Portal, information to consumers, recall notice (36), remedies (37)Yes
IX to XI (40 to 52)International cooperation, financing, final provisionsNo

Three consequences for an electronics manufacturer. Under Article 20, the manufacturer must notify an accident that caused death or serious adverse effects on health through the Safety Business Gateway, without undue delay, to the authorities of the Member State where it occurred. Under Article 36, a written recall notice must carry the headline "Product safety recall" and the elements (a) to (g), and must not use words such as "voluntary" or "precautionary". Under Article 37, the consumer is offered a choice of at least two remedies among repair, replacement and refund, with no shipping cost. See GPSR for the full regulation.

Safety Gate under GPSR and Delegated Regulation 2024/3173

Section titled “Safety Gate under GPSR and Delegated Regulation 2024/3173”

Regulation 2023/988 Article 25 makes the Commission maintain the Safety Gate Rapid Alert System, with one single national contact point per Member State. Article 26 defines what is notified and when. Delegated Regulation (EU) 2024/3173, Annex I, names the notification types.

Notification type (2024/3173 Annex I)Legal triggerMandatory?
Serious risk notificationCorrective measure on a product presenting a serious risk (GPSR 26(1)(a)) or a measure under Article 20 of 2019/1020Yes
Other risk notificationCorrective measure on a product presenting a less than serious risk (GPSR 26(3))Optional for the Member State
Notification for informationEnvisaged measure, when the risk is urgent (GPSR 26(2))Optional
Follow-up notificationOther Member States report what they found and did (GPSR 26(7))Yes for serious risk notifications
Commission alertThe Commission identifies a likely serious risk not yet notified (GPSR 26(8))Commission initiative
StepDeadlineArticle
Notifying authority submitsWithout delay, at most four working days after the corrective measure is takenGPSR 26(4)
Commission checks and transmits a complete notificationFour working days after receipt; the clock restarts only once requested information or corrections arriveGPSR 26(5); 2024/3173 Annex I point 3.2
Other Member States report follow-upAt most four working days after their measure or actionGPSR 26(7)
Updates, changes, withdrawals of measuresWithout undue delayGPSR 26(6)
Marketplace acts on an authority orderWithout undue delay, at most two working daysGPSR 22(4)
Marketplace processes a product safety noticeAt most three working daysGPSR 22(8)
Customs release if suspension not confirmedFour working days after suspension2019/1020 Article 27
Archive of old notifications on the public portalAfter 10 years from validation, moved to a separate archive section2024/3173 Annex I point 6.3

Follow-up notifications are also due when the product was not found on the national market, or was found but no measure was taken (with an explanation), per 2024/3173 Annex I point 5.1.

Annex II of 2024/3173 continues the risk assessment method of the former RAPEX guidelines (recital 10). The authority writes a harm scenario (at least three steps, up to five), assigns each step a probability, multiplies them, and grades the harm on four severity levels: 1 minor, 2 moderate, 3 severe, 4 life-threatening. The level of risk is read from this grid (Annex II point 3.6.2):

Probability of the harm during the foreseeable lifetimeSeverity 1Severity 2Severity 3Severity 4
> 50 %HighSeriousSeriousSerious
> 1/10MediumSeriousSeriousSerious
> 1/100MediumSeriousSeriousSerious
> 1/1 000LowHighSeriousSerious
> 1/10 000LowMediumHighSerious
> 1/100 000LowLowMediumHigh
> 1/1 000 000LowLowLowMedium
< 1/1 000 000LowLowLowLow

Where several scenarios are assessed, the highest level counts (point 3.7.2). Under point 4.1, a serious risk is presumed, without an individual risk assessment, when the economic operator or marketplace itself said the product poses a serious risk, when the product has already been recalled, withdrawn or removed from online listings voluntarily, when it contains a chemical substance banned (or above the limit) under Union harmonisation legislation, or when well-documented evidence exists. That evidence list includes "electrical products with defective components that can lead to electric shock or fire", alongside small parts in toys for children under 36 months and drawstrings on young children's garments.

For an electronics manufacturer the practical reading is direct: a voluntary recall of a product with an electric shock or fire defect is, by default, a serious risk notification, visible on the public portal.

Indicator20242025
Alerts notified4,137 (record at the time)4,671 (record, 13% above 2024, more than double 2022)
First categoryCosmetics, 36%Cosmetics, 36%
SecondToys, 15%Toys, 16%
ThirdElectrical appliances, 10%Electrical appliances and equipment, 11%
Other leading categoriesMotor vehicles 9%, chemical products 6%
Main riskChemical, 53%; then injuries 14%, choking 9%
Follow-up actions5,794 (35% above 2024)

Sources: Commission Representation in Ireland, 16 April 2025, for 2024; press release IP/26/537 of 5 March 2026 for 2025. The same release reports that the Commission eSurveillance web crawler scanned over 1.6 million websites in 2025 and found more than 20,800 products already listed in Safety Gate, and that more than 1,200 online marketplaces had registered on the Safety Gate Portal by the end of 2025.

Who enforces: national authorities and the EUPCN

Section titled “Who enforces: national authorities and the EUPCN”

Article 10 of 2019/1020 lets each Member State organise its own authorities, as long as it designates them and one single liaison office, and enters them in the Article 34 system. In France, for example, the DGCCRF handles consumer products, the ANFR checks radio equipment under the RED, and the ANSM handles medical devices. The list per country changes and is kept by the Member States in that system; check it rather than a secondary table.

The EU Product Compliance Network (EUPCN), set up by Article 29, brings together the single liaison offices, the chairs of the ADCO groups and the Commission. Its decisions are "legally non-binding recommendations" (Article 30(7)). The ADCO groups, one per harmonisation area (for example RED, EMC, RoHS), coordinate joint market surveillance activities under Article 32. The Commission also runs Coordinated Actions for the Safety of Products (CASP) and online "sweeps" under GPSR Article 32.

Common claimWhat the texts say
"RAPEX was renamed Safety Gate in March 2021" (made by an earlier version of this page)Implementing Decision (EU) 2019/417, dated 8 November 2018, already states that the RAPEX website "will in future be called Safety Gate"
"Regulation 2019/1020 has been in force since 16 July 2021"It entered into force on 15 July 2019 and has applied since 16 July 2021; Articles 29 to 33 and 36 applied from 1 January 2021 (Article 44)
"Risk is classified as serious, less than serious or other" (made by an earlier version of this page)2024/3173 Annex II grades risk as serious, high, medium or low. "Less than serious" appears in GPSR 26(3) only to describe optional notifications
"GPSR covers only products with no harmonisation act"Article 2(1): harmonised products escape Chapter III Section 1 and Chapters V, VII, IX to XI only. Accident notification, marketplace rules, Safety Gate, recall notices and remedies still apply
"Article 4 of 2019/1020 applies to all products in Annex I"Article 4(5) lists eighteen acts; Annex I listed 70. Medical devices, for example, are outside Article 4. For non-harmonised consumer products, GPSR Article 16 sets an equivalent requirement
"Marketplaces must remove dangerous listings within a short delay"The delay is fixed: two working days for an authority order (22(4)), three working days for a notice (22(8))
"A voluntary recall stays out of Safety Gate"Voluntary measures on a serious-risk product are notified (2019/1020 Article 20(2), GPSR 26(1)), and a voluntary recall is itself a ground to presume a serious risk (2024/3173 Annex II point 4.1(c))
"The system has existed under that form since 1984"1984 is the first Community exchange system (Decision 84/133/EEC). The Commission counts Safety Gate alerts "since the system was launched in 2003" (IP/26/537)
"The UK left the GPSR regime entirely"Great Britain did. In Northern Ireland, Regulation (EU) 2023/988 applies directly from 13 December 2024 under the Windsor Framework (OPSS guidance)

After Brexit: Great Britain and Northern Ireland

Section titled “After Brexit: Great Britain and Northern Ireland”
TopicEUGreat BritainNorthern Ireland
General product safetyRegulation (EU) 2023/988General Product Safety Regulations 2005, with the Product Regulation and Metrology Act 2025 (2025 c. 20, Royal Assent 21 July 2025) as enabling framework for new regulationsRegulation (EU) 2023/988, applicable directly from 13 December 2024
Notification systemSafety GateProduct Safety Database run by OPSSSee OPSS guidance for Northern Ireland
Conformity markCEUKCA, see UKCA markingCE, or CE plus UKNI

A manufacturer selling into both markets has to watch both systems.

Market surveillance is downstream of the CE regime. The CE mark attests conformity when the product is placed on the market; surveillance checks that conformity in the field.

PhaseLogicTools
Before placing on the marketConformity assessmentTechnical file, EU declaration of conformity, notified body where required
At placing on the marketCE marking and informationCE mark, EU operator details (Article 4(4)), labelling, instructions
After placing on the marketSurveillance and alertsInspections, ICSMS, Safety Gate, recalls, penalties

The EU declaration of conformity and the technical documentation are the first documents requested, and Article 4(3) makes the EU operator responsible for producing them. See CE marking, EU declaration of conformity and authorised representative and importer obligations. Cybersecurity of products with digital elements is handled upstream by the Cyber Resilience Act.

  1. Name the EU operator (Article 4(2) of 2019/1020: EU manufacturer, importer, authorised representative with a written mandate, or fulfilment service provider) and print its name, postal address and contact details on the product, packaging, parcel or accompanying document. Without it, customs can suspend release (Article 26(1)(d)).
  2. Keep the DoC and technical documentation retrievable, including firmware: Article 14(4)(a) allows authorities to require access to embedded software.
  3. Set up an accident notification route through the Safety Business Gateway (GPSR Article 20), with importers and distributors reporting to the manufacturer.
  4. Prepare a recall notice template that meets GPSR Article 36(2) and a remedy offer that meets Article 37 before any incident.
  5. Run your own assessment with the 2024/3173 grid when a defect is found: if the result is serious, or if you recall voluntarily, expect a Safety Gate notification.
  6. Monitor the Safety Gate Portal for your product category and comparable products.
  7. Answer within the hearing period of Article 18(3) (not less than 10 working days, except in urgency).

Sources & references

  1. Safety Gate, the EU public portal for product alerts, European Commission ec.europa.eu/safety-gate-alerts/screen/webReport
  2. Regulation (EU) 2019/1020 on market surveillance and compliance of products, European Union, EUR-Lex eur-lex.europa.eu/eli/reg/2019/1020/oj
  3. Regulation (EU) 2023/988 on general product safety (GPSR), European Union, EUR-Lex eur-lex.europa.eu/eli/reg/2023/988/oj
  4. Commission Delegated Regulation (EU) 2024/3173, Safety Gate operation and risk assessment criteria, European Union, EUR-Lex eur-lex.europa.eu/eli/reg_del/2024/3173/oj
  5. Commission Implementing Decision (EU) 2019/417, RAPEX guidelines (former regime), European Union, EUR-Lex eur-lex.europa.eu/eli/dec/2019/417/oj
  6. Council Decision 84/133/EEC, Community system for the rapid exchange of information, European Union, EUR-Lex eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:31984D0133
  7. Commission 2025 Safety Gate Report, press release IP/26/537 (5 March 2026), European Commission ec.europa.eu/commission/presscorner/detail/en/ip_26_537
  8. Safety Gate 2024 results (Commission Representation in Ireland, 16 April 2025), European Commission ireland.representation.ec.europa.eu/news-and-events/news/list-dangerous-products-notified-commissions-safety-gate-2024-sets-path-increased-consumer-2025-04-16_en
  9. EU Product Compliance Network (EUPCN), European Commission, DG GROW single-market-economy.ec.europa.eu/single-market/goods/building-blocks/market-surveillance/organisation/eu-product-compliance-network_en
  10. Review of rules on market surveillance and compliance of products (Legislative Train), European Parliament www.europarl.europa.eu/legislative-train/theme-a-new-plan-for-europe-s-sustainable-prosperity-and-competitiveness/file-market-surveillance-and-compliance-of-products-review
  11. DGCCRF, French market surveillance authority for consumer products, Ministry of the Economy, France www.economie.gouv.fr/dgccrf
  12. EU Regulation on General Product Safety (2023/988), guidance for Northern Ireland, OPSS, UK Government www.gov.uk/government/publications/eu-regulation-2023988-on-general-product-safety/eu-regulation-on-general-product-safety-2023988
  13. Product Regulation and Metrology Act 2025 (2025 c. 20), legislation.gov.uk www.legislation.gov.uk/ukpga/2025/20/contents
  14. Product Safety Database report 2023 to 2024, OPSS, UK Government www.gov.uk/government/statistics/product-safety-database-annual-reports/product-safety-database-report-2023-to-2024
  15. OPSS, Office for Product Safety and Standards (United Kingdom), Department for Business and Trade, UK Government www.gov.uk/government/organisations/office-for-product-safety-and-standards

Frequently asked questions

What is Safety Gate and how does it relate to RAPEX?
Safety Gate is the EU rapid alert system for dangerous non-food products. The name dates from Commission Implementing Decision (EU) 2019/417 of 8 November 2018, which stated that the RAPEX website would in future be called Safety Gate, not from 2021. Until 12 December 2024 the system rested on Article 12 of Directive 2001/95/EC (GPSD). Since 13 December 2024 its legal basis is Articles 25 and 26 of Regulation (EU) 2023/988 (GPSR), which call it the Safety Gate Rapid Alert System, and its operating rules and risk criteria are in Delegated Regulation (EU) 2024/3173. The Commission dates the alert statistics from 2003; the first Community information-exchange system was set up by Council Decision 84/133/EEC of 2 March 1984.
What does Regulation (EU) 2019/1020 do?
Regulation (EU) 2019/1020 on market surveillance and compliance of products entered into force on 15 July 2019 and has applied since 16 July 2021 (Articles 29 to 33 and 36 since 1 January 2021). Its Annex I listed 70 Union harmonisation acts when adopted. It sets the minimum powers of national authorities (Article 14), the corrective measures (Article 16), customs controls (Articles 25 to 28), the Union Product Compliance Network (Article 29) and the information and communication system known as ICSMS (Article 34). Its Article 4 requires an economic operator established in the Union for products under eighteen acts listed in Article 4(5), including RED, EMC, LVD, RoHS and the Machinery Directive.
What is the difference between GPSR, GPSD and 2019/1020?
Regulation (EU) 2023/988 (GPSR) applies from 13 December 2024 and repealed Directive 2001/95/EC (GPSD) with effect from that date. Regulation 2019/1020 governs surveillance of products under Union harmonisation legislation. GPSR is not limited to non-harmonised products: under its Article 2(1), a harmonised product escapes only Chapter III Section 1 and Chapters V, VII and IX to XI. The accident notification duty (Article 20), the online marketplace rules (Article 22), Safety Gate (Articles 25 and 26) and the recall notice and remedies (Articles 35 to 37) therefore also reach a CE-marked consumer radio or electrical product.
How is the risk level of a product decided?
Since 13 December 2024, by Annex II of Delegated Regulation (EU) 2024/3173. The authority builds a harm scenario of up to five steps, grades severity on four levels and probability on eight bands, and reads the level off a grid: serious, high, medium or low. The old "serious, less than serious, other" scale is not the legal one. Some cases are presumed serious without an individual assessment, including a product already recalled or withdrawn voluntarily and electrical products with defective components that can lead to electric shock or fire.
What are the Safety Gate deadlines?
Article 26 of GPSR sets three deadlines of four working days: the notifying authority submits within four working days after the corrective measure is taken (26(4)); the Commission checks a complete notification and transmits it within four working days (26(5)); the other Member States report their follow-up measures within four working days after taking them (26(7)). Online marketplaces must act on an authority order within two working days (Article 22(4)) and process product safety notices within three working days (Article 22(8)).
Which product categories are most notified?
According to the Commission press release of 5 March 2026 on the 2025 report, 4,671 alerts were notified in 2025, a record and 13% more than in 2024. Cosmetics led with 36%, then toys (16%) and electrical appliances and equipment (11%). Chemical risks caused 53% of alerts, injuries 14% and choking 9%. Authorities notified 5,794 follow-up actions. In 2024 the order was cosmetics (36%), toys (15%), electrical appliances (10%), motor vehicles (9%) and chemical products (6%).
Is the United Kingdom still part of Safety Gate after Brexit?
Great Britain runs its own system: OPSS (Office for Product Safety and Standards) operates the Product Safety Database, and general product safety in Great Britain still rests on the General Product Safety Regulations 2005, now alongside the Product Regulation and Metrology Act 2025 (Royal Assent 21 July 2025). Northern Ireland is different: under the Windsor Framework, OPSS guidance of 3 December 2024 states that Regulation (EU) 2023/988 applies directly in respect of Northern Ireland from 13 December 2024.
What are the obligations of online marketplaces?
Article 22 of GPSR requires providers of online marketplaces to register on the Safety Gate Portal with a single point of contact for authorities, a second contact point for consumers, internal product safety processes, action on authority orders within two working days and on notices within three working days, display of manufacturer and responsible-person details on each listing, and direct notification of buyers in a recall. The Commission reported more than 1,200 registered marketplaces by the end of 2025.