Product recall and EU Safety Gate response procedure

Author Hugues Orgitello Last updated 27 May 2026 ~14 min read

Guide, recall and Safety Gate response

A product that passed certification at launch can still be found unsafe in the field. A battery cell that ages worse than the qualification predicted, a firmware regression deployed over the air, a counterfeit component slipped into a sub-assembly, an interaction with an accessory that nobody tested, all are documented causes of post-market non-conformity. When that happens the operator has to move fast, on a clock measured in working days, not weeks. This guide covers the EU framework under Regulation (EU) 2023/988 (GPSR) and the Safety Gate alert system, the US framework under Section 15(b) of the Consumer Product Safety Act, the UK and other regions, the recall classification scheme, the step-by-step response procedure from hazard intake to post-recall closure, and the operational pitfalls that turn a manageable case into a regulatory crisis.

Why post-market response matters more than ever

Three regulatory shifts have raised the stakes in the past five years.

First, Regulation (EU) 2023/988, the General Product Safety Regulation (GPSR), applicable since 13 December 2024, replaced the 2001 GPSD. It introduces an explicit obligation to notify accidents through the Safety Business Gateway and tightens the timeline for serious risks to two working days. It also extends scope to online marketplaces (fulfilment platforms now bear obligations) and explicitly covers software, cybersecurity and connected features as safety factors.

Second, Regulation (EU) 2019/1020 on market surveillance harmonised the powers of national authorities, gave them cross-border cooperation tools (administrative cooperation, joint inspections, mutual assistance) and created the Union Product Compliance Network (EUPCN). It means an enforcement decision in one member state propagates faster to others.

Third, the Safety Gate portal is public and indexed by search engines. A recall alert remains visible long after the case is closed. End users, retailers and competitors monitor it. Reputational impact is no longer separable from the regulatory one.

The combination means a post-market incident now ends up on a public dashboard within days, with traceable timestamps. Operators that have no recall plan ready, no traceability granularity below the batch level, no escalation tree, find themselves missing statutory windows on the first incident.

EU framework: GPSR, Safety Gate, market surveillance

GPSR (Regulation (EU) 2023/988)

GPSR is the successor to the General Product Safety Directive 2001/95/EC (GPSD). The key changes that matter for recall response:

• Mandatory accident reporting through the Safety Business Gateway. The operator that knows of a serious incident has two working days to notify (Article 20).
• Corrective action duty: where a product presents a risk, the operator must immediately take the corrective action proportionate to the risk: withdrawal, recall, repair, replacement or refund (Article 16).
• Information to consumers must be effective, in clear and easily understandable language, in each language of the member states concerned (Article 36).
• Right of remedy: end users affected by a recall have a statutory right to choose between repair, replacement or refund of the appropriate value (Article 37).
• Online marketplace obligations: platforms must designate a single contact point, take down listings on MSA request, and provide traceability data (Article 22).
• Joint liability under Article 11: manufacturer, importer and distributor each carry obligations within their role.

For the full framework see Market surveillance and Safety Gate.

Safety Gate (formerly RAPEX)

Aspect	Detail
Operator	European Commission, DG JUST
Participants	27 EU member states, EFTA states (NO, IS, LI), formerly UK until Brexit
Frequency	Weekly publication of alerts submitted by national authorities
Coverage	Non-food consumer products posing a serious risk
Public access	Searchable portal at ec.europa.eu/safety-gate
Categories	Toys, electrical appliances, cosmetics, vehicles, childcare, lighting, others
Status fields	Open, closed, modified

Safety Gate replaced the RAPEX name in March 2021 to reflect a broader scope (the Safety Gate now also hosts the Safety Business Gateway for operators and the Consumer portal). The legal basis remains essentially Articles 12, 22 of the new GPSR.

Member State market surveillance authorities (MSAs)

Each member state designates one or more MSAs by sector. Some examples relevant to electronics manufacturers:

Member State	Authority	Sector
France	DGCCRF	Consumer electronics, general product safety
France	ANSM	Medical devices, IVDs
France	ANFR	Radio frequency conformity
Germany	BAuA	Machinery, industrial product safety
Germany	BNetzA	Radio and telecom equipment
Italy	Ministero Sviluppo Economico (MISE)	Consumer products
Spain	AECOSAN	Consumer product safety
Netherlands	NVWA	Consumer safety
Sweden	Konsumentverket	Consumer safety

Filing on the Safety Business Gateway routes the notification to the relevant MSA based on declared product category and intended market. The MSA is then the operator's primary interlocutor for the case.

Regulation (EU) 2019/1020 on market surveillance

The Market Surveillance Regulation gives MSAs harmonised investigation powers: document requests, sampling, inspection of premises, mystery shopping, takedown orders to online platforms, penalties. It also creates obligations on the operator side: cooperate in good faith, designate an EU-based responsible person where the manufacturer is outside the EU, maintain traceability records for ten years.

For the operator preparing a recall, three implications matter:

1. The MSA can request the technical file and corrective action plan at any time, with deadlines that may be as short as ten working days.
2. Cross-border cooperation means an MSA in one member state can act on information forwarded from another, without the operator being able to argue jurisdiction.
3. Penalties are set at national level but must be effective, proportionate and dissuasive: typical ranges in DE, FR, IT reach EUR 100,000 per violation, with criminal exposure for gross negligence.

US framework: CPSC Section 15(b)

In the United States, the Consumer Product Safety Commission (CPSC) administers recalls under Section 15 of the Consumer Product Safety Act (15 USC 2064).

The Section 15(b) reporting obligation

Section 15(b) of the CPSA requires every manufacturer, importer, distributor and retailer of a consumer product distributed in commerce to immediately inform the CPSC when it obtains information that reasonably supports the conclusion that:

• the product fails to comply with an applicable consumer product safety rule or another similar federal regulation,
• the product fails to comply with a voluntary standard relied upon by the Commission under Section 9 of the CPSA,
• the product contains a defect that could create a substantial product hazard,
• the product creates an unreasonable risk of serious injury or death.

In practice CPSC interprets "immediately" as within 24 hours of having reasonable support. The notification is filed via SaferProducts.gov or directly to the Office of Compliance. Late filing is by itself a violation and has generated multi-million-dollar civil penalties in published settlements.

Recall pathways

Pathway	Description
Fast-Track Recall	Voluntary, expedited. Operator agrees to recall within 20 working days of the report. CPSC does not pursue a substantial-product-hazard determination.
Section 15(b) Corrective Action Plan	Negotiated corrective action plan, takes longer (months) but allows the operator to contest the hazard determination.
Section 19 enforcement	Adversarial. CPSC can mandate recall, seek civil penalties, refer for criminal prosecution under Section 21.

US recall classification

The US recall scheme commonly uses three classes:

Class	Hazard level	Action
Class I	Serious injury or death likely	Immediate recall, public notice, return for refund or replacement
Class II	Injury possible	Recall, public notice, often replacement or repair
Class III	Limited remedy, low hazard	Information letter, voluntary return, sometimes no consumer-level action

Other US sector regulators run parallel regimes:

• FDA for medical devices: 21 CFR Part 806 correction and removal reporting, MAUDE (Manufacturer and User Facility Device Experience) database for adverse events, Class I/II/III recalls administered by FDA.
• NHTSA for motor vehicles and equipment: 49 CFR Part 573 defect and noncompliance reports, recall pathway under 49 USC 30118.

For medical devices the parallel safety framework is covered by risk management (ISO 14971).

UK and other regions

United Kingdom

Since Brexit, the UK runs its own product safety regime under the Office for Product Safety and Standards (OPSS), separated from EU Safety Gate. The UK Product Safety Database mirrors the function of Safety Gate domestically. Operators placing products on the GB market notify OPSS directly. Northern Ireland continues to follow EU rules under the Windsor Framework, which means a single recall may need to be filed in both Safety Gate (NI and EU markets) and the OPSS database (GB market).

Other regions

Region	Authority	Reporting system
Canada	Health Canada	Section 14 Canada Consumer Product Safety Act, mandatory reporting within 2 days
Australia	ACCC	Product Safety Australia, mandatory reporting under Australian Consumer Law
Japan	METI / PMDA	Consumer Product Safety Act, PMDA for medical devices
South Korea	KCA / MFDS	Consumer safety reporting, MFDS for medical
China	SAMR	Defective product recall regulation 2020
Brazil	Inmetro / Anvisa	Surveillance and recall procedures, sector-dependent

For most operators that already serve the EU and US, the regional regimes follow the same logic: prompt notification, defined corrective action, public communication, post-recall report. The detail diverges in timing windows, language requirements and form templates.

Step-by-step response procedure

The seven-step sequence below is the standard frame used by mature operators. Each step has a deliverable, an owner, a deadline.

1. Hazard intake

Sources: customer complaint via support hotline, distributor incident report, field service ticket, internal QC alert, MSA inquiry letter, social-media monitoring, return rate anomaly. Any of these should converge into a single intake form, owned by a defined function (quality, regulatory, customer service), with mandatory fields: product model, batch or serial, date of incident, description, witnesses, injury severity, photos if any.

2. Investigation

Engineering root-cause analysis, traceability lookup (which lots are affected, which serials shipped to which distributors), scope determination (units potentially in scope, units already in field, residual stock at distributors). The investigation deliverable is a technical memo with: confirmed failure mode, root cause if known, units in scope, units at risk, evidence base. For complex multi-factor failures the deliverable may stay open and be updated as more data comes in.

Traceability granularity is decisive. Operators that record only finished-product serial-to-customer mapping but not the component-batch-to-finished-product link cannot identify the affected units when the root cause is a component batch. Build the traceability link before the recall, not during.

3. Risk assessment

Quantified estimate of probability and severity. For consumer products in the EU, the RAPEX risk assessment guidelines (Commission Implementing Decision (EU) 2019/417) are the reference. They yield a risk level among serious, high, medium or low. For medical devices, ISO 14971 risk management applies, with sector-specific harm taxonomies and the requirement to document the analysis in the product risk file. For machinery, ISO 12100 and EN ISO 13849 sit alongside.

The risk-level decision drives the timing window: a serious risk triggers the 2-working-day GPSR notification, a lower risk allows more time but still requires notification at the next routine reporting cycle.

4. Decision

The corrective action options form a ladder, from least intrusive to most intrusive:

• Information notice: end users informed of a precaution, no return needed.
• Software / firmware update: OTA fix where the product is connected.
• Repair in place by field service.
• Withdrawal: pulled from distribution but not retrieved from end users.
• Recall: end users called back, repair or replacement.
• Refund recall: full refund offered.
• Stop-sale and destruction: irrecoverable hazard.

The chosen level must be proportionate. A serious risk normally mandates recall and not withdrawal alone. The MSA will validate the choice and may upgrade it if it finds the operator under-reactive.

5. Notification

Filing in the Safety Business Gateway (EU, GPSR Article 20, 2-working-day window for serious risk), in SaferProducts.gov (US, CPSC Section 15(b), 24-hour clock), in the OPSS database (UK), in equivalent national systems where applicable. The notification packet typically includes: product identification (model, batch range, photos, label image), hazard description, risk assessment, corrective action plan, communication plan, units in scope, units already retrieved if any. Parallel notification to distributors and importers in the chain is sent the same day, with mandatory cooperation clauses if those are in the distribution contract.

6. Execution

Operational rollout. Communication: dedicated recall webpage on the operator's site, customer letter or email, retailer letter, press release if scope warrants. Logistics: prepaid return labels or pickup, replacement units staged in regional warehouses, repair workshops contracted. Hotline: dedicated phone line and email, staffed during the recall period. Tracking: a recall dashboard that updates daily on units retrieved, units repaired, residual at risk.

Retrieval rate is the operational KPI. Consumer electronics recalls in the Safety Gate archive historically retrieve a minority of units shipped (the published averages vary by product category and are not assumed here). The number that matters is whether the curve is climbing toward an acceptable plateau and whether the residual risk is bounded. Slow retrieval typically triggers a second communication round.

7. Closure

Final report to the MSA: units in scope, units retrieved, units repaired, units refunded, residual stock, retailer compliance, complaints received, root cause, design and process change implemented, supplier control updated, QMS update. Update the product risk file (ISO 14971 in medical, equivalent register otherwise). Lessons-learned review with engineering and procurement, with action items tracked.

The MSA closes the case in writing. The Safety Gate alert remains in the public archive with the status updated. The case file is retained on the operator side for at least ten years under Regulation (EU) 2019/1020 traceability rules.

RAPEX risk assessment guidelines

The 2018 Commission Implementing Decision (EU) 2019/417 publishes the methodological guide for assessing consumer product risk for Safety Gate purposes. It is the de facto reference used by EU MSAs.

Method

The procedure assesses, for each plausible injury scenario:

1. Probability of injury = exposure frequency x failure probability x harm probability given failure. Each factor is on a defined scale.
2. Severity of harm on a 4-level scale: I (reversible minor), II (reversible serious), III (irreversible major), IV (death).
3. Risk level read from a risk matrix combining probability and severity, with outputs among: serious, high, medium, low, or no risk.

Implication for the notification timing

Risk level	Safety Gate notification	Operator timing
Serious	Yes, urgent	2 working days under GPSR Article 20
High	Yes	At next reporting cycle, max delay defined by MSA
Medium	Possible (MSA discretion)	At reporting cycle
Low	Generally no	Internal corrective action and routine reporting
No risk	No	No mandatory notification

The method is documented and intended to be reproducible. Operators that run the analysis themselves before notifying come out better in MSA dialogue than those that leave the MSA to do its own assessment in the absence of operator input.

Internal preparation

A recall procedure that gets written for the first time during the recall fails. The expected level of preparation, before any incident, is the following.

Preparation item	Detail
Lot and serial traceability	Component-batch-to-finished-product link, finished-product-to-customer link, retained at least 10 years
Recall communication templates	Customer letter, retailer letter, press release, recall webpage, in each language of distribution markets
Hotline plan	Dedicated phone line, dedicated email, capacity to scale within 24 hours
Return logistics	Pre-arranged carrier contracts for prepaid returns, regional warehouse for replacement stock, repair workshop capacity
Spare-parts inventory	Sufficient stock or rapid manufacturing capacity for replacement units
Escalation tree	Named owners, contact details, backup contacts, internal SLA (e.g. 2-hour escalation from hotline to quality, 4-hour from quality to regulatory, decision by regulatory within 24 hours)
MSA contacts	Up-to-date contact list for the MSAs of each market, including the lead MSA designated under the technical file
Tabletop drills	Once a year, run a simulated incident through the procedure and measure timing
Authorised representative agreement	For non-EU manufacturers, written agreement under GPSR Article 17 covering recall cooperation

For the producer-importer-distributor chain in the EU, see authorised representative and importer obligations.

Legal exposure

GPSR Article 11 sets out the joint and several nature of liability. The chain looks like this:

Actor	Primary obligation	Recall role
Manufacturer	Design and produce a safe product, maintain technical file, ensure traceability	Lead recall, root-cause analysis, corrective action
Authorised representative	Cover EU obligations on behalf of non-EU manufacturer	Liaise with MSAs, hold documentation
Importer	Verify manufacturer compliance, retain records, place on market	Joint liability with manufacturer, may have to recall on its own if manufacturer is unreachable
Distributor	Verify CE marking and DoC visibly, cooperate	Pass information up and down, retrieve products from retail
Fulfilment service provider / online platform	Designate contact point, take down on MSA order	Provide traceability data, remove listings

Penalties at the national level vary widely. Indicative ranges:

• France (DGCCRF): administrative penalties up to EUR 1.5 million for legal persons under Code de la consommation L454-2.
• Germany (BAuA, BNetzA): administrative penalties under Produktsicherheitsgesetz.
• Italy: civil and criminal exposure under the Consumer Code and penal provisions.
• United States (CPSC): civil penalties published yearly, currently capped at USD 16.025 million per related series of violations (2024 limit); criminal exposure under Section 21.

Late notification has triggered, in published US settlements, civil penalties in the multi-million-dollar range even when the substantive recall was carried out properly. The takeaway is operational: the cost of being late dominates the cost of being early.

Pitfalls

Pitfall	Consequence
Notifying past the 2-working-day GPSR window	Notification delay is itself a violation, MSA tone hardens, penalty exposure rises
Recall scope too narrow, units before the corrective change not retrieved	Repeat incidents in the field, second recall round, reputational damage
Public recall message written in legal jargon	Low retrieval rate, MSA pressure for a second communication round
No spare-parts inventory for the replacement programme	Recall stalls, end users left with unusable products, MSA escalation
Lot-traceability gap, component-batch link missing	Cannot identify affected units, forced to recall a broader scope than needed
Retailer compliance lag	Units still on shelves weeks after the recall, MSA observes the gap during inspections
No post-recall verification	Operator cannot demonstrate effectiveness, case stays open, MSA scrutiny continues
Sending parallel communications that contradict each other	End users and retailers confused, retrieval rate drops
Treating a serious-risk case as a withdrawal instead of a recall	MSA upgrades the action, public visibility increases, penalty risk rises
Ignoring the online marketplace channel	Platform listings remain live, MSA takedown order arrives, operator looks unprepared
Recall plan written for the first time during the recall	Statutory deadlines missed across the board
No tabletop drill in the past two years	Procedure exists on paper, fails on execution

Going further

• Market surveillance and Safety Gate: the EU framework that this guide builds on
• Risk management (ISO 14971, IEC 31010, FMEA, FTA): risk analysis methods, particularly for medical devices
• Component substitution rules: a common root cause of post-market non-compliance is a sub-tier component substitution
• Authorised representative and importer obligations: chain of responsibility and EU placement obligations
• Notified Body surveillance audits: an NB audit can be triggered by a recall, and conversely a surveillance audit can uncover the conditions of a recall
• Glossary: definitions of GPSR, Safety Gate, RAPEX, MSA, CPSC, OPSS

See also

• EU Declaration of Conformity (DoC): template + content
• Certification test plan: template and checklist
• Choosing a Notified Body: NANDO and scope verification
• NB surveillance audits: cadence and conduct

Working on recall procedure preparation, Safety Gate notification dossier and CPSC Section 15(b) response for an electronic product on the EU and US markets for a real product? AESTECHNO can audit your design and certification plan. Get in touch →

Need help?

A 30-minute audit with AESTECHNO engineers.

AESTECHNO is the electronics design house that edits spilma. We help product teams scope their certification effort and avoid the common mistakes.

Book a free audit

Sources & references

1. Regulation (EU) 2023/988 on general product safety (GPSR) , EUR-Lex eur-lex.europa.eu/eli/reg/2023/988/oj
2. Regulation (EU) 2019/1020 on market surveillance and compliance of products , EUR-Lex eur-lex.europa.eu/eli/reg/2019/1020/oj
3. EU Safety Gate portal (rapid alert system for dangerous products) , European Commission ec.europa.eu/safety-gate/
4. Commission Implementing Decision (EU) 2019/417 RAPEX risk assessment guidelines , EUR-Lex eur-lex.europa.eu/eli/dec_impl/2019/417/oj
5. Consumer Product Safety Act, Section 15(b) (15 USC 2064) , US Consumer Product Safety Commission www.cpsc.gov/Business--Manufacturing/Recall-Guidance/Section-15-of-the-CPSA
6. CPSC SaferProducts.gov (incident reporting and recalls) , US Consumer Product Safety Commission www.saferproducts.gov/
7. UK Office for Product Safety and Standards (OPSS) Product Safety Database , UK Government www.gov.uk/government/organisations/office-for-product-safety-and-standards