Product Safety Rules Reach Your Product Pages, Not Just the Factory Floor

You have probably been told that product safety law is somebody else's problem. It belongs to the factory that made the thing, or to the retail chains big enough to employ a compliance manager, and a small shop selling other people's stock from its own website sits well outside it.

That was never quite true. Since 13 December 2024, when the EU General Product Safety Regulation started to apply across Ireland, it is wrong in a way that shows up on the page itself. The regulation does not only describe how a product should be made. It describes, in specific terms, what a product offer has to say when the sale happens at a distance. That means your listing. Your template. The page a customer reads on their phone at half nine at night.

I want to walk through what the rule actually asks for, because most of the coverage I have read is written for manufacturers, and the part that lands on a small Irish retailer or maker gets lost in it.

The obligation attaches to the offer, not the premises

Article 19 of the regulation deals with distance sales, which in plain terms means selling online. Where an economic operator makes products available online, the offer has to clearly and visibly indicate at least four things ^[2].

What the offer must show	What that means on your page	Where the detail comes from
Manufacturer identity and contact	Name or trade mark, plus a postal and an electronic address	The supplier or maker
EU responsible person	Required where the manufacturer is outside the EU	Importer, supplier, or you
Product identification	Type, identifiers, and a picture of the product	Your own product data
Warnings and safety information	The same warnings that appear on the packaging	The box, insert, or label

Four rows. Four things a customer should be able to see without ringing you to ask. Take them one at a time, because each one fails differently.

Manufacturer identity and a working address

The offer has to carry the name, registered trade name or trade mark of the manufacturer, along with a postal address and an electronic address where they can be contacted. Not your address. Theirs.

For a shop reselling stock, this is usually the piece that is missing, because the information lives on the outer carton in the stockroom and never made it into the product template. The practical consequence is small until it is not: a customer with a faulty item, or an inspector looking at your listing, cannot tell who actually made the product, and the trail stops at you.

A responsible person inside the EU

Where the manufacturer is not established in the Union, the offer has to name a responsible person inside it, with a postal and electronic address ^[2]. This is the person or company that answers for the product on this side of the border.

If you import directly from outside the EU, that responsible person may well be you, which is a heavier duty than most owners realise when they place a first container order. Buying through an Irish or EU distributor usually means they hold that role instead. Ask them in writing before you list the product.

Enough detail to identify the exact product

The regulation asks for information allowing the product to be identified, including a picture of it, its type, and any other product identifier. Batch and model numbers matter here.

This one sounds like paperwork and is not. When a safety notice names one batch of one model, a page that lists a generic product name gives you no way to work out whether the twelve you sold last autumn are the affected ones. Identifiers are what turn a recall from a guess into a query.

The warnings that are already on the box

Any warning or safety information that has to be affixed to the product, its packaging or an accompanying document must appear in the offer too, in a language easily understood by consumers in the country where it is sold.

The street-level version: if the box says the item is not suitable for children under three, the page has to say it before the customer buys, not after they open it on a birthday morning.

"Distributor" is a word that includes you

This is the part that catches people. The regulation does not have a category for "small shop". If you make products available on the market, you are an economic operator, and if you sell on products made by someone else, you are a distributor.

Distributors carry a verification duty. Before making a product available, a distributor has to verify that the manufacturer and, where relevant, the importer have complied with their own labelling and information obligations ^[2]. Verify, not assume. If the information is not there, the product should not go on the shelf or the site until it is.

The scope is broader than most people expect in one direction and narrower in another, and both halves are worth knowing. Products count whether they are new, used, repaired or reconditioned, so a second-hand dealer is inside the regulation rather than outside it. Some categories are carved out entirely: food, medicines, animal feed, live plants and animals, plant protection products, antiques.

Services are not products. If you are a solicitor, an accountant, a plumber or a physiotherapist selling nothing but your time through your website, none of this applies to you, and I would rather say that plainly than let a compliance article scare somebody into work they do not need to do.

What a recall actually asks of your website

This is the section I care most about operationally, because a recall is an incident, and incidents are won or lost on preparation.

If a product you sold is recalled, or a safety warning has to reach the people who bought it, the regulation requires that all affected consumers who can be identified are notified directly and without undue delay. Businesses that hold customer data are expected to use it for exactly this purpose ^[2]. Where you cannot reach everyone that way, you have to put a clear and visible recall notice through other channels with the widest possible reach, and the regulation names the company website first in that list, alongside social channels and newsletters.

Consider a Leitrim candle maker who sells through her own shop and a handful of stockists. A wick supplier flags a fault in one production run. She can pull the listing in a minute.

The harder question is the one that arrives straight after. Can she email the people who bought that batch, or does the order history live somewhere she only rents access to? That is not a legal problem. It is a data ownership problem, and it only becomes visible on the worst possible day, which is why it belongs on the list of things you sort out while nothing is wrong. Same reasoning as keeping the customer relationship on your own site rather than a marketplace: the list is the asset.

The notice itself is prescribed rather than left to your judgement. A written recall notice has to be headed with the words "Product safety recall", describe the product and the hazard clearly, tell people to stop using it immediately, set out the remedies, and give a free phone number or an interactive online service for questions ^[2]. The regulation explicitly rules out softening language. Words like "voluntary", "precautionary" and "in rare situations" are out, because they are known to reduce how seriously people take the warning. The Commission has published a standard template for the notice under Implementing Regulation (EU) 2024/1435, which saves you drafting one under pressure.

Then there are remedies. The operator responsible for the recall has to offer an effective, cost-free and timely remedy, and normally a choice of at least two out of repair, replacement, or a refund of at least what the customer paid. A refund becomes an absolute entitlement if repair or replacement drags on.

The enforcement side is getting busier, not quieter

I read the Commission's 2025 Safety Gate report when it landed in March, and the direction of travel is not subtle. Safety Gate is the EU rapid alert system for dangerous non-food products. It logged 4,671 alerts in 2025, the highest since the system started in 2003, up roughly 13% on the previous year and more than double the 2022 figure. National authorities recorded 5,794 follow-up actions, about a third more than the year before ^[3].

Those are counts of alerts and interventions rather than a measure of how many unsafe products are out there, so read them as a signal of enforcement effort rather than a risk score for your own stock. The effort is what matters here. That same report describes an eSurveillance web crawler which scanned over 1.6 million websites during the year and turned up more than 20,800 listings for products already flagged in the system. It also confirms a coordinated product safety sweep planned for 2026 to check compliance with the regulation. A sweep is a set of simultaneous online checks across a sector. Nobody rings ahead.

In Ireland, the regulation is given effect by the European Union (General Product Safety) Regulations 2024, and the Competition and Consumer Protection Commission is the market surveillance authority ^{[1] [4]}. The penalties in that instrument are real. On summary conviction, a class A fine, currently capped at €5,000, or up to six months. Take a case to indictment and the ceiling rises to €500,000 or two years ^[4].

I am not going to pretend a one-person shop in Ireland is likely to be prosecuted over a missing manufacturer address. The realistic outcome is a request to fix the listing, or a product held at a border. My reason for quoting the numbers is simpler. This is enforceable law with a criminal penalty attached, not guidance.

Why this is a template edit on a site you control

Roughly two in five Irish enterprises made e-commerce sales in 2025, and among small enterprises the CSO put it at just under 35% ^[5]. Every one of those businesses now has product pages that have to carry information they may never have collected.

On a site you control, this is a small piece of work. WordPress product templates take custom fields, so manufacturer name, contact address, responsible person and batch identifiers become part of the product record rather than something retyped into a description box. Add the fields once, populate them as stock arrives, and every new listing inherits the structure. A recall notice is a new page deployed in minutes with the required headline and a contact route.

On a closed platform, you get whichever fields the vendor decided to build, on the vendor's timeline. You wait. That is the difference between a compliance change you execute this week and one that sits in somebody else's backlog. It is the same argument that runs through what Irish law already requires you to display about delivery charges: the rules keep arriving, and the site that can absorb them without a support ticket is the cheaper site to own. Web60 sites run full WordPress on Irish infrastructure with everything included for €60 a year, which means the plugin and template layer stays yours to change.

The honest concession runs the other way for some sellers. If you list a dozen items a year and have no appetite for maintaining product data, the large online marketplaces have built these fields into their listing forms and will not let you publish without filling them in. That is a genuinely lower admin load. You pay for it in commission and in the fact that the customer list is theirs, but for occasional selling it is a fair trade and I would not talk anybody out of it.

The product page compliance pass, in four steps

1. Audit one listing first. Open your best-selling product page and check it against the four items above, because whatever is missing there is missing everywhere.
2. Request the data from your supplier in writing. Ask for manufacturer name and contact address, the EU responsible person where the maker is outside the EU, and the warnings that appear on the packaging.
3. Add the fields to the product template, not the description. Structured fields stay consistent across hundreds of products and survive a redesign; text typed into a description does not.
4. Verify your customer contact route works. Confirm you can export the buyers of a specific product or batch and reach them by email, before you need to.

Four steps, an afternoon, and most of it is waiting on suppliers to reply.

What a compliant page does not do

A page that carries all four items does not make a product safe, and it will not protect you if the product is dangerous. It is a traceability and information duty sitting on top of the general safety requirement, not a substitute for it.

There is a second limitation worth naming. You will be publishing supplier-provided data you cannot independently verify, and if a supplier gives you an address that no longer works, that is on your page. Keep the email or portal record showing what you were told and when you asked. It will not transfer the obligation, but it is the difference between a documented process and a shrug. And on anything genuinely borderline, particularly if you are importing directly and may be the responsible person yourself, this is a conversation for a solicitor rather than a blog post.

Conclusion

The change here is quieter than most regulatory news. No new page to add to your footer, no consent banner, no deadline you can point at. Just a set of details that now have to be visible at the moment of sale, on pages most owners built before anybody asked for them.

What makes it manageable is the order of work. Get the information from your suppliers, put it somewhere structured rather than somewhere convenient, and make sure you can still reach the people who bought from you last year. Do those three things and a recall becomes an afternoon of admin rather than an emergency. That is worth an afternoon of your time this month.

Frequently Asked Questions

Do these rules apply if I only sell a handful of products from my own website?

Yes. The General Product Safety Regulation applies to economic operators making consumer products available on the market, with no exemption based on business size or sales volume. A sole trader selling ten items a month from a WordPress shop carries the same distance selling information duty as a large retailer.

What exactly has to appear on each product listing?

Four things: the manufacturer's name or trade mark with a postal and electronic address; the name and address of an EU responsible person where the manufacturer is outside the EU; information identifying the product including a picture, its type and any identifiers; and any warnings or safety information that appear on the product or packaging, in a language consumers here can understand.

Do the rules cover second-hand or handmade items?

Second-hand items are covered. The regulation applies to products whether they are new, used, repaired or reconditioned, with a carve-out for goods clearly marked as needing repair or reconditioning before use, and antiques are excluded. Handmade goods are covered too, and if you made the item yourself, you are the manufacturer for these purposes.

What do I have to do if a product I sold is recalled?

Directly notify every affected customer you can identify, without undue delay, using the customer data you already hold. Where you cannot reach everyone, publish a clear recall notice through the widest available channels, starting with your own website. The notice has to be headed "Product safety recall", describe the hazard without softening language, and set out the remedies on offer.

Who enforces this in Ireland, and what are the penalties?

The Competition and Consumer Protection Commission is the market surveillance authority. Under the European Union (General Product Safety) Regulations 2024, offences carry a class A fine, currently up to €5,000, or six months' imprisonment on summary conviction, rising to a fine of up to €500,000 or two years on indictment.

Does selling through a marketplace make this somebody else's problem?

No. Marketplaces have their own obligations and typically build the required fields into their listing forms, but the information duty on the offer still belongs to the seller. You supply the data either way. The difference is that on a marketplace you are also handing over the customer list you would need on the day a recall lands.

Sources