GPSR for Shopify Sellers: Your EU Responsible Person

Your EU orders still come in. But somewhere in the last few months a marketplace listing you had not touched in a year stopped selling, or a compliance form started demanding a manufacturer address and an EU responsible person before it would let you publish, or a European customer emailed asking who is legally answerable for the product — and you had nowhere to point them.

That is the General Product Safety Regulation, and it is not a deadline you can still get ahead of. Regulation (EU) 2023/988 has applied since 13 December 2024 — twenty months ago as of August 2026 — and it replaced the directive that governed consumer product safety before it. If you sell physical goods to consumers in the EU from a base outside it, every question below is already live for your store.

This is an operational catch-up guide, not legal advice. It answers the three things a non-EU seller actually has to decide: whether your products are in scope, who inside the EU can carry the responsible-person role for you, and what has to appear on the product page before the sale. Shopify publishes its own help page on the regulation; the rest of the answer sits in the legal text and in what marketplaces demand of you.

The Quick Verdict

Find your chain in the left column. Everything after this table is the reasoning underneath it.

Is GPSR Already In Force, and What Changed?

Article 52 of the regulation set the application date and it did not move, so a seller reading this in 2026 is doing remediation rather than preparation. Guidance you find online that says “will come into effect” was written before the date and describes a state of the world that no longer exists.

Nothing about this closes a market, either. GPSR changes what your listing has to carry, not whether the destination is available to you — which countries you can sell to on Shopify is a separate, platform-level question with its own answer in our FAQ on supported countries.

Does GPSR Cover What You Sell?

The regulation describes its own reach in Article 2(1): it applies to products placed or made available on the market insofar as there are no specific provisions with the same objective under Union law. Where such rules do exist, GPSR narrows to the aspects and risks they leave uncovered. That is why it feels like a catch-all — for most of what a general Shopify catalogue holds, there is no other rulebook to defer to.

Everything else a consumer buys is in — apparel, homeware, accessories. The nine categories Article 2(2) excludes outright are worth reading once, because they are narrower than people assume:

• medicinal products for human or veterinary use;
• food;
• feed;
• living plants and animals, genetically modified organisms and genetically modified microorganisms in contained use, plus products of plants and animals relating directly to their future reproduction;
• animal by-products and derived products;
• plant protection products;
• equipment on which consumers ride or travel where a service provider operates it rather than the consumer;
• certain aircraft;
• antiques.

Do You Need an EU Responsible Person?

This is the obligation that catches sellers by surprise, because it is not a labelling preference or a marketplace policy — it is a condition on the sale itself. The regulation does not ask you to publish a contact for goodwill; it makes the presence of an EU-established operator the thing that allows the product onto the market at all.

The second half of the obligation is physical. Article 16(3) requires the name, registered trade name or registered trade mark and the contact details — including the postal and electronic address — of that operator to be indicated on the product, on its packaging, on the parcel or on an accompanying document. In practice that is a decision about labels and inserts, and it usually has to be agreed with whoever packs your goods.

Which of the Four Roles Can Fill It

The order matters more than the list. The Commission's guidelines present the fulfilment service provider with an explicit condition attached: it can be the responsible person only where no other operator from the first three points is established in the EU. So the question to ask about your own chain is not “who could do this?” but “who is already there?”

Can You Just Buy One?

A market of representation services exists, and for a direct-to-consumer brand with no EU importer it is usually the practical route. What it is not is a platform setting. Shopify addresses the question on its own GPSR page and answers it in one sentence.

We are deliberately not publishing a ranked list of representation vendors with prices. The market moves, App Store search results render client-side so no list can be shown to be complete, and a compliance arrangement is the wrong place to follow a blog's ranking. What is worth insisting on when you shop for one is concrete: a written mandate naming the Article 4(3) tasks, an address you are allowed to publish, and a commitment about who answers a market surveillance authority.

What Your EU Product Pages Must Show Before the Sale

A “distance offer” is your product page. The regulation borrows the definition of a distance contract from consumer law — a contract concluded without the simultaneous physical presence of trader and consumer, using means of distance communication — so an online storefront is squarely inside it. The Commission removes any doubt about whether this lands on the seller rather than only on marketplaces.

Note the phrase “at least” in the legal text: these four are a floor, not a ceiling, and other EU rules can add their own requirements on top for particular product categories. Here is the floor, item by item.

What Shopify Gives You for This, and What It Doesn't

This is the sharp fact of the whole topic, and it is the reason so many stores have nothing on their pages: there is no switch. Shopify documents the regulation, tells you what sellers must do, and hands you general-purpose building blocks. The assembly is yours, and it is a catalogue job rather than a settings change.

Two of the platform pages a seller would naturally check say nothing about this at all. Neither the Markets documentation nor the CPSC filing page we read in August 2026 mentions GPSR or a responsible person — and that is not a gap in Markets so much as a boundary: Markets is about currencies, domains and duties, and what Markets actually does stops well short of product safety data.

Where These Fields Actually Live in Your Admin

Shopify's GPSR page splits the work in two: use the Disclosures product metafield and metaobject entries for legally-required product warnings specifically, and put any other required information into the product description or a metafield you add. The Disclosures metaobject entries are editable from the product metafields area, the bulk editor or a CSV import, which is what makes a catalogue-wide pass feasible.

The Jurisdictions field is the one that maps onto this regulation most directly: Shopify describes it as defining which countries and regions a particular disclosure must legally be displayed in, which is exactly the shape of the Article 19 language requirement. Shopify also cautions that its provided entries cover common disclosures and that you remain responsible for confirming their suitability and for complying with the applicable laws in your region — so the template is a starting point, not an answer.

Does This Need a Paid Plan or an App?

The question comes up because so many compliance capabilities on e-commerce platforms are gated. Here the documented constraint is a permissions one rather than a billing one: to edit and create Disclosures metaobject entries, staff need the view and create-and-edit products permissions and the view and create-and-edit content permissions for metaobject definitions and entries.

That matters more than it sounds for an agency-run store. A collaborator or a marketing hire with product access alone will open the disclosures area and find they cannot create the entry, which reads like a plan limitation and is not one. Fix the role before you conclude you need an app.

Who Qualifies in a Dropship or 3PL Chain?

The regulation's definition of an economic operator names the manufacturer, the authorised representative, the importer, the distributor and the fulfilment service provider — and then adds any other person subject to obligations under the regulation. It is a list with an open end, so the useful exercise is not memorising categories but walking your own supply chain and asking, at each step, who is established in the EU.

Dropshipping is where that walk ends badly. A supplier abroad plus a carrier is a chain with no EU establishment anywhere in it, and the fulfilment-provider definition is deliberately narrow: it requires at least two of warehousing, packaging, addressing and dispatching, performed without owning the products. Carriers are excluded by name as well: the definition expressly leaves out postal services, parcel delivery services and any other postal or freight transport services. So the courier that moves your parcels is not the fallback you might hope for.

The same test cuts the other way for a genuine EU 3PL that receives, stores, packs and dispatches your stock: it clears the definition, and it can carry the role — but only where no manufacturer, importer or authorised representative of yours is established in the EU. Where a European wholesaler buys from you and resells, the role is already filled by that importer, and your job is getting its name and addresses onto the offer.

Which Move Comes First for Your Store?

The table at the top answers by profile — who fills the role. This one answers by state of play: the gap sits in a different place depending on whether the role is unfilled, the role is filled but your pages say nothing, or your pages are fine and the marketplace fields are empty. Five questions, and none of the routes is a failing grade.

Why a Marketplace Listing Goes Dark First

Sellers routinely describe the same sequence: the listing stops, then the platform email arrives, then somebody goes looking for what changed. The regulation explains the sequence. Providers of online marketplaces must designate a single point of contact for market surveillance authorities and register it with the Safety Gate Portal, and when an order is issued to them they must act within two working days from receipt. That clock belongs to the platform, and you are not a party to it.

The compliance fields you have been asked to fill in are the other half of the same article: the platform is obliged to make room for them, which is why they appeared in your seller dashboard rather than in a letter addressed to you.

What Enforcement Looks Like, and What Nobody Publishes

Every vendor page quoting “the GPSR fine” is quoting one country. The regulation says member states shall lay down the rules on penalties applicable to infringements and take the measures necessary to implement them, that those penalties must be effective, proportionate and dissuasive, and that member states had to notify the Commission of their rules by 13 December 2024. A single European number does not exist because the text never created one.

One published national example gives a sense of the ceiling. Under Ireland's European Union (General Product Safety) Regulations 2024, an offence draws a class A fine or up to six months' imprisonment on summary conviction, and a fine of up to €500,000 or up to two years' imprisonment on conviction on indictment, with forfeiture of the goods available to the court. That is Ireland, on indictment — not a European tariff, and not a figure to transfer to Germany or the Netherlands, which we did not research.

The honest part is what is missing. No official source we read in August 2026 — the full text of the regulation, Shopify's GPSR page and its consumer-protection page — describes what happens operationally to a merchant who has no responsible person, beyond the marketplace route in Article 22: whether an authority writes to the seller, whether a parcel is stopped, whether a letter arrives first. What Shopify does document is downstream of that: depending on where your store and your customers are, a recall can mean you must immediately remove the recalled product from your online store, and its GPSR page lists reporting accidents to EU authorities and cooperating with recalls among a seller's duties.

Your GPSR Catch-Up Checklist

Steps one and two are the same for everyone, and they are the ones worth doing this week. After that the order bends to your route: if most of your EU volume runs through a marketplace, do step five before step four, because that is the surface that fails first. If your bottleneck is a supplier who has not sent the manufacturer's address, step two is a waiting game and step one is what you can finish today.

What This Is Not: Packaging, CE Marking and Cosmetics

Most of the confusion comes from the fact that all of these land on the same parcel. They are separate obligations with separate registrations, and satisfying one does nothing for the others.

Packaging is the one most often merged with product safety, and it is genuinely a different rulebook: extended producer responsibility makes whoever first places packaging on a national market pay for its collection and recycling, through registrations like Germany's LUCID or France's Citeo. Our guide to EU packaging rules for Shopify sellers owns that topic in full; nothing you do for GPSR discharges it, and nothing you do for it discharges GPSR.

The CE boundary follows the safety-net principle above. Where a product falls under Union harmonisation legislation, what is left for GPSR is the aspects and risks that legislation does not cover — and the CE mark itself never answers who your EU-established operator is.

Cosmetics are the case where getting the boundary wrong costs money twice. A cosmetic product already requires a Responsible Person under Regulation 1223/2009, which is listed as Union harmonisation legislation — and GPSR's own scope article steps back from products subject to such legislation. So Article 16 does not add a second responsible person for a cosmetic line; the person you already appoint is the one. The practical detail of that appointment — notification, the product information file — sits alongside the cosmetic regime we cover for beauty and skincare sellers. The counter-boundary matters just as much: for a product with no harmonisation regime of its own — the ordinary case for this article — Article 16 applies in full.

The Bottom Line

The reason this topic feels heavier than it is comes down to where the answer lives: split between a single Shopify help page, a legal text nobody reads for pleasure, and whatever your marketplace decided to put in a form. Reassembled, it is a short list of decisions — one role to fill, four items to render, one file to keep — and the work is mostly in your product data rather than in law.

Frequently Asked Questions