GPSR Compliance for Shopify Stores: What Every Online Seller Must Know in 2026
If you sell physical products to EU customers through Shopify, the General Product Safety Regulation (EU 2023/988) — commonly called the GPSR — now directly affects your business. The regulation became fully applicable on December 13, 2024, replacing the decades-old General Product Safety Directive (2001/95/EC), and enforcement has accelerated sharply through 2025 and into 2026. This article breaks down exactly what the GPSR requires from online sellers, what information must appear on every product listing, who needs an EU Responsible Person, and what happens if you don't comply.
What the GPSR actually requires from online sellers
The GPSR applies to virtually all non-food consumer products sold in the EU. If your Shopify store ships physical goods to any EU country, you fall within its scope regardless of where your business is based.
The regulation introduces strict information requirements for distance sales — meaning any product sold online. Article 19 is the provision that matters most to e-commerce merchants. It mandates four categories of information on every online product listing:
(a) Manufacturer identification. The manufacturer's name, registered trade name or trademark, and both a postal address and electronic address (email or a specific contact section on a website).
(b) EU Responsible Person details. When the manufacturer is not established in the EU, the name, postal address, and electronic address of the economic operator who serves as the EU-based responsible person under Article 16. (For a deep dive into this requirement, see our guide on the EU Responsible Person under GPSR.)
(c) Product identification. A product image, its type, and any other element that allows identification — batch numbers, serial numbers, or other unique identifiers.
(d) Warnings and safety information. Any warning or safety information that would normally be affixed to the product or included with it, provided in a language easily understood by consumers in each member state where the product is sold.
These four requirements apply per product listing. A generic "contact us" link does not satisfy the postal and electronic address requirements. A product photo without a batch or serial number may leave you non-compliant.
The Article 16 hierarchy: who is the Responsible Person?
One of the GPSR's most consequential provisions for non-EU sellers is the requirement to have an EU-based Responsible Person. Article 16, read together with Article 4 of the Market Surveillance Regulation (EU 2019/1020), establishes a clear hierarchy:
- EU-based manufacturer — if you manufacture your products within the EU, you are already the responsible person.
- Authorised Representative — a non-EU manufacturer may appoint, by written mandate, an EU-based entity to serve this role.
- Importer — if neither of the above exists, the EU-based importer who brings the goods into the single market becomes the responsible person automatically.
- Fulfilment service provider — as a last resort, if no manufacturer, authorised representative, or importer is established in the EU, the fulfilment service provider (such as a third-party logistics warehouse) assumes the role by default.
Most Shopify merchants based in the US, UK, or China who sell directly to EU consumers will need to appoint an EU Authorised Representative. This typically costs between €250 and €1,000 per year depending on product complexity and catalogue size. If you sell through a B2B arrangement to an EU-based importer, that importer is the responsible person and you don't need a separate appointment.
Enforcement has shifted from warnings to action
The GPSR's first year was marked by education and guidance. That phase is over.
On April 1, 2025, the EU Consumer Safety Network launched the first coordinated enforcement sweep under the GPSR. National market surveillance authorities across member states checked 47 online marketplace providers — including Amazon, AliExpress, Shein, Temu, and Zalando — specifically examining childcare product listings for compliance with Article 19's information requirements. The sweep assessed whether listings displayed manufacturer and responsible person details, whether product identification was adequate, and whether marketplaces had registered with the EU Safety Gate Portal.
By 2026, the enforcement posture has hardened. Customs authorities are flagging and returning shipments that lack valid EU Responsible Person information. Industry sources report that regulators are now using automated web scraping to audit online product pages for GPSR compliance data. Amazon has been actively delisting non-compliant products from EU marketplaces since December 2024, and eBay has built dedicated GPSR fields into its listing tools.
In November 2025, the European Commission published formal GPSR guidelines (reference C(2025) 7699 final), clarifying key definitions and enforcement expectations. These guidelines, while not legally binding, signal how authorities will interpret the regulation going forward.
Penalties vary by member state — and some are steep
The GPSR itself does not set fixed penalty amounts. Article 44 requires each member state to establish "effective, proportionate, and dissuasive" penalties. The range varies dramatically.
France moved fastest: under Law No. 2024-364, failure to report required information can result in fines up to €750,000 for legal entities or 10% of average annual turnover, plus potential imprisonment of up to five years. Product recall violations carry fines up to €600,000 or 10% of turnover.
Germany has proposed fines of up to €100,000 per infraction through draft legislation (BR-Drs. 548/25), covering 32 new administrative offences. However, this bill has faced parliamentary pushback — some legislators considered the fines disproportionate for missing contact details — and its final status should be verified independently.
Even without government fines, the commercial consequences are immediate. Marketplace delisting costs revenue directly. Multiple sellers reported losing holiday sales in December 2024 and January 2025 because their GPSR documentation wasn't ready when Amazon began enforcement.
What this means for Shopify merchants
Shopify provides minimal native GPSR tooling compared to Amazon or eBay. The official Shopify help page on GPSR acknowledges the regulation but directs merchants to use metafields, product descriptions, or third-party apps to display required information. There is no built-in GPSR compliance dashboard.
This means the compliance burden falls squarely on you. Here's what you need to do:
- Audit every product listing against Article 19's four requirements. Check that manufacturer details (with postal and email addresses), responsible person details, product identifiers, and safety warnings all appear on the listing page — not buried in a PDF or hidden behind a click.
- Appoint an EU Responsible Person if your business is outside the EU and you sell B2C. Don't assume your 3PL or fulfilment provider will accept this role — most refuse.
- Translate safety information into the language of each member state where you sell. A German customer must see warnings in German.
- Document everything. Technical documentation must be retained for at least 10 years and produced on request by market surveillance authorities.
- Check your legal pages. Your store's legal framework needs to reflect GPSR obligations alongside GDPR, consumer rights, and other EU requirements. (See our guide on EU legal pages every Shopify store needs.)
Conclusion: compliance is no longer optional
The GPSR has moved past its grace period. Enforcement sweeps, marketplace delistings, customs seizures, and automated audits are now operational realities. For Shopify merchants selling to the EU, the cost of compliance is measurable and manageable — the cost of non-compliance is lost sales, blocked shipments, and potential six-figure fines.
If you need to add GPSR-compliant information to your Shopify product listings efficiently, SWEDev's GPSR Compliance Hub is designed to help you display manufacturer details, responsible person information, and safety data directly on your product pages — without custom code.
Try GPSR Compliance Hub