EU product compliance for SMEs
EU product compliance for SMEs: GPSR, CRA, PPWR, ESPR, EAA, market surveillance, responsible person, technical files and evidence plan.
Direct answer
EU product compliance for SMEs can include GPSR product safety, CRA cybersecurity for digital products, PPWR packaging rules, ESPR sustainability and digital product passports, EAA accessibility, market surveillance and responsible-person evidence. The right checklist depends on what the SME manufactures, imports, distributes or sells online.
What EU product compliance topics should SMEs track?
EU product compliance for SMEs can include GPSR product safety, CRA cybersecurity for digital products, PPWR packaging rules, ESPR sustainability and digital product passports, EAA accessibility, market surveillance and responsible-person evidence. The right checklist depends on what the SME manufactures, imports, distributes or sells online.
- Role classification
- Product law map
- Evidence pack
| Product laws | GPSR, CRA, PPWR, ESPR and EAA |
| Best first step | Classify product role and product type |
| Primary evidence | Technical file and market documentation |
EU product compliance for SMEs can include GPSR product safety, CRA cybersecurity for digital products, PPWR packaging rules, ESPR sustainability and digital product passports, EAA accessibility, market surveillance and responsible-person evidence. The right checklist depends on what the SME manufactures, imports, distributes or sells online.
Product evidence should exist before the product is sold or supplied in the EU.
Source: EUR-Lex Regulation (EU) 2023/988
EU product compliance for SMEs checklist
Action checklistConfirm manufacturer, importer, distributor, marketplace or authorised representative role.
Check GPSR, CRA, PPWR, ESPR, EAA and sector-specific rules.
Keep technical documentation, labels, instructions, safety and supplier records.
Key deadlines
| Date | Requirement | Source |
|---|---|---|
| Before placing on market | Product compliance fileProduct evidence should exist before the product is sold or supplied in the EU. | EUR-Lex Regulation (EU) 2023/988 |
30/60/90-day action plan
First 30 days
Confirm scope and assign an owner
Evidence needed: Applicability note, business owner, systems or product list, and source links.
EU product compliance
Days 31-60
Close the evidence gaps
Evidence needed: Policies, supplier records, data maps, technical notes, training records, or process owners.
EU product compliance
Days 61-90
Prepare for audit or customer review
Evidence needed: Versioned compliance file, action log, exception register, and next review date.
EU product compliance
Evidence to retain
Applicability decision
Shows whether EU product compliance applies and why the SME made that decision.
Retain: Scope memo, trigger criteria, country notes, owner approval, and review date.
Action owner list
Regulators and enterprise customers expect named accountability, not generic intent.
Retain: Owner, backup owner, due date, status, and unresolved blocker notes.
Evidence folder
The fastest way to answer customer due diligence is a single audit-ready evidence file.
Retain: Policies, screenshots, registers, exports, supplier responses, and training records.
SME questions answered
Which EU product law affects most online sellers?
GPSR is a common starting point for non-food consumer products, but packaging, accessibility and cybersecurity rules can also apply.
What should product SMEs do first?
Classify the product, role and sales channels, then build a technical and supplier evidence file.
Turn this guide into a tracked action plan
Start with the Regulation Checker, save the result, and import the action plan into your EuroComply dashboard when you are ready to assign owners.
Informational only. This page is not legal advice and does not replace a qualified legal review of your business, systems, products or employment practices.