EU Product Compliance: CE Marking & Safety Standards 2026 — Complete Guide for E-Commerce

1. CE Marking Overview — Mandatory for 23 Product Directives

What CE Marking Actually Means

The two letters CE stand for Conformité Européenne ("European Conformity"). By affixing the mark, the manufacturer declares — on its own legal responsibility — that the product complies with all applicable European Union harmonisation legislation. CE is not a quality mark and it is not issued by any authority: there is no central "CE certificate". The manufacturer self-affixes the mark after completing the required conformity assessment procedure for each applicable directive or regulation.

CE has been mandatory since 1993, when the original "New Approach" directives entered into force. Today the regime covers products in roughly 23 sectors, addressing risks from electric shock and radio interference to mechanical hazards and chemical exposure. The CE mark must appear visibly, legibly and indelibly on the product itself, on its packaging, or on accompanying documents, depending on the sector.

The 23 CE Directives and Regulations at a Glance

Below is the consolidated 2026 list of the principal EU legal acts that require CE marking. Knowing which act applies to your product is the first and most important compliance step.

Sector	Legal Act	Adopted
Toys	Directive 2009/48/EC (Toy Safety Directive)	2009
Low voltage equipment 50–1000 V AC / 75–1500 V DC	Directive 2014/35/EU (LVD)	2014
Electromagnetic compatibility	Directive 2014/30/EU (EMC)	2014
Radio equipment (Wi-Fi, BT, 5G, RFID)	Directive 2014/53/EU (RED)	2014
Machinery	Regulation (EU) 2023/1230	2023
Personal Protective Equipment	Regulation (EU) 2016/425	2016
Medical devices	Regulation (EU) 2017/745 (MDR)	2017
In-vitro diagnostic medical devices	Regulation (EU) 2017/746 (IVDR)	2017
Construction products	Regulation (EU) 305/2011 (CPR)	2011
Gas appliances	Regulation (EU) 2016/426	2016
Pressure equipment	Directive 2014/68/EU (PED)	2014
Simple pressure vessels	Directive 2014/29/EU	2014
Lifts	Directive 2014/33/EU	2014
Cableway installations	Regulation (EU) 2016/424	2016
ATEX equipment (explosive atmospheres)	Directive 2014/34/EU	2014
Marine equipment	Directive 2014/90/EU	2014
Recreational craft and personal watercraft	Directive 2013/53/EU	2013
Non-automatic weighing instruments	Directive 2014/31/EU (NAWI)	2014
Measuring instruments	Directive 2014/32/EU (MID)	2014
Pyrotechnic articles	Directive 2013/29/EU	2013
Civil explosives	Directive 2014/28/EU	2014
Restriction of hazardous substances	Directive 2011/65/EU (RoHS 2)	2011
Ecodesign of energy-related products	Regulation (EU) 2024/1781 (ESPR)	2024

2. The New Legislative Framework (NLF) — 2008 Onwards

Why the NLF Was Adopted

Between 1985 and 2008, EU product law evolved as a patchwork of "New Approach" directives, each with its own definitions of "manufacturer" or "placing on the market". Inconsistency made enforcement difficult — surveillance authorities in different Member States often interpreted identical clauses differently. The New Legislative Framework, adopted on 9 July 2008, fixed this by creating a horizontal "tool-kit" that every subsequent sectoral act must build upon.

The Three Cornerstone NLF Acts

The 8 Conformity Assessment Modules

One of the NLF's most practically important contributions is the standardised conformity assessment modules A through H. Each CE-marking directive names which modules apply to which risk class of product. Knowing which module you face determines whether you can self-declare or must involve a Notified Body.

• Module A — Internal production control: Pure self-declaration. Manufacturer designs, tests internally, signs DoC. Used for most LVD, EMC and many RED products.
• Module B — EU-type examination: A Notified Body issues an "EU-type examination certificate" confirming a sample meets requirements. Always combined with C, D, E or F.
• Module C / C1 / C2 — Conformity to type: Manufacturer ensures production matches the type approved under B; in C1/C2, NB checks samples.
• Module D — Quality assurance of production: NB audits the manufacturer's ISO-9001-style production QA system.
• Module E — Product quality assurance: NB audits final inspection QA.
• Module F — Product verification: NB tests each product (or sample) before placing on the market.
• Module G — Unit verification: NB examines every single unit (used for one-off pressure vessels, etc.).
• Module H — Full quality assurance: NB audits design + production QA system (used by serial medical-device manufacturers).

3. Declaration of Conformity (DoC)

What the DoC Is

The EU Declaration of Conformity is a single, written document in which the manufacturer (or its EU authorised representative) formally states that the product satisfies all applicable Union harmonisation legislation. The DoC is the legally enforceable promise behind every CE mark. Without a valid DoC, the CE mark is meaningless and the product cannot lawfully be placed on the market.

Mandatory Content (Common to All Directives)

1. A unique identification of the product — typically model and serial / type reference.
2. Name and address of the manufacturer and, where applicable, the authorised representative.
3. The statement: "This declaration of conformity is issued under the sole responsibility of the manufacturer."
4. Object of the declaration — sufficient description (and a colour image where the directive requires) to identify the product.
5. The relevant Union harmonisation legislation the product complies with — listed by full title and number.
6. References to the harmonised standards used (including date) or other technical specifications.
7. Where applicable, the name and four-digit identification number of the Notified Body and the certificate it issued.
8. Place and date of issue.
9. Name, function and signature of the person empowered to bind the manufacturer.

Multi-Directive DoCs

A single DoC can cover several directives at once — which is the norm for modern consumer electronics, since a typical USB-C charger triggers LVD + EMC + RED + RoHS + Ecodesign simultaneously. The DoC must explicitly list every applicable act. Sales of "CE-marked" products without all applicable acts listed are a recurring finding in 2026 Safety Gate notifications.

Languages and Format

The DoC must be supplied in a language that can be easily understood by market surveillance authorities and end-users in each Member State where the product is sold. In practice that means EN + the local language(s) at minimum. From 2024, most CE directives explicitly permit a digital DoC accessible via a URL printed on the product — saving paper for high-volume consumer goods.

4. Technical File Requirements

The Backbone of CE Compliance

If the DoC is the public-facing statement, the technical file (also called the technical documentation) is the private evidence. It is what a market-surveillance officer asks to see when they suspect a problem. It must be complete, accurate, in an EU language acceptable to the authority, and produced within an agreed deadline — typically 10 working days.

Typical Contents

• General description of the product, including photographs and labelling artwork.
• Design and manufacturing drawings, circuit diagrams, component lists, bill of materials.
• Descriptions and explanations necessary to understand the drawings and the operation of the product.
• List of harmonised standards applied in full or in part — and a description of solutions adopted to meet essential requirements where standards were not applied.
• Risk assessment — a documented analysis identifying foreseeable hazards and the design / protective measures applied. Most modern directives explicitly require this.
• Results of design calculations, examinations carried out.
• Test reports — either from in-house labs or, where required, from accredited external labs or a Notified Body.
• The EU Declaration of Conformity.
• Instructions for use and safety information in the required languages.
• Where the product was subject to a Notified Body assessment, copies of the relevant certificates and approval reports.

Retention Period

The standard retention period is 10 years from the date the last unit was placed on the EU market. For medical devices under MDR it is up to 15 years. Storage can be physical or digital — but the file must be accessible to surveillance authorities from inside the EU. From 2026 most authorities expect to receive technical files in structured PDF / A or XML on first request rather than scanned paper.

5. Notified Bodies — When Third-Party Conformity Assessment Is Required

What Is a Notified Body?

A Notified Body (NB) is an independent, third-party conformity-assessment organisation that has been formally designated by an EU Member State authority and notified to the European Commission and other Member States. NBs perform the conformity-assessment tasks — testing, type examination, audits — that the relevant CE directive reserves for an independent third party. Each NB is assigned a unique four-digit number that, where required, must appear on the product alongside the CE mark and on the DoC.

The NANDO Database

NANDO (New Approach Notified and Designated Organisations) is the European Commission's official, public database listing every active Notified Body, together with the directives, regulations and modules each NB is authorised to assess. As of 2026 NANDO lists more than 2,300 designations across the 23 CE directives. Always verify the NB's current scope in NANDO before signing a contract — designations can be suspended or restricted.

Categories Where a Notified Body Is Mandatory

• Personal Protective Equipment Category III (against mortal risks — fall arrest, breathing protection) — Modules B+C2/D/E required.
• Medical devices Class IIa, IIb, III and all in-vitro diagnostics from List A/B — MDR/IVDR Annex VII–X.
• Pressure equipment in categories II, III, IV.
• Lifts — every installation.
• ATEX equipment categories M1, M2, 1G, 2G, 1D, 2D, 3D.
• Construction products following AVCP systems 1, 1+, 2+ under the CPR.
• Radio equipment when the manufacturer has NOT applied harmonised standards in full (RED Article 17(3)).
• Toys when harmonised EN 71 standards have not been applied in full (Toy Safety Directive Article 19).

How to Choose an NB

The NB must be designated for the specific module and directive you need — a body notified for LVD cannot certify under RED. Lead times, test fees and accept-decision timelines vary enormously: TÜV SÜD, TÜV Rheinland, Dekra, Intertek, SGS and BSI dominate the high-volume consumer-electronics market, while DNV, Bureau Veritas and IMQ lead in marine and industrial applications. Expect testing programmes for radio equipment to take 6–14 weeks and cost between €4,000 and €25,000 per product variant in 2026.

6. Self-Declaration for Low-Risk Products

The Module A Pathway

For the vast majority of consumer goods entering the EU — chargers, lamps, cables, kitchen gadgets, Bluetooth headphones — Notified Body involvement is not mandatory. The manufacturer follows Module A (internal production control): design the product, apply the relevant harmonised standards, perform in-house tests, write the technical file, issue the DoC, and affix the CE mark. The four-digit NB number is absent because no NB is involved.

Directives That Permit Self-Declaration

• Low Voltage Directive 2014/35/EU — all products that fall within the voltage range, regardless of risk class.
• EMC Directive 2014/30/EU — self-declaration is the default; NB involvement is voluntary for "EMC assessment".
• RED 2014/53/EU — for products that fully apply relevant harmonised standards from ETSI (Wi-Fi, Bluetooth LE, NFC, Sub-1 GHz).
• Toy Safety Directive 2009/48/EC — when the harmonised EN 71 series is fully applied.
• Machinery Regulation 2023/1230 — for any machine NOT listed in Annex I (the "dangerous machinery" list).
• RoHS 2 Directive 2011/65/EU — self-declaration based on supplier declarations and risk-based testing.
• Ecodesign Regulation 2024/1781 — internal control plus Digital Product Passport from 2026.

Self-Declaration ≠ Reduced Responsibility

A crucial misconception: self-declaration does not dilute legal liability. If a self-declared product later fails a market-surveillance test or harms a consumer, the manufacturer carries the full legal and financial consequences. From 2026 enforcement actions against self-declared products that turn out non-compliant are running at roughly 4× the rate of NB-tested products — surveillance authorities target self-declared categories first.

7. GPSR — General Product Safety Regulation (December 2024)

Why GPSR Replaced the 2001 GPSD

The previous General Product Safety Directive 2001/95/EC was written before the rise of online marketplaces, before mobile phones, before drop-shipping from third-country sellers and before AI-driven product recommendations. By the late 2010s it had become structurally inadequate. The General Product Safety Regulation (EU) 2023/988 — published 23 May 2023 and fully applicable from 13 December 2024 — replaces the GPSD with a directly applicable Regulation that updates every aspect of consumer-product safety law.

GPSR's Five Big Changes

1. Mandatory EU responsible economic operator (Article 16): every consumer product placed on the EU market must have an EU-established manufacturer, importer, authorised representative or fulfilment service provider named on it. Marketplaces are obliged to block listings that don't comply.
2. Online marketplace obligations (Article 22): Amazon, eBay, AliExpress, Temu, Bol, Allegro and their peers must register on Safety Gate Portal, designate a single contact for authorities, take down dangerous-product listings within 2 working days of notice, and use traceability checks at onboarding.
3. Mandatory accident reporting: manufacturers and importers must notify Safety Business Gateway of any accident caused by a product that resulted in serious injury or death — within 2 days.
4. Recall standardisation: Article 36–37 mandate a uniform recall notice template (now Implementing Regulation 2024/2967), direct consumer compensation, and machine-readable Safety Gate notifications.
5. Cybersecurity, anti-tampering and AI: GPSR explicitly covers risks arising from connectivity, software updates and AI-enabled features in consumer products.

Scope: The Horizontal Safety Net

GPSR applies to every consumer product placed on the EU market that is not already covered by sector-specific legislation. In practical terms: furniture, textiles, clothing, ordinary kitchenware, decorative items, sports equipment outside PPE, children's products outside the Toy Directive scope (e.g. care articles), and household chemicals outside CLP. For products covered by sector legislation (toys, electronics, PPE, etc.), the sector act applies — but GPSR's traceability and marketplace obligations layer on top.

8. Market Surveillance Across the EU

Who Watches the Watchers

Regulation (EU) 2019/1020 on market surveillance and compliance of products (in force since 16 July 2021) is the operational engine behind EU enforcement. Every Member State must designate one or more market surveillance authorities (MSAs) with powers to inspect, sample, test, demand documentation and order corrective action. The Regulation also created the Union Product Compliance Network (UPCN), which coordinates surveillance priorities across all 27 Member States and chairs Joint Actions on high-risk product categories.

Key National Authorities

• Germany — BAuA (Federal Institute for Occupational Safety and Health) coordinates federal-level surveillance; 16 Länder authorities (e.g. Bezirksregierungen) execute inspections.
• France — DGCCRF (Direction générale de la concurrence, de la consommation et de la répression des fraudes).
• Italy — Ministero delle Imprese e del Made in Italy (MIMIT) and Customs Agency.
• Spain — AESAN and autonomous-region consumer affairs ministries.
• Netherlands — NVWA and ANVS for radiation / nuclear products.
• Poland — UOKiK (Office of Competition and Consumer Protection).
• Sweden — Konsumentverket, joined by Elsäkerhetsverket for electrical equipment.
• Belgium — FOD Economie Safety of Goods Directorate.

Safety Gate (formerly RAPEX)

The Safety Gate is the EU rapid alert system for dangerous non-food products. When a national authority identifies a dangerous product, it uploads a notification with photos, hazard description and corrective measures. The notification is automatically distributed to all 27 Member States (plus EEA countries — Norway, Iceland, Liechtenstein), to customs, and is published on the public Safety Gate portal. In 2024 the system processed 3,400+ notifications, with chemicals in toys, electric shock in chargers and choking hazards in children's products the top three categories.

ICSMS+ — The Operator-Facing System

The Information and Communication System for Market Surveillance (ICSMS) is the back-office tool used by MSAs to share inspection results, test reports and decisions across borders. From 2026 the upgraded ICSMS+ integrates with EU customs (CDS) and with Safety Gate, giving an end-to-end view from import declaration through to retail-level enforcement. Economic operators are not direct users, but every CE non-compliance ends up in ICSMS+ — and follows the operator across all 27 Member States.

9. Penalties and Product Recalls

The Sharply Rising Cost of Non-Compliance

From 2024 onwards EU Member States have substantially raised penalty ceilings — partly to satisfy the GPSR obligation that penalties be "effective, proportionate and dissuasive", partly in response to public outcry over recurring scandals (Findus, Polish furniture fires, Chinese tablets with prohibited substances). The 2026 fine landscape is significantly more severe than 2020.

Indicative Penalty Bands per Major Member State

Non-Financial Penalties — Often the Bigger Cost

• EU-wide withdrawal order — a Safety Gate "Type A" alert that forces every distributor across 27 Member States to remove your product within days.
• Mandatory recall — direct consumer contact, refunds, return logistics, plus the brand damage of being listed on Safety Gate (the public portal is indexed by Google).
• Customs hold — the EU-wide Customs Risk Management System (CRMS) flags your shipments at every EU port until compliance is proven.
• Marketplace de-listing — Amazon, eBay, Allegro and others automatically suppress listings flagged on Safety Gate.
• Criminal prosecution — in cases of serious injury, several Member States (notably Italy, France, Germany) pursue criminal liability against responsible persons.

10. Importer and Authorised Representative Obligations

Why the EU Insists on an EU-Based Operator

Enforcement against a manufacturer based in China, Türkiye, India or the United States is, in practice, extremely difficult. Civil judgements from EU courts are hard to enforce in third countries; customs cannot prosecute abroad. The EU's solution — encoded in Article 4 of Regulation 2019/1020 and now in Article 16 GPSR — is to require an EU-established responsible economic operator for every regulated product. The operator becomes the local "address" for authorities, courts and consumers.

Who Can Act as the Responsible Operator?

1. An EU-established manufacturer — rare for non-EU brands.
2. An importer — the EU company that physically places a product from a third country on the market. Typical for traditional B2B import chains.
3. An Authorised Representative (AR) — an EU person or company designated by the (non-EU) manufacturer through a written mandate, taking on the documentary responsibilities. Common in modern marketplace channels.
4. A fulfilment service provider — an EU operator that stores, packs and dispatches products on behalf of a third-country seller. Frequent for Amazon FBA, but limited in scope.

Concrete Duties of the Importer

• Verify that the manufacturer has carried out the conformity assessment procedure and drawn up technical documentation.
• Verify the CE mark is correctly affixed and that the DoC is available.
• Indicate the importer's name, registered trade name and EU contact address on the product, packaging or accompanying documents.
• Ensure user instructions and safety information are provided in the official language(s) of the Member State of sale.
• Keep a copy of the DoC and the technical documentation for 10 years and make it available to surveillance authorities on request.
• Inform manufacturer and surveillance authorities when there are reasons to believe the product is not compliant, and cooperate in any corrective action.

Concrete Duties of an Authorised Representative

• Be designated through a written mandate specifying tasks delegated by the manufacturer.
• Keep the DoC and technical documentation accessible at an EU address for the legal retention period.
• Provide surveillance authorities with reasoned requests, samples and documentation.
• Cooperate with corrective and preventive actions when products present a risk.
• Under GPSR Article 16, perform verification checks that the manufacturer's information (warnings, instructions, contact details) is correct before products are placed on the market.

What Happens Without an EU Operator?

From 2024 onwards, EU customs and marketplaces are required to enforce Article 4 / Article 16: shipments arrive in a Member State, the customs declaration must identify the EU-based operator, and online listings must show the operator's name and contact address. Where no operator is named:

• Customs holds the consignment and the goods cannot enter free circulation.
• Amazon, eBay, Allegro, Bol and Cdiscount automatically block the listing at onboarding (GPSR Article 22).
• The product is treated as non-compliant by default — the surveillance authority does not need to prove a defect to order withdrawal.

Frequently Asked Questions — EU Product Compliance 2026