What Is an EU Responsible Person Under GPSR?
The concept of the EU Responsible Person is defined in GPSR Article 16. In plain terms, the Responsible Person (often abbreviated as "RP") is an entity established within the European Union that formally accepts responsibility for the compliance of a product placed on the EU market.
The Responsible Person exists to solve a practical enforcement problem. When a manufacturer is located outside the EU — say, in China, the United States, or post-Brexit United Kingdom — EU market surveillance authorities have no direct legal leverage over that manufacturer. The RP bridges this gap by acting as a local point of accountability.
It is important to understand what the RP is not. The Responsible Person is not simply a brand representative, a logistics contact, or a distributor in a general commercial sense. The role carries specific legal obligations, and the person or company accepting it becomes subject to EU enforcement actions if the product fails to meet safety requirements.
The GPSR Responsible Person requirement applies specifically to non-food consumer products. It does not overlap with the "Authorized Representative" role under the Medical Devices Regulation or other sector-specific EU legislation, though the concepts are similar in spirit.
The RP must be an EU-based natural or legal person. This means an individual resident in the EU or a company registered in an EU member state. An entity in the EEA (Norway, Iceland, Liechtenstein) may also qualify, depending on how the regulation is transposed. However, a company registered only in Switzerland, Turkey, or the UK does not meet the requirement.
Who Needs an EU Responsible Person?
The short answer: anyone who places a product on the EU market where the manufacturer is not established in the EU. In practice, this covers several common merchant scenarios:
- Non-EU manufacturers selling into the EU. If you are a manufacturer based in China, India, the USA, the UK, Turkey, or any other non-EU country and you sell products to EU consumers, you must appoint an EU Responsible Person.
- EU-based importers. If you are an importer bringing products into the EU from a non-EU manufacturer, the GPSR places obligations on you. In many cases, the importer themselves can serve as the Responsible Person.
- Online sellers outside the EU. If you are an e-commerce merchant based outside the EU but selling directly to EU consumers — including through your own PrestaShop store or marketplaces — you need an RP.
- EU merchants sourcing from non-EU suppliers. If you run a PrestaShop store in France or Germany but your products are manufactured in, say, Shenzhen, you either serve as the importer (and can act as RP yourself) or you need to ensure an RP is designated.
Since January 1, 2021, the United Kingdom is no longer part of the EU single market. UK-based manufacturers and sellers exporting to the EU are treated as non-EU entities under GPSR and must appoint an EU Responsible Person.
When You Do NOT Need a Separate Responsible Person
If your manufacturer is established within the EU, they are already directly subject to EU product safety law. In this case, the manufacturer fulfills the compliance obligations themselves, and there is no need to designate a separate Responsible Person. The manufacturer's own details (name, address, contact information) must still appear on the product and product page, but the RP field specifically is not required.
What Information Must Be Displayed?
The GPSR mandates that certain information about the Responsible Person must be made available to consumers and market surveillance authorities. This information must appear in two places: on the product itself (or its packaging/accompanying documentation) and on the product page of your online store.
- Full Legal Name Required The official registered name of the Responsible Person entity — the exact name as it appears in company registration documents.
- Postal Address Required A physical street address within the EU. Must include street name and number, city, postal code, and country. PO boxes are not accepted.
- Email Address Required A monitored email address where market surveillance authorities can reach the RP. Must be actively maintained.
- Phone Number Recommended A telephone number within the EU. While not strictly mandated by all interpretations, including it strengthens your compliance posture.
- Website URL Recommended A web address for the Responsible Person. Useful for authorities and consumers who want to verify the RP's legitimacy.
The requirement to display this on the product page is particularly relevant for e-commerce merchants. Under GPSR Article 19, online sellers must make product safety information — including the Responsible Person — clearly visible to consumers before purchase. This means it should appear on your PrestaShop product page, not buried in a PDF or hidden behind a link.
Additionally, this same information must appear on the physical product packaging or in accompanying documentation shipped with the product. If you are the seller but not the manufacturer, coordinating with your supplier to ensure packaging compliance is critical.
Responsibilities of the EU Responsible Person
Appointing a Responsible Person is not merely an administrative checkbox. The RP takes on substantive legal obligations under GPSR. Understanding these helps merchants appreciate why choosing the right RP — and maintaining that relationship — matters.
- Verify product compliance. The RP must verify that the product has been designed and manufactured in accordance with applicable EU safety requirements. This includes reviewing conformity documentation, test reports, and risk assessments provided by the manufacturer.
- Maintain technical documentation. The RP must keep (or have access to) the technical file for the product, including design specifications, safety test results, and risk analysis. These documents must be available to authorities on request.
- Cooperate with market surveillance authorities. When an EU authority contacts the RP about a product, the RP must respond promptly and provide requested information. This includes making documents available and answering questions about product safety.
- Report dangerous products. If the RP becomes aware that a product presents a risk to consumers, they must immediately inform the relevant market surveillance authorities. In practice, this means engaging with the EU Safety Gate (formerly RAPEX) notification system.
- Participate in product recalls. If a recall is necessary, the RP must cooperate with authorities and the manufacturer to execute the recall, including notifying distributors and consumers.
- Maintain records for 10 years. The RP must keep compliance-related documentation for a minimum of 10 years after the product is placed on the market. This long retention period reflects the potential for latent product safety issues.
Given these obligations, it should be clear why an RP cannot be appointed without their knowledge and consent. The role carries real legal liability, and any entity accepting it should be fully aware of what they are taking on.
How to Appoint an EU Responsible Person
There are three main paths to securing a Responsible Person for your products. The right choice depends on your business structure, budget, and the number of products involved.
Option 1: Use Your EU-Based Distributor or Importer
If you already work with a distributor or importer established in the EU, they may agree to serve as the Responsible Person. This is often the most practical route because these entities already handle your products and understand the supply chain. However, they must formally accept the role — distributing your products does not automatically make them your RP.
Option 2: Hire a Dedicated RP Service Provider
A growing number of companies specialize in acting as EU Responsible Persons. These service providers are typically established in an EU member state and offer RP services on a fee basis. They handle documentation, authority communications, and compliance verification. This is a good option for non-EU sellers who lack an EU presence but need coverage for their entire catalog.
Option 3: Establish Your Own EU Entity
Larger businesses may find it worthwhile to set up their own company or subsidiary within the EU. This gives you full control over the RP role and eliminates ongoing service fees, but it comes with the cost and complexity of EU company formation, tax obligations, and ongoing administration.
Regardless of which option you choose, the appointment must be documented in a written mandate. This is a contract or letter of appointment in which the manufacturer designates the RP and the RP explicitly accepts the role and its associated obligations. A verbal agreement or informal arrangement does not satisfy GPSR requirements.
Managing RP Data in PrestaShop
For PrestaShop merchants, the practical challenge is not just understanding the RP requirement — it is implementing it across potentially hundreds or thousands of products. Here is what that involves and where the difficulties lie.
The Core Challenge: Different Products, Different RPs
If all your products come from a single non-EU manufacturer and you have one RP, the implementation is straightforward. But most real-world catalogs are more complex. You might source products from three manufacturers in China, two in the UK, and one in Turkey — each with a different RP arrangement. Some products might share an RP; others might not.
PrestaShop's native product editor does not include fields for Responsible Person data. This means you need either custom development or a module to add, store, and display this information.
Assignment Strategies
There are three common approaches to assigning RP data to products:
- Per-product assignment: You manually assign an RP to each individual product. This gives maximum flexibility but is labor-intensive for large catalogs.
- Per-manufacturer assignment: You link an RP to a manufacturer, and every product from that manufacturer inherits the RP. This works well when each non-EU manufacturer has appointed their own RP.
- Per-supplier assignment: Similar to manufacturer-based assignment, but keyed to the supplier. Useful when your supplier relationship determines the RP.
Front-Office Display
Whatever assignment strategy you choose, the RP information must be visible to the consumer on the product page. Under GPSR, this is not optional — the data must appear before purchase, alongside other product safety information such as manufacturer details and safety warnings.
The display should be clear and readable. A dedicated tab or section on the product page labeled "Product Safety" or "GPSR Compliance" is a common pattern. The RP's name, address, and email should be immediately visible without requiring the consumer to download a document or navigate away from the page.
GDPR Considerations
RP data typically includes names, addresses, email addresses, and phone numbers. If the RP is a natural person (an individual rather than a company), this data is personal data under GDPR. Merchants need to ensure they have a lawful basis for processing and displaying this information — in most cases, the legal obligation under GPSR provides that basis. However, appropriate data security measures should still be in place.
How GPSR Compliance Pro Handles This
GPSR Compliance Pro for PrestaShop provides a dedicated back-office interface for managing Responsible Person records. You create RP entries once — with all required fields — and then assign them to products individually, by manufacturer, or by supplier. The module automatically renders the correct RP information on the front-office product page, formatted in a clear, regulation-compliant layout. Bulk operations and CSV import make it practical even for catalogs with thousands of products and multiple RPs.
Common Mistakes to Avoid
Based on common patterns observed across EU e-commerce enforcement actions and marketplace compliance reviews, here are the mistakes merchants make most frequently with Responsible Person data:
- Using a PO box instead of a physical address. The GPSR requires a postal address where the RP can actually be reached. PO boxes, virtual office addresses, and mail forwarding services may not satisfy this requirement. Market surveillance authorities need to be able to physically visit or send official correspondence to the RP.
- Not updating RP information when products or suppliers change. If you switch manufacturers or your RP provider goes out of business, your product pages still show outdated information. Stale RP data is worse than no RP data — it creates a false impression of compliance.
- Assigning an RP without their written consent. Listing a company as your Responsible Person without their formal agreement is not just ineffective — it can expose you to additional legal liability. The RP must explicitly accept the role through a documented mandate.
- Only displaying RP info on the website, not on packaging. The dual-display requirement catches many merchants off guard. Your PrestaShop product page might be perfectly compliant, but if the physical product arrives without RP information on the packaging or in accompanying documentation, you are still in violation.
- Not having an RP for every non-EU manufactured product. Some merchants appoint an RP for their "main" products but overlook accessories, spare parts, or low-value items. The GPSR applies to all non-food consumer products placed on the EU market, regardless of price or perceived risk level.