What GPSR actually requires from a Shopify store (and what it doesn't)
Most GPSR advice aimed at Shopify merchants is either panic ("your store is illegal") or vagueness ("add compliance"). Neither helps. The regulation is long, but the part that concerns a storefront is narrow.
What GPSR is
It is the EU's general safety framework for consumer products, in application since 13 December 2024. It replaced the older General Product Safety Directive. It applies to products placed on the EU market — including products sold online to EU consumers from outside the EU. If you sell into the EU at a distance, it applies to you.
The part that touches your storefront
GPSR requires that there is an economic operator established in the EU who is responsible for the product, and that consumers can identify the product and reach the responsible operator. For a distance seller, that usually means three things are visible where the product is offered:
- Who is responsible in the EU. A name and a postal address, plus an electronic contact (email or a contact form). Depending on your setup this is the manufacturer, the importer, an authorised representative, or a fulfilment service provider — but there must be one, and the customer must be able to reach it.
- What the product is. Enough identification that the item can be traced: product name, and where relevant a batch, model or serial reference.
- Warnings and safety information, where the product category requires them — in the language of the country you sell into.
If those three are missing from a product page, that is the first thing to fix, and it is a template change rather than a legal project.
What GPSR does not require
It is not a CE-marking regulation. CE marking applies to specific product categories that have their own rules (toys, electrical equipment, PPE, machinery, and so on). For a plain textile, a piece of jewellery, or a candle, GPSR does not mean a notified body, a lab test, or a declaration of conformity. It means safety information, identification, traceability, and a route to the responsible operator.
That distinction matters because a lot of merchants are being sold audits they do not need, while the page-level gap that actually gets checked stays open.
A 20-minute pass
Open your product template and check four things:
- Is the EU responsible person's name and address on the page?
- Is there an email or contact route next to it?
- Is the product identifiable (name plus batch/model where relevant)?
- For categories with warnings, is the warning present in the right language?
Then check the footer: terms, privacy, returns, and a contact route that a customer can actually use.
The uncomfortable part
None of this is expensive. It is unglamorous template and policy work. The expensive part is not knowing which requirements apply to your category — which is why the responsible operator and the category rulebook come before any tooling.
This is a practical overview, not legal advice. Requirements vary by product category and member state; verify against the regulation text or with a qualified advisor.
Run the same checks yourself: the free 63-rule EU/UK/US checker · compliance gap reports · partner playbook