Enforcement status by regulation
Verified summary of the current enforcement status of each of the 10 tracked regulations. Only data from official primary sources is included. Regulations without published enforcement cases are expressly indicated.
Enforcement table by regulation
Status verified as of May 3, 2026. Only enforcement actions with published official primary sources are included. Regulations whose application date has not yet arrived or that have no enforcement cases published with a primary source are indicated as "no verified cases."
| Normativa | Enforcement status | Verified action type | Key data | Official source |
|---|---|---|---|---|
|
GPSR
Reg. (UE) 2023/988
|
Active enforcement | Safety Gate alerts, product withdrawals, online listing removals, recalls | 4,671 alerts and 5,794 follow-up actions in 2025 (all-time record). Cosmetics (36%), toys (16%), and electrical appliances (11%) were the most notified categories. The eSurveillance Webcrawler scanned over 1.6 million URLs and detected over 20,800 dangerous products for sale online. Over 1,200 marketplaces registered in Safety Gate by end of 2025. | European Commission IP/26/537 |
|
GPSR
Alemania — ProdSG rev.
|
Active enforcement | Administrative and criminal penalties (national legislation) | Germany revised its Product Safety Act (ProdSG) on February 19, 2026, aligning it with the GPSR. Serious infringements are sanctioned with fines of up to €100,000 (Sec. 28(2) ProdSG). Repeated intentional infringements endangering life or health are criminal offenses punishable by up to 1 year of imprisonment (Sec. 29 ProdSG). | Baker McKenzie (ref. ProdSG — BGBl.) |
|
GPSR
Sweep 2026
|
In preparation | Coordinated online inspection | The European Commission is preparing, together with national market surveillance authorities, the 2026 "product safety sweep" to verify GPSR compliance. A sweep is a set of simultaneous online inspections to detect non-compliance in a specific sector. | European Commission IP/26/537 |
|
CRA
Reg. (UE) 2024/2847
|
No enforcement — applies 12/11/2027 | — | No verified enforcement cases. The penalties regime application date is December 11, 2027. Foreseen fines reach up to €15M or 2.5% of global turnover (Art. 64(2)). | EUR-Lex Reg. 2024/2847 |
|
AI Act
Reg. (UE) 2024/1689
|
Partial enforcement | Enforcement infrastructure operational; no fines published | AI practice prohibitions (Art. 5) in force since February 2, 2025. Penalties regime (Art. 99) applicable since August 2, 2025, but the Commission's enforcement capacity over GPAI models does not enter into force until August 2, 2026. As of this date, no fines or penalty decisions have been published under the AI Act. AI Office operational since August 2, 2025. National competent authorities designated. | European Commission — AI Act |
|
EUDR
Reg. (UE) 2023/1115
|
No enforcement — applies 12/30/2026 | — | No verified enforcement cases. Application was postponed until December 30, 2026 for large and medium operators (June 30, 2027 for SMEs) through Regulation (EU) 2025/2650. Foreseen fines of up to 4% of annual EU turnover, product and revenue confiscation, public procurement exclusion up to 12 months (Art. 25). The Commission will publish a simplification report before April 30, 2026. | EUR-Lex Reg. 2023/1115 |
|
EAA
Dir. (UE) 2019/882
|
No published cases | — | No enforcement cases published with official primary source as of this date. The EAA applies since June 28, 2025. Transposed in Spain through Royal Decree-Law 1/2025 (BOE 1/8/2025). Penalties are defined by each Member State (Art. 30). | EUR-Lex Dir. 2019/882 |
|
Pay Transparency
Dir. (UE) 2023/970
|
No enforcement — transposition deadline 6/7/2026 | — | No verified enforcement cases. The transposition deadline expires on June 7, 2026. Penalties will be defined by each Member State pursuant to Art. 23. No published decisions from Labor Inspection in Spain or other Member States have been identified under this directive. | EUR-Lex Dir. 2023/970 |
|
Data Act
Reg. (UE) 2023/2854
|
No published cases | — | No enforcement cases published with official primary source. The Data Act applies since September 12, 2025. For infringements involving personal data, data protection authorities can impose GDPR fines (up to €20M or 4% turnover, Art. 40(4)). Penalties for general infringements without personal data are defined by each Member State (Art. 40). | EUR-Lex Reg. 2023/2854 |
|
RED
Dir. 2014/53/UE
|
Active enforcement | Safety Gate alerts, product withdrawals | Electrical appliances and radio equipment accounted for 11% of Safety Gate alerts in 2025, including chargers, Bluetooth devices, and equipment with incorrect CE marking. No individual penalty decisions published with official primary source have been identified specifically under the RED (penalties are defined by each Member State, Art. 45). | Safety Gate 2025 + EUR-Lex Dir. 2014/53 |
|
RoHS
Dir. 2011/65/UE
|
Active enforcement | Market surveillance, customs rejections, product withdrawals | EU market surveillance reports indicate that approximately half of electronic products tested in 2025 did not pass basic RoHS requirements, according to industry sources. 26 products lost access to the European market for non-compliance with RoHS and the Persistent Organic Pollutants Regulation. Penalties are defined by each Member State (Art. 19). In Germany, RoHS infringements can result in fines and market withdrawal. | EUR-Lex Dir. 2011/65 |
|
Toy Safety
Reg. (UE) 2025/2509
|
Active enforcement (Dir. 2009/48) | Safety Gate alerts, product withdrawals, recalls | Toys accounted for 16% of Safety Gate alerts in 2025 (second most notified category). The new Regulation (EU) 2025/2509 (replacing Dir. 2009/48/EC) applies in phases from 2026, with full application on 08/01/2030. Current enforcement operates under Directive 2009/48/EC still in force. Alerts include choking risk, dangerous chemical substances, and small detachable parts. | Safety Gate 2025 + EUR-Lex |
Safety Gate Alerts — Key Data 2025
Summary of the most frequently notified product categories, risks, and measures through the Safety Gate system in 2025, according to the Annual Report published by the European Commission.
| Category | % alerts 2025 | Main risk | Detail | Source |
|---|---|---|---|---|
| Cosmetics | 36 % | Chemical | Nearly 80% of cosmetics alerts were related to the presence of BMHCA, a banned synthetic fragrance with harmful effects on the reproductive system and skin irritation. First-time cases of nail polish containing TPO, a chemical banned since September 2025, were reported. | IP/26/537 |
| Toys | 16 % | Choking / Chemical | Small detachable parts, dangerous chemical substances. Follow-up notifications about toys represented 12% of total follow-ups (compared to 7% in 2024). | IP/26/537 |
| Electrical appliances and equipment | 11 % | Electric shock / Fire | Chargers, power adapters, luminaires. Risk of electric shock, short circuit, and ignition. Includes products notified under RED and low voltage regulations. | IP/26/537 |
| Risk type: Chemical | 53 % | All categories | Risks from dangerous chemical substances were the primary cause of more than half of all notifications in 2025. | IP/26/537 |
| Risk type: Injuries | 14 % | All categories | Risk of personal injury from mechanical defects, sharp edges, unstable parts, or design flaws. | IP/26/537 |
| Origin: China | 43 % | — | 2,006 of the 4,671 notifications corresponded to products originating from China. Italy was the European country of origin with the most notifications (614), followed by Germany (288). | IP/26/537 + Euronews |
How enforcement works in the EU
Enforcement of European regulations is distributed across different types of authorities depending on the regulated subject matter. There is no single enforcement authority for all regulations.
Market surveillance authorities
Responsible for enforcement of the GPSR, CRA, RED, RoHS, Toy Safety, and partially the AI Act (high-risk AI systems). They conduct inspections, order withdrawals, impose penalties, and notify Safety Gate. Each Member State designates its own authorities (in Spain, by subject matter: AEMPS, OEPM, Ministry of Industry, Autonomous Communities, etc.).
AI Office (European Commission)
Supervises and enforces obligations for providers of general-purpose AI (GPAI) models exclusively (Art. 88 AI Act). Operational since August 2, 2025. Its enforcement powers (requesting documentation, conducting evaluations, imposing fines) enter into force on August 2, 2026.
Data protection authorities
Competent for Data Act infringements affecting personal data (Art. 40(4)), applying the GDPR penalty regime. They also intervene when AI systems improperly process personal data. In Spain: AEPD.
Labor authorities
Responsible for enforcement of the Pay Transparency Directive once transposed. In Spain, the Labor and Social Security Inspection will be competent. The transposition deadline expires on June 7, 2026.
EUDR competent authorities
Each Member State designates one or more competent authorities for EUDR enforcement. They conduct unannounced inspections, verify due diligence statements, and impose fines and confiscation. Minimum inspection rates: 9% of operators in high-risk countries, 3% in standard risk, 1% in low risk.
Customs authorities
They intercept non-compliant products at the border under European regulations. They can stop clearances, hold goods, and collaborate with market surveillance authorities. Their role is key for RoHS, RED, Toy Safety, and EUDR.
Official sources
All data on this page comes exclusively from the following official sources. Each data point has been checked against the indicated primary source.
IP/26/537 — European Commission
op.europa.eu — DG JUST
ec.europa.eu/safety-gate-alerts
digital-strategy.ec.europa.eu
eur-lex.europa.eu/eli/reg/2023/988/oj
eur-lex.europa.eu/eli/reg/2024/2847/oj
eur-lex.europa.eu/eli/reg/2024/1689/oj
eur-lex.europa.eu/eli/reg/2023/1115/oj
eur-lex.europa.eu/eli/reg/2023/2854/oj
eur-lex.europa.eu/eli/dir/2019/882/oj
eur-lex.europa.eu/eli/dir/2023/970/oj
eur-lex.europa.eu/eli/dir/2014/53/oj
eur-lex.europa.eu/eli/dir/2011/65/oj
eur-lex.europa.eu/eli/reg/2025/2509/oj
eur-lex.europa.eu/eli/reg/2025/2650/oj
gesetze-im-internet.de/prodsg