Skip to content

eBay and Etsy Sellers: Compliance Applies to You Too

When the EU's GPSR enforcement wave hit marketplace sellers, the pattern repeated itself across the platforms: sellers who'd never thought of themselves as "real businesses" — a woodworker selling children's toys on Etsy, a vintage dealer on eBay — found their listings blocked for missing a responsible person in the EU. Same message, same requirement, same surprise.

The underlying rule of marketplaces: the platform takes the payment and the traffic, but you are the economic operator. The law has applied to individual sellers for years; the platforms started enforcing it recently. Here's what actually applies and what to do about it.

The EU side: GPSR and the responsible person

The EU's General Product Safety Regulation applies to any product sold to EU consumers, whoever sells it, however small the operation. For marketplace sellers, the sharpest practical requirement is the responsible person: an economic operator established in the EU who takes responsibility for product safety. Non-EU sellers — including UK and US sellers shipping into the EU — need one, and eBay and Etsy now require the information in the listing for many categories.

No responsible person, no listing. The platforms block the product rather than carry the risk themselves.

There are also the standing requirements that predate GPSR: the product must actually be safe, carry the required warnings and instructions in the language of the destination country, and bear traceability information — manufacturer identity and contact details on the product or packaging.

One nuance for the vintage and handmade crowd: second-hand and one-off items sit in a grey zone, but "vintage" has never meant "exempt from safety law." A 1970s toy that doesn't meet modern safety standards is still your problem if a child is injured. The safe assumption is that anything sold as a product is in scope, and anything marketed to children is in deeper scope.

The US side: CPSC and state law

In the US, the CPSC's rules apply to marketplace sellers the same way they apply to importers. Sell toys? You need a Children's Product Certificate. Sell candles? Flammability requirements. Apparel? Care labels and flammability standards. The CPSC doesn't care that Etsy is a hobby platform for you.

Then add state law. Ship anything to California and Proposition 65 warnings may apply. State PFAS restrictions cover more product categories every year — we covered them here. Marketplace sellers tend to discover these through a customer complaint or a platform takedown, which is the expensive way.

The UK side

Since Brexit, the UK runs its own product safety regime, and it has been tightening the same screw: many goods sold to UK consumers now require a UK-based responsible person, mirroring the EU model. If you sell into both the UK and the EU, you need both — an EU responsible person and a UK one.

The documentation kit that keeps listings live

You don't need a compliance department. You need a small, disciplined kit:

  1. A safety basis per product. What makes this product safe — the standard you designed to (EN 71 for toys, for example), the test report if you have one, the supplier's declaration if you don't. Ask your supplier the four questions and keep the answers.
  2. A responsible person. Services that provide an EU or UK responsible person for small sellers cost roughly a few hundred euros per year per brand. Compare carefully — this is an entity that receives legal responsibility, so read the terms.
  3. Traceability on the product. Your name and address, or your responsible person's, on the label or packaging. It's the cheapest requirement and the most commonly missed one.
  4. The information in your listings. Platforms are asking for manufacturer details, safety information and responsible person data. Put it in before they ask.

If you dropship or resell other people's goods, the same kit applies but the data has to come from someone else — we covered that mess in the dropshipper guide, and the Amazon variant here.

One advantage of being small is that you can run your whole compliance footprint on a single page per product: the safety basis, the certificates, the responsible person details, the traceability info — one URL, always current, pasted into every eBay and Etsy listing. When the platform asks, you send the link. When a customer asks, they check it themselves.

That's the model Sustalium is built on — €10 per document, one live, verifiable page per product, all of them under a Trust Hex: the trust-center idea, but for shops instead of SaaS. Your product pages carry the goods; the shop itself carries its own stack — terms, GDPR record, responsible person details — at one verifiable address, because services and shops carry more compliance than most sellers realise. Marketplace selling has grown up, and the sellers who treat a small compliance kit as part of their craft are the ones whose listings stay live through every platform crackdown. Appoint the responsible person, put the safety basis online, and the blocked listings come back. For most sellers the whole fix is an afternoon's work.

How Sustalium Helps Marketplace Sellers

  • One page per product — safety basis, certificates and responsible person details on a single URL you paste into every listing.
  • A Trust Hex for the shop itself — terms, GDPR record and responsible person details at one verifiable company address.
  • Current by design — update the safety basis once and every listing that links to it stays correct.

One Link in Every Listing Keeps the Shop Open

Put your whole compliance footprint on verifiable pages the platforms and customers can check themselves. Start with a free draft: no card needed, publish the verifiable version when you are ready.

Start Your GPSR Compliance →

Frequently Asked Questions

Do I need a responsible person for second-hand goods?

Safety law still applies to everything you sell, and the GPSR grey zone around vintage items is not a shield — especially for anything marketed to children. Assume in scope.

What does a responsible person cost?

A few hundred euros per year per brand through established providers, for EU or UK coverage. Read the terms — this entity receives legal responsibility.

Does the UK need its own responsible person?

Yes. The UK's product safety regime is tightening the same way, and many goods sold to UK consumers now require a UK-based responsible person in addition to an EU one.

Last updated: September 17, 2026

Global Digital Trust & Compliance

Sustalium is the digital-first platform for managing complex business certificates and sustainability declarations across global supply chains.

Environment & ESG
  • Digital Product Passport (DPP)
  • Carbon & Water Footprint
  • Circularity & Reuse (ISO 14021)
  • De-Forestation Free
Product & Food Safety
  • FSMA 204 (FDA Traceability)
  • REACH & RoHS Compliance
  • PFAS-Free & VOC Declarations
  • Prop 65 & TSCA Title VI
Social & Ethical
  • ISO 26000 Responsibility
  • Modern Slavery Statements
  • UFLPA Forced Labor Traceability
  • Ethical Labor Declarations
Governance & Trade
  • Swiss Made & Origin Claims
  • GDPR & AI Ethics (EU AI Act)
  • CE Marking & UKCA Conformity
  • Bill S-211 (Canada) Reporting
Start Free

Have questions about a specific standard?
Contact our compliance team at compliance@sustalium.com