How to Build a RoHS Compliance Management System for Electronics¶

Manufacturing electronic and electrical equipment (EEE) involves complex global supply chains, often requiring thousands of individual components to build a single finished product. If just one of those components—down to the smallest resistor, capacitor, or plastic casing—contains a restricted hazardous substance above the legal threshold, your entire product is barred from entering the European Union.

This is the reality of the Restriction of Hazardous Substances (RoHS) Directive (2011/65/EU), commonly referred to as RoHS 2 (and updated by RoHS 3). Ensuring that your products are compliant is not a one-time event; it requires a continuous, dynamic RoHS Compliance Management System (CMS).

In this guide, we will break down the exact technical steps required to build a system that satisfies market surveillance authorities and ensures uninterrupted market access.

Understanding the Scope: The 10 Restricted Substances¶

Before building your system, your engineering and procurement teams must clearly understand the baseline. The RoHS directive restricts the use of 10 specific substances at the "homogeneous material" level.

A homogeneous material is one that cannot be mechanically disjointed into different materials (e.g., the plastic coating on a wire is one homogeneous material, the copper wire inside is another).

The restricted substances and their maximum concentration values (by weight in homogeneous materials) are: 1. Lead (Pb): < 1000 ppm (0.1%) 2. Mercury (Hg): < 1000 ppm (0.1%) 3. Cadmium (Cd): < 100 ppm (0.01%) (Note the lower threshold) 4. Hexavalent Chromium (Cr VI): < 1000 ppm (0.1%) 5. Polybrominated Biphenyls (PBB): < 1000 ppm (0.1%) 6. Polybrominated Diphenyl Ethers (PBDE): < 1000 ppm (0.1%) 7. Bis(2-ethylhexyl) phthalate (DEHP): < 1000 ppm (0.1%) 8. Butyl benzyl phthalate (BBP): < 1000 ppm (0.1%) 9. Dibutyl phthalate (DBP): < 1000 ppm (0.1%) 10. Diisobutyl phthalate (DIBP): < 1000 ppm (0.1%)

Step 1: Bill of Materials (BOM) Scrubbing and Risk Assessment¶

The foundation of any RoHS CMS is the Bill of Materials (BOM). You cannot manage what you have not mapped.

1. Upload your BOM: Extract your complete component list from your ERP or PLM system.
2. Identify High-Risk Components: Not all parts carry the same risk. For instance, brass components have a high risk of containing Lead (Pb), while flexible PVC cables have a high risk of containing restricted phthalates (DEHP, BBP, DBP, DIBP).
3. Determine Supplier Risk: A supplier based in a region with strict environmental laws who has provided accurate data for 5 years is a low risk. A new, unverified supplier offering components at a suspiciously low price is a critical risk.

Step 2: Data Collection (Declarations vs. Analytical Testing)¶

You have two primary ways to prove a component is RoHS compliant: Supplier Declarations and Analytical Testing (Lab Reports).

Testing every single homogeneous material in your product in a laboratory (via XRF screening or wet chemistry) is financially impossible for most SMEs. Therefore, the industry relies heavily on the EN IEC 63000:2018 standard, which allows manufacturers to use supplier declarations to build their Technical Documentation.

You must request one of the following from your suppliers: * Full Material Declaration (FMD): A detailed breakdown of every chemical substance in the component. (The gold standard). * Certificate of Compliance (CoC): A legally binding statement from the supplier that the component meets RoHS thresholds.

Step 3: Managing Exemptions and Expiration Dates¶

RoHS is not a blanket ban; it acknowledges that for certain technologies, no scientific alternative to a restricted substance exists yet. The directive includes a list of temporary exemptions (found in Annex III and Annex IV).

For example, Exemption 6© allows up to 4% lead by weight in copper alloys.

However, exemptions expire. A critical part of your CMS is tracking the expiration dates of the exemptions your products rely on. If an exemption expires, you must have engineered out the hazardous substance before that date, or your product becomes illegal to sell.

Step 4: Building the Technical Construction File (TCF)¶

To legally affix the CE Mark to your electronics, you must draw up an EU Declaration of Conformity (DoC). But the DoC is just the cover page; it must be backed by a Technical Construction File (TCF) compiled in accordance with EN IEC 63000.

Your TCF must include: * A general description of the product. * The risk assessment of components and materials. * The compliance evidence (CoCs, FMDs, and test reports) mapped directly to the BOM. * Manufacturing process controls ensuring continued compliance.

Step 5: Automating Your CMS with Sustalium¶

Replacing manual spreadsheets with a dedicated REACH & RoHS compliance software is the only scalable way to manage electronic supply chains.

Sustalium replaces the endless email chains with structured supplier input forms. You upload your BOM, and the platform automatically requests CoCs, FMDs, and test reports from your suppliers. The system tracks RoHS exemption expiry dates and alerts your engineering team months before a critical exemption lapses.

Once your component data is validated, Sustalium instantly generates the compliance dossier and Declaration of Conformity that customs authorities require.

Frequently Asked Questions¶

Does RoHS apply to packaging? No. The packaging surrounding the electronic product is covered by the EU Packaging and Packaging Waste Regulation (PPWR), which has its own restrictions on heavy metals and mandates recycled content. RoHS only applies to the electrical and electronic equipment itself.

What is the difference between RoHS 2 and RoHS 3? "RoHS 2" refers to Directive 2011/65/EU. "RoHS 3" is not a new directive, but a common industry term for Directive (EU) 2015/863, which amended RoHS 2 by adding four phthalates (DEHP, BBP, DBP, DIBP) to the restricted substances list, bringing the total to 10.

Do I need a separate RoHS mark on my product? No. Since the introduction of RoHS 2 in 2011, RoHS compliance is tied directly to the CE Mark. By affixing the CE Mark to your electronic product, you are legally declaring that it is RoHS compliant.

Related Articles¶

• RoHS vs. REACH Declarations: Which Do Your Component Suppliers Actually Need to Provide? — Clear up the confusion in your supply chain.

Last updated: June 8, 2026