# Product safety and liability: recalls, standards and who pays
A container of 40,000 plastic dinosaur toys clears customs in Long Beach in March. By June, three children have choked on a detachable eye piece, a pediatrician has filed a report, and a national retailer is pulling the toy from 1,800 stores while a law firm drafts a complaint naming the manufacturer, the importer, and the retailer as co-defendants. Nobody in that chain thought they were the "responsible party" until the lawsuit arrived. This lesson traces exactly how that blame gets assigned, and what each link in the chain must do beforehand to avoid it.
A toy is not "safe" in the abstract. It is safe because it passed specific, codified tests.
In the United States, toys fall under the Consumer Product Safety Act (CPSA) and, for children's products specifically, the Consumer Product Safety Improvement Act of 2008 (CPSIA), passed after a wave of lead-paint recalls from Chinese-manufactured toys. CPSIA requires third-party testing for lead, phthalates (a plasticizer linked to health risks), and small-parts choking hazards for products aimed at children under 12. The regulator is the Consumer Product Safety Commission (CPSC), an independent federal agency with recall authority.
In the EU, the equivalent is the Toy Safety Directive (2009/48/EC), enforced at the national level but coordinated through the EU's rapid alert system for dangerous products, Safety Gate (free, public, searchable). Toys sold in the EU must carry the CE mark, a manufacturer's declaration that the product meets essential safety requirements, including mechanical, chemical, and choking-hazard standards under EN 71, the harmonized European toy safety standard.
Both regimes share a logic: small parts that fit inside a standardized cylinder (mimicking a child's throat) fail the test automatically, regardless of the toy's popularity or price point.
Labeling rules are not cosmetic. They are the evidentiary backbone of any later liability claim.
CPSIA requires a tracking label on children's products: manufacturer name, location and date of production, and batch/run number. This is why a recall notice can say "Model X, lot numbers beginning with 4471" rather than recalling every unit ever sold. Without traceable labeling, a court (or the CPSC) cannot cleanly limit a recall to the defective batch, which pushes liability toward the party with the weakest paperwork.
Age grading labels ("Not for children under 3") also matter legally. If a toy is correctly labeled for ages 6+ and a parent gives it to a toddler who chokes, the manufacturer's defense is stronger. If the label is missing, ambiguous, or the toy was marketed to a younger audience through packaging imagery that contradicts the label (a real pattern regulators watch for), liability shifts back toward the seller.
This is where the toy recall stops being a compliance exercise and becomes a legal one.
The manufacturer carries primary liability for defective design or manufacturing (a legal doctrine called strict product liability, meaning the injured party doesn't need to prove negligence, just that the product was defective and caused harm). If the eye piece detached because of a design flaw, the manufacturer is the anchor defendant.
The importer (the company that brought the toy into the US or EU) has an independent legal duty under both CPSIA and EU market surveillance rules. Under the EU's General Product Safety Regulation (GPSR, updated 2023, applying from December 2024), an importer of a non-EU product must verify a "responsible person" is established in the EU market, keep technical documentation, and act as a point of contact for regulators. In the US, importers must file a Certificate of Conformity confirming CPSIA testing was done. If the importer waved the container through without valid test certificates, it becomes independently liable, not just a pass-through.
The retailer is often assumed to be shielded because "we just sell what's on the shelf." That's false in practice. Retailers can be named in liability suits, especially in US courts, under theories of negligent failure to warn or breach of implied warranty of merchantability. A retailer that continued selling the toy after receiving a CPSC recall notice, or that private-labeled the toy under its own brand, takes on manufacturer-level exposure. Private label is the critical trap here: Target, Walmart, and IKEA all face manufacturer-style liability for their own-brand goods because legally, they *are* the manufacturer of record.
1. Customs/import stage: US Customs and Border Protection (CBP) screens for CPSC-flagged categories; a missing Certificate of Conformity can trigger a hold, but many shipments clear on paperwork alone without physical testing.
2. Retail stage: The retailer's own quality assurance team, or a consumer complaint, or a CPSC-mandated report from the manufacturer, surfaces the choking incidents.
3. Recall stage: Under CPSIA, manufacturers, importers, *and* retailers have an independent legal duty to report a known safety defect to the CPSC within 24 hours of becoming aware of it. Failure to report is itself a violation, separate from the underlying defect, and has resulted in multimillion-dollar penalties in real CPSC enforcement actions (see the CPSC's public enforcement database).
4. Litigation stage: The injured party's family sues all three parties. Courts apportion liability based on contracts (does the manufacturer's supply agreement indemnify the retailer?), on who had notice of the defect and when, and on whether each party met its own regulatory duties (testing, labeling, timely reporting).
The party that documented its compliance steps, kept test certificates, and reported promptly usually pays less, or gets indemnified by contract. The party with gaps in its paperwork absorbs disproportionate liability, even if it didn't design the flawed part.
Knowledge check
1. Why did the CPSIA specifically mandate third-party testing for children's products rather than relying on manufacturer self-certification alone?
2. A toy manufacturer wants to sell the same toy in both the US and EU markets. What does this imply about compliance?
3. What is the underlying logic behind using a standardized cylinder test to assess choking hazards in toys, as used in both US and EU regimes?
4. Select ALL correct answers about why multiple parties (manufacturer, importer, retailer) can be named as co-defendants when a product injures a consumer.
Select all the correct answers.
5. Select ALL correct answers about the role of the Consumer Product Safety Commission (CPSC) and the EU's Safety Gate system.
Select all the correct answers.
Liability rarely lands 100% on one party. In real settlements and regulatory penalties, cost gets split three ways in practice:
A useful mental model: regulatory liability (fines to CPSC or an EU national authority for non-compliance) is largely about *process failures* (no testing, no timely report, no traceability). Civil liability (lawsuits from injured consumers) is about *harm* and follows whoever the plaintiff's lawyers can most plausibly tie to the defect, contract, or warning failure. A company can be fully compliant on paper and still lose a civil suit; it can also be non-compliant and never get sued if no one is hurt. Professionals need to manage both risks separately.
🎬 [VIDEO: "How Product Recalls Work" - https://www.youtube.com/results?search_query=how+product+recalls+work+cpsc - search for CPSC or FDA explainer content walking through the recall process end to end]
For a retail buyer or compliance manager, this translates into concrete checklist items before any product, especially anything touching children, food, or electronics, reaches a shelf: