Product safety and liability: recalls, standards and who pays

Both regimes share a logic: small parts that fit inside a standardized cylinder (mimicking a child's throat) fail the test automatically, regardless of the toy's popularity or price point.

Labeling: the paper trail that assigns blame later

Labeling rules are not cosmetic. They are the evidentiary backbone of any later liability claim.

CPSIA requires a tracking label on children's products: manufacturer name, location and date of production, and batch/run number. This is why a recall notice can say "Model X, lot numbers beginning with 4471" rather than recalling every unit ever sold. Without traceable labeling, a court (or the CPSC) cannot cleanly limit a recall to the defective batch, which pushes liability toward the party with the weakest paperwork.

Age grading labels ("Not for children under 3") also matter legally. If a toy is correctly labeled for ages 6+ and a parent gives it to a toddler who chokes, the manufacturer's defense is stronger. If the label is missing, ambiguous, or the toy was marketed to a younger audience through packaging imagery that contradicts the label (a real pattern regulators watch for), liability shifts back toward the seller.

The three-party liability chain

This is where the toy recall stops being a compliance exercise and becomes a legal one.

The manufacturer carries primary liability for defective design or manufacturing (a legal doctrine called strict product liability, meaning the injured party doesn't need to prove negligence, just that the product was defective and caused harm). If the eye piece detached because of a design flaw, the manufacturer is the anchor defendant.

The importer (the company that brought the toy into the US or EU) has an independent legal duty under both CPSIA and EU market surveillance rules. Under the EU's General Product Safety Regulation (GPSR, updated 2023, applying from December 2024), an importer of a non-EU product must verify a "responsible person" is established in the EU market, keep technical documentation, and act as a point of contact for regulators. In the US, importers must file a Certificate of Conformity confirming CPSIA testing was done. If the importer waved the container through without valid test certificates, it becomes independently liable, not just a pass-through.

The retailer is often assumed to be shielded because "we just sell what's on the shelf." That's false in practice. Retailers can be named in liability suits, especially in US courts, under theories of negligent failure to warn or breach of implied warranty of merchantability. A retailer that continued selling the toy after receiving a CPSC recall notice, or that private-labeled the toy under its own brand, takes on manufacturer-level exposure. Private label is the critical trap here: Target, Walmart, and IKEA all face manufacturer-style liability for their own-brand goods because legally, they *are* the manufacturer of record.

How the toy recall actually unwinds

1. Customs/import stage: US Customs and Border Protection (CBP) screens for CPSC-flagged categories; a missing Certificate of Conformity can trigger a hold, but many shipments clear on paperwork alone without physical testing.

2. Retail stage: The retailer's own quality assurance team, or a consumer complaint, or a CPSC-mandated report from the manufacturer, surfaces the choking incidents.

3. Recall stage: Under CPSIA, manufacturers, importers, *and* retailers have an independent legal duty to report a known safety defect to the CPSC within 24 hours of becoming aware of it. Failure to report is itself a violation, separate from the underlying defect, and has resulted in multimillion-dollar penalties in real CPSC enforcement actions (see the CPSC's public enforcement database).

4. Litigation stage: The injured party's family sues all three parties. Courts apportion liability based on contracts (does the manufacturer's supply agreement indemnify the retailer?), on who had notice of the defect and when, and on whether each party met its own regulatory duties (testing, labeling, timely reporting).

The party that documented its compliance steps, kept test certificates, and reported promptly usually pays less, or gets indemnified by contract. The party with gaps in its paperwork absorbs disproportionate liability, even if it didn't design the flawed part.

Who actually pays, in practice

Liability rarely lands 100% on one party. In real settlements and regulatory penalties, cost gets split three ways in practice:

• Manufacturer: design/manufacturing defect damages, product liability insurance claims, and CPSC civil penalties for the underlying hazard.
• Importer: penalties for inadequate certification, plus contractual indemnification claims from the retailer if the importer's contract guaranteed compliance.
• Retailer: recall logistics costs (pulling stock, refunding customers, reverse logistics), reputational damage, and liability exposure if it kept selling post-notice or sold under private label.

A useful mental model: regulatory liability (fines to CPSC or an EU national authority for non-compliance) is largely about *process failures* (no testing, no timely report, no traceability). Civil liability (lawsuits from injured consumers) is about *harm* and follows whoever the plaintiff's lawyers can most plausibly tie to the defect, contract, or warning failure. A company can be fully compliant on paper and still lose a civil suit; it can also be non-compliant and never get sued if no one is hurt. Professionals need to manage both risks separately.

🎬 [VIDEO: "How Product Recalls Work" - https://www.youtube.com/results?search_query=how+product+recalls+work+cpsc - search for CPSC or FDA explainer content walking through the recall process end to end]

What this means day to day

For a retail buyer or compliance manager, this translates into concrete checklist items before any product, especially anything touching children, food, or electronics, reaches a shelf:

• Confirm the Certificate of Conformity (US) or CE/GPSR documentation (EU) exists and matches the actual production batch, not a prior one.
• Verify tracking labels meet CPSIA/EN 71 requirements before receiving inventory.
• Build supplier contracts with explicit indemnification clauses for safety defects.
• Set an internal 24-hour escalation protocol for any safety complaint, since regulatory reporting clocks start immediately, not after "internal investigation."
• Treat private label lines as manufacturer-level liability, with manufacturer-level testing rigor.

Key Takeaways

• Product safety law splits liability across manufacturer, importer, and retailer; each has an independent legal duty (testing, certification, or reporting) that can trigger liability even without direct fault for the defect itself.
• In the US, CPSIA and the CPSC govern children's product safety; in the EU, the Toy Safety Directive, CE marking, and the 2024 General Product Safety Regulation play the equivalent role.
• Labeling (tracking labels, age grading) is not bureaucratic overhead: it is the evidence that determines how narrow a recall is and who bears blame.
• All three parties in the US must report known safety hazards to the CPSC within 24 hours; failure to report is a separate, penalizable violation from the defect itself.
• Retailers, especially with private label goods, carry real manufacturer-style liability exposure and cannot rely on "we just sold it" as a legal defense.