Consumer products compliance is one of the most fragmented areas of product regulation, and one of the least discussed by compliance software vendors. A single consumer good sold in the United States and the European Union can fall under federal product safety law, a California warning statute, a patchwork of state chemical bans, and an EU packaging regulation at the same time. Each regime asks a different question about the same physical product, and each expects different evidence.

This guide explains what consumer products compliance requires across the four frameworks that most often cross-cut a consumer goods portfolio: the U.S. Consumer Product Safety Commission (CPSC) regime, California Proposition 65, state-level PFAS restrictions, and the EU Packaging and Packaging Waste Regulation (PPWR). It is written for consumer-goods compliance managers, product stewardship teams, and the executives who own product-market risk.

Key Takeaways

📌 Consumer products compliance is cross-cutting: one product can trigger CPSC, Prop 65, state PFAS, and EU PPWR obligations simultaneously.

⚠️ CPSC treats children's product limits as prohibitions, not warnings. A product above the lead or phthalate limit is a banned hazardous substance.

📄 Children's products require third-party testing and a Children's Product Certificate; general-use products require a General Certificate of Conformity.

⏳ Prop 65 short-form warnings must name at least one chemical per health endpoint for products manufactured on or after January 1, 2028.

🔗 State PFAS bans and the EU PPWR push substance obligations down to the material and supplier-declaration level.

🤖 The recurring failure point is documentation: substance data, supplier declarations, and audit evidence, not the rules themselves.

What Consumer Products Compliance Actually Covers

Consumer products compliance refers to the regulatory obligations that apply to goods sold to the general public, spanning physical safety, chemical content, mandatory warnings, and packaging. For a global manufacturer or brand, these obligations rarely live in one agency or one jurisdiction.

The practical scope breaks into four recurring categories. Product safety and mechanical requirements sit largely with the CPSC in the United States. Chemical exposure warnings are driven by California Proposition 65. Substance restrictions increasingly come from state PFAS statutes. Packaging obligations, including PFAS limits, come from the EU PPWR. A serious program treats these as one connected data problem rather than four separate projects, which is why many teams centralize the work on their consumer goods compliance footprint.

US Product Safety Rules: CPSC and the CPSIA

The Consumer Product Safety Improvement Act of 2008 (CPSIA) is the core federal statute for consumer product safety in the United States, administered by the CPSC. It sets enforceable content limits, testing rules, certification requirements, and labeling obligations. These are not disclosure rules. A product that exceeds a CPSIA limit is a banned hazardous substance, not a product that simply needs a warning.

Children's Products Versus General-Use Products

CPSIA draws a sharp line between children's products and general-use products, and the documentation differs accordingly.

• Children's products require third-party testing at a CPSC-accepted laboratory and a Children's Product Certificate (CPC). A supplier's in-house test report does not satisfy the law.

• General-use products require a General Certificate of Conformity (GCC) based on a reasonable testing program, without mandatory third-party testing.

Component-supplier certification can support a CPC only when it is itself based on third-party testing from a CPSC-accepted lab. This distinction matters for teams managing product safety certification across mixed portfolios.

Consumer products compliance decision between CPC and GCC certification under CPSIA

Click on image to view full

Lead, Phthalates, and Third-Party Testing

Three requirements catch most regulated consumer products. The lead and phthalate limits are the values compliance engineers are most often asked to confirm.

The eight prohibited phthalates are DEHP, DBP, and BBP, plus DINP, DIBP, DPENP, DHEXP, and DCHP. The toy safety standard ASTM F963 is mandatory for children's toys. Verify current limits and accepted test methods directly against the CPSC before certifying.

Tracking Labels and Documentation

CPSIA also requires a permanent tracking label on children's products and their packaging so that a recall can be traced to a batch, date, and facility. The label, the certificate, and the underlying test reports form a single evidence chain. When any link is missing, the product is not defensible during a customer audit or a CPSC request, which is why certificate and document management is central to consumer products compliance.

California Proposition 65: Warnings and the 2028 Short-Form Deadline

California's Safe Drinking Water and Toxic Enforcement Act of 1986, known as Proposition 65, requires a clear and reasonable warning before knowingly exposing a person in California to a listed chemical known to cause cancer or reproductive harm. The Office of Environmental Health Hazard Assessment (OEHHA) administers the program and maintains the list, which exceeds 900 chemicals.

Prop 65 is enforced heavily through private litigation, which makes warning accuracy a commercial risk, not only a regulatory one. Many consumer product companies manage the exposure through the Proposition 65 framework alongside their other chemical obligations.

The most significant recent change affects the short-form warning. OEHHA adopted amendments effective January 1, 2025, with a three-year transition period.

Products manufactured before January 1, 2028 with the older short-form warning retain an unlimited sell-through period. Confirm current warning content against OEHHA's P65Warnings portal. The practical effect is that companies must identify at least one listed chemical per product, which pushes the obligation back to substance-level data. Certivo's guidance on the 2028 short-form warning changes covers the transition in detail.

PFAS Restrictions Are Now a Consumer Product Problem

Per- and polyfluoroalkyl substances (PFAS) have moved from an industrial chemical concern to a mainstream consumer product restriction. For consumer goods, two forces are converging: a U.S. state patchwork and the EU PPWR. Both are best managed through a single PFAS compliance view rather than jurisdiction by jurisdiction.

The US State Patchwork

Multiple states now restrict intentionally added PFAS in defined consumer product categories, with different definitions and timelines. Minnesota's Amara's Law banned intentionally added PFAS in eleven product categories from January 1, 2025, and requires manufacturers to report intentionally added PFAS in products sold in the state. That reporting deadline has shifted more than once; confirm the current date with the Minnesota Pollution Control Agency, as the initial 2026 deadline was extended. A broader Minnesota ban is scheduled for 2032 unless a currently unavoidable use determination applies.

Other states, including California, Colorado, Connecticut, Maine, Vermont, New York, and Washington, have their own category bans, disclosures, or reporting duties taking effect across 2025 and 2026. Definitions of intentionally added PFAS vary, and some states use total organic fluorine thresholds. Certivo's overview of the state PFAS regulations for 2026 maps the category-level differences.

EU PPWR PFAS Limits for Food-Contact Packaging

The EU Packaging and Packaging Waste Regulation, Regulation (EU) 2025/40, entered into force on February 11, 2025 and applies generally from August 12, 2026. From that date, food-contact packaging placed on the EU market may not contain PFAS at or above the Article 5 limits below.

The Commission has clarified there is no general stock-exhaustion period for food-contact packaging above these limits. Verify the values against EUR-Lex Regulation (EU) 2025/40 and the European Commission. Certivo's briefing on the EU packaging PFAS ban explains the testing implications.

Consumer products compliance comparison of US state PFAS rules and EU PPWR limits

Click on image to view full

Where Consumer Products Compliance Breaks Down: The Documentation Gap

The rules are public. What most platforms do not address is that consumer products compliance fails at the evidence layer, not the regulation layer. Three problems recur across enterprise programs.

First, substance data lives at the material and component level, but obligations attach at the finished-product and SKU level. Without a link between the bill of materials and the regulation, a team cannot answer which finished products contain a Prop 65 chemical or intentionally added PFAS. BOM-level substance and threshold mapping closes that gap.

Second, evidence depends on suppliers who use inconsistent formats and respond slowly. Certificates, declarations, and test reports arrive as scattered PDFs and emails. Third, audits ask for point-in-time proof: what was known, when, and on whose authority. Consumer products compliance therefore becomes a question of audit-ready documentation and traceable evidence, whether the request comes from a retailer, the CPSC, or an EU market-surveillance authority.

Building a Defensible Consumer Products Compliance Program

A workable program does not require solving every framework at once. It requires a consistent method applied across all of them.

1. Inventory obligations by product and market. Map each SKU to the frameworks it triggers: CPSC, Prop 65, state PFAS, PPWR, and any others.

2. Push requirements to the BOM. Identify which materials and components carry restricted substances, and set thresholds against them.

3. Standardize supplier data collection. Use consistent declaration and certificate formats so responses are comparable and validated at intake.

4. Maintain an evidence chain. Keep test reports, certificates, and warning decisions with dates, versions, and approval authority.

5. Monitor regulatory change. State PFAS laws and Prop 65 listings change frequently, so track effective dates and new listings continuously.

This is where a centralized materials and environmental compliance approach outperforms spreadsheets, which cannot hold version history or scale across a multi-market portfolio. For the wider methodology, see Certivo's guide to product compliance management.

How Certivo Supports Consumer Products Compliance

Certivo is an AI-native compliance platform that acts as the system of record for product and substance compliance. For consumer products, it connects regulatory requirements to the BOM, collects and validates supplier declarations, and maintains time-stamped evidence for audits. CORA, Certivo's regulatory intelligence layer, monitors changes across frameworks such as Prop 65 listings, state PFAS statutes, and the PPWR, and maps them to affected products.

The objective is not to eliminate compliance risk, which no software can do. It is to reduce surprises, speed evidence retrieval, and give compliance, quality, and procurement teams a shared view. That combines chemical and hazmat compliance with substance-level tracking so a company can answer a customer or regulator quickly and consistently.

Consumer products compliance is ultimately a data discipline. The companies that treat it as one, rather than as a set of disconnected labeling tasks, are the ones that stay audit-ready as the rules expand. To map your consumer product substance and documentation obligations in one place, request a compliance review with a Certivo specialist.