How to Conduct a GPSR Risk Assessment for Private-Label Products?

Step 1: Describe the Product and Its Full Lifecycle

Start by documenting what the product is and how consumers are expected to interact with it.
The description should include:

• Materials and components.
• Dimensions and weight.
• Functional characteristics.
• Performance limitations.
• Expected product lifetime.
• Manufacturing process.
• Packaging.
• Installation requirements.
• Normal use.
• Cleaning and maintenance.
• Repair requirements.
• Transportation.
• Storage.
• Disposal.

Avoid descriptions that are too general.

For example, writing “desk lamp” does not provide enough information for a technical file.
Instead, the file could identify the lamp’s model, dimensions, materials, power source, electrical components, maximum compatible bulb, base construction, cable type, packaging, and intended use.
Include supporting materials such as:

• Product photographs.
• Technical drawings.
• Bill of materials.
• Component specifications.
• Packaging artwork.
• Product labels.
• User instructions.
• Safety warnings.
• Relevant Shopify product information.

The product page and technical file should describe the same product.

Step 2: Define Intended and Reasonably Foreseeable Use

A GPSR risk assessment should not consider only the ideal way a product is supposed to be used.
Manufacturers must also consider reasonably foreseeable use and misuse.
For Shopify brands, consider:

• Children and vulnerable consumers.
• Older consumers.
• Consumers with disabilities.
• Incorrect installation.
• Incorrect assembly.
• Missing maintenance.
• Repeated use.
• Product ageing.
• Heat and moisture exposure.
• Sunlight exposure.
• Transport damage.
• Use with accessories or other products.
• Product presentation that could make it appear to be food or a toy.
• Online product claims that could encourage a particular use.
• Software or connected features that may affect physical safety.

Online presentation matters because the product page can influence how consumers understand and use a product.

A product image, product title, marketing claim, instruction, or missing warning can potentially affect foreseeable use.

For this reason, Shopify product information should not be treated as completely separate from the product safety assessment.

Step 3: Identify Potential Hazards

Use a structured hazard checklist rather than relying on memory.

The assessment should explain how each hazard could lead to harm.
For example, “overheating” is not enough.

A stronger scenario would explain that a loose electrical connection increases resistance, produces heat, damages nearby insulation, and could result in burns or fire.
That level of detail makes the assessment easier to understand, review, and update.

Step 4: Estimate and Prioritise Risk

Once hazards have been identified, assess the level of risk associated with each scenario.
A simple internal matrix can help Shopify teams prioritise safety work:

The exact definitions should be established for the product category.
Consider factors such as:

• Number of consumers exposed.
• Frequency of use.
• Duration of exposure.
• Probability of the hazardous event.
• Ability of users to recognise the danger.
• Vulnerable users.
• Severity of possible harm.
• Uncertainty in available evidence.

This type of matrix is an internal risk-management tool. It is not an official GPSR risk formula.

For high-risk or complex products, Shopify brands should use a competent product-safety professional and an appropriate product-specific risk methodology.

Step 5: Reduce Risk Through Product Design

Risk reduction should not depend entirely on consumers reading warnings or following instructions perfectly.
Whenever possible, address the hazard through the product itself.

A practical hierarchy is:

1. Eliminate the hazard through safer design.
2. Add guards, protective features, limits, containment, or interlocks.
3. Provide clear instructions and warnings for remaining risks.
4. Verify that the controls work together effectively.

For example, if a product can become dangerously hot, simply adding a warning may not be enough if the design can be changed to reduce the operating temperature.

The technical file should record important design decisions and, where relevant, explain why certain alternatives were rejected.
This creates a clearer connection between the identified hazard and the final product design.

Step 6: Connect Safety Claims With Evidence

Every important safety conclusion should be supported by appropriate evidence.
Depending on the product, this may include:

• Supplier specifications.
• Declarations from suppliers.
• Material documentation.
• Incoming-material checks.
• Product drawings.
• Design calculations.
• Production-control records.
• Laboratory test reports.
• Inspection records.
• Packaging tests.
• Transport testing.
• Usability assessments.
• Foreseeable-use assessments.
• Software verification.
• Change-control records.
• Applicable standards and clauses.

One of the most important checks is whether the evidence actually applies to the product being sold.
A test report for an older model does not automatically prove that a new model is safe.
The same issue can arise when:

• The material changes.
• A supplier changes.
• A component is replaced.
• The battery changes.
• Dimensions change.
• The coating changes.
• The power supply changes.
• Product functionality changes.

Shopify merchants should therefore map testing and supplier evidence to the specific product version and variants covered.

Step 7: Approve, Monitor, and Update the Assessment

A GPSR technical file should not be treated as a document that is created once and forgotten.
Assign an owner to the assessment and record:

• Approval date.
• Revision number.
• Product version.
• Person responsible for approval.
• Changes made.
• Evidence added.
• Previous versions.

Then monitor real-world product information.
Useful inputs include:

• Customer complaints.
• Product returns.
• Safety-related reviews.
• Accidents.
• Near misses.
• Supplier changes.
• Manufacturing deviations.
• Marketplace reports.
• Product recalls.
• Safety Gate notices.
• New test results.

If a relevant change occurs, review the risk assessment.
For Shopify brands, this also means checking whether changes to the technical file require changes to:

• Shopify product descriptions.
• Product specifications.
• Safety warnings.
• Labels.
• Packaging.
• Instructions.
• Product images.
• Variant information.
• Customer-facing compliance information.