On 13 December 2024, the General Product Safety Regulation (GPSR) came into force, which establishes a wide-ranging legal framework for ensuring the safety of non-food consumer products – items designed for consumer use or those reasonably expected to be used by consumers. Its specific focus is to address safety challenges stemming from novel technologies and the landscape of online selling. Included within the GPSR are stipulations for data protection. In particular, the GPSR stipulates that economic operators and online marketplace providers with product registration systems or loyalty schemes allowing identification of products purchased by customers have to offer a distinct option for customers to provide contact details solely for safety-related communication. This personal data collection has to be limited to the minimum necessary and solely used to contact consumers during recalls or safety alerts. Similarly, in the case of complaints, the register of complaints has to only retain essential personal data for importers to investigate alleged hazardous product concerns. This data has to be stored for the necessary investigation duration, up to a maximum of five years after entry.
Original source