CPSIA and CPC Compliance for Custom Plush Toys: A Buyer’s Guide
Last reviewed: September 2026 | Audience: US brand teams, importers, and Amazon sellers sourcing custom plush toys | Reading time: ~19 min
A buyer confirms “we have a CPC” and treats CPSIA compliance as a settled question. In reality, a Children’s Product Certificate is one document sitting on top of several other, separate legal obligations, each of which can be satisfied or missed independently of whether the certificate itself is valid: which specific rules the certificate actually cites — not just ASTM F963, but the lead, lead-paint, and phthalates rules a plush toy is also subject to; whether the test records the certificate is supposedly based on are actually being retained; whether the product carries the separate tracking label CPSIA also requires, which isn’t even part of what a CPC certifies; and whether the manufacturer or importer understands its ongoing duty to report a possible defect once the product has already shipped. A supplier can hand over a complete, current, correctly-issued CPC while still being wrong or entirely silent on any of the other three.
This guide uses the CPSC’s own published guidance on lead, lead paint, phthalates, recordkeeping, tracking labels, and the post-sale reporting duty — along with the specific federal rules behind each — to walk through what a plush toy’s CPSIA compliance actually requires beyond the certificate itself. It also walks through a real factory’s complete compliance system for U.S.-bound plush toy orders: the two standards its testing is actually built around, what gets physically and chemically tested on every order, its real testing-to-certificate workflow and who actually has the authority to issue the CPC, which defects actually trigger a recall versus which ones just cost a listing its reviews, and real cost and turnaround ranges — so a buyer can compare what a specific supplier is actually doing against the complete stack, not just the certificate on top of it.
The CPSIA Compliance Stack
A CPC is necessary, but on its own it isn’t sufficient — checking whether these four layers are actually in place is what separates “we have a certificate” from “we’re actually compliant.”
1. Which Rules Layer. A plush toy’s CPC has to cite every rule that actually applies to it, not just ASTM F963. The total lead content limit, the separate lead-in-paint limit, the phthalates ban, and flammability requirements are each distinct federal rules, and a complete CPC names all of the ones that apply — not just the one a supplier happens to test for first.
2. Recordkeeping Layer. A certificate is only as good as the records behind it. Federal rules require the certifier to retain the underlying test records for a set period — not just keep the signed certificate itself on file.
3. Tracking Label Layer. Separately from the CPC, CPSIA requires every children’s product to carry a permanent tracking label with specific identifying information — a labeling duty that exists independent of, and isn’t even referenced on, the certificate.
4. Post-Sale Duty Layer. Compliance doesn’t end when the product ships. A separate federal reporting duty applies the moment anyone in the chain of commerce learns information that reasonably supports a possible defect — regardless of how clean the original certification was.
Treating “we have a CPC” as proof the entire stack is in place is how a buyer misses a gap in one of the other three layers — none of which show up on the certificate itself.
One Certificate Isn’t the Whole Stack
Most buyers treat a valid CPC as proof that CPSIA compliance, in general, is handled — without asking what the certificate does and doesn’t actually cover.
A CPC only documents what it cites. A certificate can be genuine, current, and correctly issued, and still leave the tracking-label and recordkeeping questions completely unanswered — because neither one is part of what the CPC itself certifies.
Recordkeeping is a separate, ongoing duty, not a one-time filing. Producing a valid CPC at the moment of shipment doesn’t establish that the underlying test records will still exist if the CPSC or a marketplace asks for them later.
A missing tracking label is a real compliance failure even on a product with a perfect CPC. Tracking labels aren’t part of what a CPC certifies, so a complete, accurate certificate provides zero protection against a tracking-label violation.
The post-sale reporting duty doesn’t care how clean the original certification was. Section 15(b) applies the moment new information about a possible defect surfaces, regardless of whether the CPC behind the product was ever wrong.
Because a CPC certifies only what it cites, the other three layers of CPSIA compliance stay invisible to anyone who stops checking once a certificate is in hand.
Which Rules Does the CPC Actually Have to Cite?
A plush toy is a children’s product, and its CPC has to cite every children’s product safety rule that applies to it — which, beyond ASTM F963, includes at least the following.
Two Separate Lead Rules — Not One
- Total lead content: 100 ppm. Under CPSIA Section 101(a), codified at 16 CFR 1252.1, any accessible component part of a children’s product is subject to a total lead content limit of 100 parts per million.
- Lead in paint and surface coatings: 90 ppm. A separate, longer-standing rule — 16 CFR Part 1303 — bans paint or similar surface coatings on children’s products (and certain furniture) that contain lead at a concentration of 0.009% (90 ppm) or greater. This is a different rule with a different, stricter number, which is exactly why a CPC has to cite both the total lead content rule and the lead-in-paint rule where applicable, not just one.
The Phthalates Rule
16 CFR Part 1307 restricts specific phthalates in children’s toys and child care articles: diethylhexyl phthalate (DEHP), dibutyl phthalate (DBP), and benzyl butyl phthalate (BBP) were permanently banned under the original CPSIA; diisononyl phthalate (DINP), diisobutyl phthalate (DIBP), di-n-pentyl phthalate (DPENP), di-n-hexyl phthalate (DHEXP), and dicyclohexyl phthalate (DCHP) were added by a later rule. Each of these is individually restricted to a concentration above 0.1% — a plush toy’s plastic and soft-PVC-type components are squarely within this rule’s scope.
Flammability and ASTM F963
Flammability testing and the broader physical/mechanical safety requirements a plush toy has to meet fall under ASTM F963, which a CPC also has to cite as its own separate rule. Our earlier guide, ASTM F963 Certification Explained, covers what that certification actually verifies in detail — this article focuses on the rules around it.
A CPC that cites ASTM F963 but omits the lead or phthalates rules isn’t incomplete because of a paperwork error — it’s citing only one of several rules a plush toy actually has to comply with.
Is the Underlying Recordkeeping Actually There?
A certificate is a summary — the records behind it are what actually prove compliance, and federal rules specifically require those records to be kept, not just referenced.
The Five-Year Retention Rule
- 16 CFR §1110.17 requires finished-product certifiers to retain both the certificate and its supporting records for at least five years from the certificate’s creation date. For a CPC, that includes the records of test results the certificate is based on, along with related records specified under 16 CFR 1107.26 and 1109.5(g) and (j) where applicable.
- Electronic records satisfy this requirement. Per CPSC guidance, electronic access to testing and certification records is sufficient — a certifier isn’t required to keep physical paper files specifically.
Why this matters to a buyer: if the CPSC or a marketplace later asks for the specific test report a CPC is based on, a supplier who can’t produce it — even while holding a valid-looking certificate — has failed the recordkeeping layer. That’s a real, separate compliance gap from the certificate itself being wrong, and it’s one a buyer can’t see just by looking at the CPC.
Tracking Label and the Post-Sale Reporting Duty
Two more obligations sit entirely outside the CPC: a permanent labeling requirement that applies regardless of what the certificate says, and a reporting duty that only starts once a product is already in the market.
The Tracking Label Requirement (CPSIA Section 103)
- What it requires: every children’s product manufactured since August 14, 2009 must bear permanent, distinguishing marks — visible and legible, and affixed to the product and its packaging to the extent practicable — making the following ascertainable: the manufacturer, importer, or private labeler’s name; the location and date of production; a batch or run number or other identifying characteristic; and any other information that helps trace the product’s specific source. This information can be in code form as long as a consumer can find out how to interpret it.
- The distinction buyers often miss: the CPSC does not consider the tracking label requirement a “safety rule” requiring its own certification — a CPC doesn’t even need to reference tracking labels. That means a complete, accurate, correctly-issued CPC provides zero evidence about whether the product’s tracking label actually complies.
The Post-Sale Reporting Duty (CPSA Section 15(b))
- Who it applies to: manufacturers (including importers), distributors, and retailers — not just the party whose name is on the CPC.
- What triggers it: obtaining information that reasonably supports the conclusion that a product fails to comply with an applicable safety rule, contains a defect that could create a substantial product hazard, or creates an unreasonable risk of serious injury or death.
- The timeline: a report is due within 24 hours of obtaining that information — not 24 hours after confirming it’s actually a problem.
- Where it goes: through the business side of SaferProducts.gov, or directly to the CPSC’s Office of Compliance and Field Operations. A Section 15(b) report itself is confidential and not published — a different mechanism from the public consumer-complaint database on the same site.
- Why this matters for an overseas factory: Section 15(b) is a U.S.-law duty that applies most directly to the manufacturer, importer, distributor, or retailer operating in U.S. commerce. For a China-based factory, the practical question isn’t whether the factory itself files the report — it’s whether the U.S.-side importer or brand partner actually has a process in place to recognize and act on defect information quickly, since the 24-hour clock doesn’t wait for a decision to be made.
How This Factory Actually Handles the CPSIA Compliance Stack
For this factory’s real U.S.-bound export orders, staying compliant isn’t a matter of collecting one certificate — it’s a system built around two standards, real testing limits, a specific workflow with a clear division of who signs what, and a defect-classification system used to prevent the failures that actually cause recalls, held shipments, delistings, and claims.
The Two Standards Our Export Orders Are Actually Built Around
Every U.S. order we produce is built to prevent a recall, a held shipment, a delisting, or a claim traced back to production — and that work sits on two standards. ASTM F963 covers physical, mechanical, and general safety. CPSIA covers chemical safety and traceability. All testing runs exclusively through third-party labs that are registered with and accepted by the CPSC, so the resulting reports are real, verifiable, and accepted by both customs and marketplaces.
What Gets Physically Tested Before Every US-Bound Order Ships
- Small-parts pull and torque testing. In this factory’s experience, this is the single most common cause of a U.S. product recall. Whether it’s a plastic eye, nose, button, or zipper accessory, or an embroidered facial feature and its surrounding stitching, every one of these has to pass a standard pull test without detaching, cracking, or loosening — eliminating choking risk for young children. We build reinforced construction in ahead of time, rather than discovering a weak attachment at the testing stage.
- Fabric flammability. Plush fabric is tested to a vertical burn standard: burn speed has to stay controlled, with no dangerous molten dripping, meeting U.S. market flammability requirements.
- Stuffing cleanliness. Export orders use new, dust-free, eco-friendly PP cotton only — no odor, no impurities, no metal fragments, and no mixed-in waste material.
- Sharp edges and points. Every seam and accessory edge is deburred and finished — no rough edges, no sharp points, nothing that could scratch a child’s skin.
The Chemical Limits We Hold Every Material To
- Lead — dual control. Surface coatings are held to ≤90 ppm and substrate materials to ≤100 ppm, covering fabric, printing, plastic accessories, and trim materials comprehensively.
- Phthalates. For all plastic and rubber components, we hold the combined total of the restricted phthalates our materials contain to ≤0.1% as our own internal operating standard — on top of, not instead of, compliance with the individual federal limits described earlier in this guide.
Our Real Testing-to-CPC Workflow — and Who Actually Has the Authority to Issue the CPC
- Sample submission. We submit 3–5 pieces made from the same materials and the same production process as the actual bulk order, together with the product’s BOM material list, packaging artwork, and product specs — never a specially modified sample built just to pass testing — so the lab’s result reflects what actually ships.
- The lab issues an official English test report, based on the current ASTM F963-23 standard together with applicable CPSIA requirements.
- CPC issuance — a point we explain clearly to every client, because it’s the most commonly confused step in the entire process. The CPC is not issued by the testing lab, and it is not issued by the manufacturing factory in China — a CPC self-issued by an overseas factory carries no legal weight with U.S. Customs or with Amazon. In our real supply-chain process, the certifying party is always the buyer’s U.S.-based importer or brand, who issues the valid CPC based on the qualified test report we provide.
- Full cross-document consistency check. Before shipment, we help the client verify that the product model number, test report number, Amazon ASIN, retail UPC code, and batch information are fully consistent across every document — closing off the gap that most often causes a marketplace listing or customs review to fail.
The Defects That Actually Trigger a Recall, vs. the Ones That Just Cost You Reviews
Based on our real export experience, we sort defects into two tiers — and treat them very differently.
- Tier-1, fatal defects (cargo hold or recall risk): small parts detaching or accessory breakage that creates a choking risk; lead, phthalates, or other regulated chemical levels over the applicable limit; and a missing or incorrect tracking label — a direct violation of CPSIA’s mandatory traceability requirement, not a minor paperwork gap.
- Tier-2, secondary defects (affect listing approval or reputation, not safety compliance): loose or burst seams and stuffing leakage; color variation, stains, or workmanship flaws that affect appearance; and non-compliant packaging — missing English-language warning text, no ventilation holes, or film that doesn’t meet the required thickness.
Real Cost and Turnaround Ranges, and the Three Principles Behind Them
Testing cost: for a standard plush figure with no electronics, lighting, or sound, certification testing runs roughly RMB 1,000–2,000. More complex styles — with lighting, sound, electronic components, or multi-material construction — are priced higher as needed.
Turnaround: a standard testing cycle runs 5–7 working days; an expedited track is available in 3–5 working days for a tight shipping window or listing deadline.
- Lab qualification first. We use only CPSC-registered, legitimate labs — never a shortcut report or an unverifiable one — so we don’t waste a client’s time or testing budget on paperwork that won’t hold up.
- Process discipline. We keep a strict, explained separation between what the lab’s test report documents and what the CPC certifies, and we work directly with the client’s importer to get a valid certificate actually issued.
- Any change triggers a full retest. Any change to a product’s fabric, filling, accessories, structure, or process means we retest from scratch — we never reuse an old report on a changed product.
In summary: for this factory, the CPSIA compliance stack isn’t a document to check off once at the start of a relationship — it’s the standard operating discipline behind material sourcing, testing, certificate issuance, and defect prevention on every single U.S.-bound order. It’s not there to pass an audit; it’s there to keep every shipment clearing customs cleanly, listing without a compliance flag, with zero recalls and zero losses traced back to it.
Bringing It Together With Your Factory
1. You want to confirm the CPC actually covers everything it should. Ask your supplier to list every rule the CPC cites — not just ASTM F963, but the total lead content rule, the lead-in-paint rule, and the phthalates rule where the product’s materials are in scope. A CPC missing one of these isn’t automatically fraudulent, but it is incomplete.
2. You want to confirm the records behind the certificate actually exist. Ask whether the underlying test report is retained and available on request — not just the signed CPC. A supplier who can produce the certificate but not the report behind it has a recordkeeping gap, even if the certificate itself is genuine.
3. You want to confirm the product’s tracking label is actually compliant. Check the product and its packaging directly for the required information — manufacturer/importer name, production location and date, and a batch or run number — since the CPC won’t tell you whether this is in place.
4. You want to understand who handles a defect report if one is ever needed. Ask your importer or brand partner whether they have a process to recognize and act on defect information within the required 24-hour window — this sits with the U.S.-side party in the supply chain, not the overseas factory, so it’s worth confirming directly rather than assuming it’s covered.
Every gap in this article traces back to one of four layers: which rules the CPC actually cites, whether the recordkeeping behind it exists, whether the tracking label is actually compliant, and whether the post-sale reporting duty is understood by the right party. A supplier can be entirely honest about having a valid CPC while still leaving one of these layers unchecked — which is exactly why naming the specific layer matters more than the general claim.
Frequently Asked Questions
Does a valid CPC prove a plush toy has a compliant tracking label?
No. The tracking label requirement is a separate obligation under CPSIA Section 103, and the CPSC does not consider it a “safety rule” requiring certification — a CPC doesn’t even need to reference tracking labels. A complete, accurate CPC provides no evidence one way or the other about tracking-label compliance.
What’s the difference between the lead limit for paint and the lead limit for the rest of the product?
Total lead content is capped at 100 ppm across any accessible component of a children’s product, under CPSIA Section 101(a) / 16 CFR 1252.1. Lead in paint and similar surface coatings is a separate, stricter rule — capped at 90 ppm under 16 CFR Part 1303. A CPC for a product with painted or coated components should cite both rules, not just one.
How long does a certifier have to keep the test records behind a CPC?
At least five years from the certificate’s creation date, under 16 CFR §1110.17. Electronic records satisfy this requirement — there’s no separate obligation to retain physical paper files.
Who is responsible for reporting a potential product defect to the CPSC after a product has already shipped?
Manufacturers (including importers), distributors, and retailers must report to the CPSC within 24 hours under CPSA Section 15(b), once they obtain information that reasonably supports a defect that could create a substantial product hazard, noncompliance with an applicable rule, or an unreasonable risk of serious injury or death.
What information does a CPSIA tracking label actually have to include?
The manufacturer, importer, or private labeler’s name; the location and date of production; a batch or run number or other identifying characteristic; and other information that helps trace the product’s specific source — permanently marked on the product and its packaging, to the extent practicable.
Does the phthalates rule limit each phthalate separately, or the combined total?
The federal rule under 16 CFR Part 1307 restricts specific individual phthalates — including DEHP, DBP, BBP, DINP, DIBP, DPENP, DHEXP, and DCHP — each to a concentration above 0.1%. Some suppliers additionally hold themselves to a stricter combined-total standard across these phthalates as their own internal operating practice, on top of the individual federal limits.
Glossary
| Term | Definition |
|---|---|
| CPC (Children’s Product Certificate) | A written, self-certification document required for children’s products, based on test results from a CPSC-accepted third-party lab, certifying compliance with every applicable children’s product safety rule. |
| Tracking label (CPSIA §103) | Permanent, distinguishing marks required on every children’s product and its packaging since August 14, 2009; not itself a “safety rule” requiring certification, and not referenced on the CPC. |
| Recordkeeping duty (16 CFR §1110.17) | The requirement that a certifier retain a finished-product certificate and its underlying test records for at least five years from the certificate’s creation date. |
| Section 15(b) report | The mandatory notice a manufacturer, importer, distributor, or retailer must give the CPSC within 24 hours of learning information that reasonably supports a possible defect, noncompliance, or unreasonable risk. |
| Total lead content vs. lead in paint | Two separate CPSIA-driven limits: ≤100 ppm for any accessible component (16 CFR 1252.1), and a stricter ≤90 ppm specifically for paint and surface coatings (16 CFR Part 1303). |
| Phthalates (16 CFR Part 1307) | Federal limits restricting specific individual phthalates in children’s toys and child care articles to no more than 0.1% concentration each. |
Disclaimer: Information about CPSIA, CPC, tracking labels, recordkeeping, and the Section 15(b) reporting duty in this guide reflects publicly available CPSC and eCFR guidance current as of mid-2026; specific applicable requirements can vary by product, buyer, and marketplace, and this guide is educational, not legal or compliance advice — confirm current requirements directly with the CPSC, a qualified compliance professional, or a customs broker before finalizing any certification program. The testing limits, certification workflow, cost and turnaround ranges, and defect-prevention practices described in the final section are from our own real manufacturing and export experience.
References
- U.S. CPSC — Tracking Label Business Guidance (Tier 1)
- eCFR — 16 CFR §1110.17, Recordkeeping Requirements (Tier 1)
- U.S. CPSC — Lead in Paint (Tier 1)
- U.S. CPSC — Total Lead Content (Tier 1)
- eCFR — 16 CFR §1252.1, Lead, ASTM F963 Elements, and Phthalates (Tier 1)
- SaferProducts.gov — Section 15(b) Self-Reporting FAQ (Tier 1)
- Factory CPSIA and CPC compliance workflow, testing limits, and defect-prevention case studies, provided directly by our team (Tier 1)
Want Every Layer of Your CPSIA Compliance Stack Covered — Not Just the Certificate?
Request a Quote and we’ll walk through exactly which rules your product’s CPC needs to cite, how our testing and recordkeeping actually work, and what a compliant tracking label looks like on your specific product before your order ships.
→ Request a Quote: CONTACT – Plush Toy Manufacturer | Customized plush toys
→ Related: ASTM F963 Certification Explained: What US Buyers Need to Know | Plush Toy Quality Control Checklist: What Factories Actually Inspect
