Who Is Responsible for Toy Safety
Compliance — the Brand or the Factory?
Last reviewed: September 2026 | Audience: toy and plush brand buyers, importers, and private labelers sourcing from overseas factories | Reading time: ~17 min
It’s an easy assumption to make: the factory built the toy, so if something’s wrong with it, the factory must be the one on the hook. Under both US and EU consumer-product law, that assumption is backwards. The party whose name (or brand) goes on the product — not the party that physically manufactured it — is almost always the one the law calls the “manufacturer” for compliance purposes, and the one a regulator, a marketplace, or a customs authority will actually come after.
This guide separates the question into four practical parts: what the law actually says about who counts as the “manufacturer,” who has to sign the certification paperwork, what a factory’s role in compliance actually looks like day to day, and what a real enforcement action or recall actually costs — and who it lands on.
The Four-Part Brand vs. Factory Responsibility Question
Instead of assuming responsibility follows whoever physically made the product, asking these four questions separately identifies where legal responsibility actually sits.
1. Legal Question. Under US and EU law, who is actually defined as the responsible “manufacturer” — the brand, the importer, or the factory?
2. Certification Question. Who has to issue the compliance paperwork — the CPC, GCC, or EU Declaration of Conformity — and can a factory’s own test report be used directly as that certificate?
3. Practical Question. What does the factory actually do day to day — sampling, testing coordination, batch QC — versus what the brand has to do itself?
4. Consequence Question. When a recall or enforcement action actually happens, who does the regulator target, and who pays?
A buyer who can answer all four separately — not just “the factory handles compliance” — is one who actually understands where legal exposure sits before an order ships, not after a shipment gets held at the border.
“They Made It” Doesn’t Mean “They’re Legally Responsible”
The confusion isn’t really about who has the technical expertise — it’s that manufacturing a product and being its legal “manufacturer” are two different things under consumer-product law.
Physical production and legal responsibility are assigned separately. A factory builds to spec, runs its own quality control, and often coordinates the first round of lab testing. None of that makes the factory the party a regulator will hold accountable once the product is sold under someone else’s brand.
The gap shows up specifically at the point of certification and enforcement. A factory can hand over a complete, accurate test report and still not be the party legally allowed — or required — to issue the certificate that lets the product be sold. And if something goes wrong after sale, enforcement generally reaches the party whose name is on the product and who imported or placed it on the market, not the overseas factory.
Because “the factory handles compliance” is a comforting but legally inaccurate shorthand, the rest of this guide walks through exactly where the line sits, and what each side is actually responsible for.
Legal: Who the Law Actually Calls the “Manufacturer”
Both the US and EU frameworks answer this question directly, and both point the same direction for a standard private-label plush order.
US: The Consumer Product Safety Act
— The statutory definition is broad on purpose. Section 3(a)(11) of the Consumer Product Safety Act defines “manufacturer” as “any person who manufactures or imports a consumer product” — the US importer is legally equivalent to a manufacturer for compliance purposes, whether or not they touched the production line.
— CPSC’s own guidance answers this exact scenario directly. In response to “I manufacture my children’s products overseas and import them to sell… who is responsible for product safety compliance — the foreign manufacturer, or me, the importer?”, CPSC’s Business Guidance FAQ states plainly: “The importer of the product must certify it as compliant… This means that an importer cannot simply pass along a foreign manufacturer’s CPC; rather, the importer must issue their own certificate.”
— Private labelers are treated the same way. Under the revised 16 CFR Part 1110, a private labeler can serve as the certifier if it meets the definition of “importer” — and when a manufacturer’s name isn’t on the product (the standard custom plush scenario, where only the brand’s logo appears), CPSC states that “placing responsibility on the private labeler is both pragmatic and appropriate.”
EU: The Toy Safety Directive
— Article 2 defines four “economic operators”: the manufacturer, the authorised representative, the importer, and the distributor — each with a different, specifically defined set of obligations.
— Article 8 is the decisive provision for private-label orders. It states that “an importer or distributor shall be considered a manufacturer… and be subject to the obligations of the manufacturer… where it places a toy on the market under its name or trademark.” A factory in China making a plush toy that an EU brand sells under its own name is exactly this scenario — the EU brand becomes the legal manufacturer of record, with the full set of manufacturer obligations under Article 4 (technical documentation, conformity assessment, the EU Declaration of Conformity).
For the ordinary custom or private-label plush order — brand’s logo, no factory name on the product — both frameworks land in the same place: the brand or importer is the legal “manufacturer,” not the factory that physically produced it.
Certification: Who Has to Sign the Paperwork
Being the legal “manufacturer” isn’t abstract — it comes with a specific, named paperwork obligation that a factory cannot fulfill on the brand’s behalf, no matter how good its own test reports are.
CPC, GCC, and DoC — Who Signs Each One
— CPC (Children’s Product Certificate). Required for children’s products subject to a CPSC children’s product safety rule — this covers most plush and soft toys. Per 16 CFR § 1110.7, “the domestic manufacturer or importer… is responsible for drafting and issuing the CPC… even if a third-party testing laboratory… drafts or assists.” CPSC’s own FAQ is explicit: an importer “cannot simply pass along a foreign manufacturer’s certificate of conformity.”
— GCC (General Certificate of Conformity). Used for general-use products outside CPSC’s children’s product rules; same issuing-party logic applies — the importer or domestic manufacturer signs it, not the factory.
— EU Declaration of Conformity (DoC). Under Article 4 of the Toy Safety Directive, the party legally defined as “manufacturer” — the EU brand, per Article 8, in a private-label scenario — draws up the DoC. A factory has no legal standing to issue one on the brand’s behalf.
— Liability for the certificate’s accuracy stays with the signer. Per 16 CFR § 1110.15, “the importer… remains legally responsible for the information in a finished product certificate, including its validity, accuracy, completeness, and availability” — even when a lab or the factory helped assemble the underlying data.
What This Factory’s Documents Actually Are — and Aren’t
This factory’s own real practice illustrates the distinction concretely. Depending on scale, a plush factory typically sits at one of three levels of in-house testing capability: larger export-scale factories usually run an internal QC lab capable of basic physical testing (tension, torque, drop, seam strength) and often hold ISO 9001 or BSCI certification, but that internal data still can’t stand in for a CPC or EN71 filing; mid-sized factories typically maintain an ongoing relationship with one or two CNAS/CMA-accredited third-party labs and coordinate sample submission on the buyer’s behalf; smaller factories or workshops generally have no in-house lab capability at all, and testing is arranged entirely by the buyer.
| Document | Who Issues It | Can the Brand Use It as CPC/GCC/DoC? |
|---|---|---|
| Raw material COA / test report | Fabric or filling supplier | Technical reference only — not a substitute for a compliance certificate |
| Outgoing batch inspection report | Factory | Confirms that batch passed QC — carries no legal certification weight |
| Finished-product third-party test report | CPSC-accepted or CNAS/CMA lab | Can support a CPC as underlying evidence, but must be commissioned with the brand/importer as the client of record |
| CPC (Children’s Product Certificate) | Brand / US importer | The factory has no authority to issue this |
| GCC (General Certificate of Conformity) | Brand / importer | The factory has no authority to issue this |
| EU Declaration of Conformity | Brand (the legal “manufacturer” under Article 8) | The factory has no authority to issue this |
The core distinction this factory works from: a factory’s test report is technical evidence, not a legal declaration. The CPC, GCC, or DoC is the brand’s or importer’s own self-declaration, built on that evidence — and legal responsibility for what’s declared stays with whoever signs it, not with whoever generated the underlying data.
Practical: What the Factory Actually Does Day to Day
Legal responsibility sitting with the brand doesn’t mean the factory has no real role — it means the factory’s role is operational support, not legal sign-off, and the division of labor actually shifts between the sampling and mass-production phases.
Sampling Phase
— The factory provides a materials sheet — fabric composition, filling type, trim and accessory materials — and coordinates sample submission for type testing (EN71-1/2/3 or ASTM F963) at the buyer’s chosen lab.
— The factory documents its construction process — stitching method, fill density, how components are secured — as technical backup for the buyer’s own test plan.
— This is the phase where the brand needs to confirm which standards and test items actually apply — not something to leave until the bulk order is already in production.
Mass-Production Phase
— The factory runs batch-level outgoing inspection — stitch pitch, fill evenness, needle detection — and issues batch COAs and QC reports.
— The factory supports annual retesting and any marketplace spot-check the brand needs to respond to.
— Any change to materials or construction — a different filling supplier, a different way of securing an accessory — has to be disclosed to the brand in writing, because it can invalidate compliance testing that was run against the original materials.
Enforcement Is Tightening on the Paperwork Itself
Marketplaces are narrowing exactly where a compliance document is allowed to come from, which raises the practical stakes on getting this division right. Amazon began rolling out its Direct Validation (DV) policy for children’s toy ASINs in September 2025: sellers no longer upload their own compliance documents directly — an Amazon-authorized third-party testing, inspection, and certification (TIC) provider submits them instead, closing the door on a seller self-uploading a factory’s report as if it were their own certificate.
A similar tightening is reported, with somewhat less certainty, on another major marketplace: multiple independent cross-border compliance sources describe SHEIN moving, from June 20, 2026, to accepting toy-category test reports only from a platform-approved lab whitelist, with non-whitelisted reports rejected automatically. This specific mechanism doesn’t yet appear in SHEIN’s own public statements — only in consistent third-party compliance reporting — so it’s presented here as a widely and consistently reported change worth confirming directly with the platform, not as a confirmed official policy.
What This Factory Actually Sees — and What a Real Recall Costs
Two things make the brand-vs-factory split concrete: the kinds of mix-ups this factory actually sees buyers make, and what actually happens — cost-wise and target-wise — when a real enforcement action lands.
Patterns This Factory Actually Sees
— “We have an EN71 report, so we’re covered.” A common mix-up in cross-border selling: a factory provides a genuine EN71 test report, and the brand treats that as sufficient to apply a CE mark. It isn’t — a CE mark rests on the brand (as the legal “manufacturer”) issuing its own Declaration of Conformity, with the EN71 report serving only as one piece of supporting technical documentation. Customs inspections that find a report but no DoC can hold the shipment.
— Treating a lab report as if it were the CPC itself. Some sellers take a factory’s third-party test report and list it on a marketplace as if it were the compliance certificate. It isn’t — the CPC is the brand’s or US importer’s own certification, built on that report, not the report itself. Amazon’s move to lab-direct submission (above) is a direct response to exactly this pattern.
— A material substitution that quietly invalidates existing test results. We’ve seen a case in the plush toy trade where a factory switched filling suppliers mid-production without notifying the brand, and the original ISO/EN71-3 heavy-metal migration testing — run against the original filling — no longer reflected what was actually being shipped. When a market-surveillance check caught a formaldehyde issue in the new material, the brand, as the legal responsible party, bore the regulatory penalty; the factory’s exposure was limited to a partial commercial refund. The buyer’s response afterward was to write a binding clause into future contracts requiring written confirmation before any material or component change.
How This Factory Actually Handles the Handoff
— States the division clearly at the quoting stage: “we provide material data and coordinate testing; the CPC or DoC has to be issued by you as the importer or brand.”
— Hands over a complete technical file — materials sheet, construction notes, and third-party test reports — specifically so the brand has what it needs to prepare its own certificate.
— Puts change management in the contract: any material, component, or process change requires written confirmation before it happens, because it can affect the validity of existing compliance testing.
— Doesn’t sign away liability it doesn’t legally hold. A clause promising the factory will “take full compliance responsibility” doesn’t actually shift legal exposure — regulators look at who the law defines as manufacturer or importer, not what a private contract says.
— Flags marketplace rule changes proactively — for example, alerting buyers to lab-whitelist or direct-validation requirements before a listing gets rejected or held.
What a Real Recall Actually Costs — and Who It Targets
CPSC’s own enforcement record shows exactly who a compliance failure actually lands on. In its 2009 action against RC2 Corporation — the US importer and brand behind Thomas & Friends Wooden Railway toys — CPSC assessed a $1,250,000 civil penalty for lead-paint-ban violations on toys produced by a contract factory in China. Separately from that penalty, CPSC’s own commissioner statement noted the recall itself cost RC2 over $42 million. The enforcement action and the cost both landed on the US brand/importer — not on the overseas contract factory that physically produced the toys, even though that factory had been given testing requirements to follow.
In summary: the mix-ups this factory sees most often come from treating a factory’s real technical work — a test report, a QC record — as if it were the brand’s own legal certification. It isn’t, and when enforcement actually happens, the cost and the target are the brand’s, not the factory’s.
Bringing It Together With Your Factory
1. You want to confirm Legal. Confirm, in writing, that you understand you — not the factory — are the legal “manufacturer” or importer for your target market, under CPSA and/or the EU Toy Safety Directive.
2. You want to confirm Certification. Ask exactly which documents the factory can provide (material COAs, batch QC reports, third-party test reports) and confirm none of them substitute for the CPC, GCC, or DoC you have to issue yourself.
3. You want to confirm Practical. Ask how the factory handles the sampling-to-mass-production handoff, and get written confirmation that any material or process change will be disclosed before it happens.
4. You want to confirm Consequence. Understand, before you order, that a compliance failure’s cost and enforcement exposure lands on you as the brand or importer — not on the factory — regardless of what a supply contract says.
A buyer who can answer all four with specifics — not just “the factory handles compliance” — is one who actually understands where legal exposure sits before the first container ships.
Frequently Asked Questions
If my factory already provides an EN71 or ASTM F963 test report, do I still need my own certificate?
Yes. A factory’s test report is technical evidence, not a legal certificate. In the US, you (as the importer or private labeler) must draft and issue your own CPC or GCC based on that evidence. In the EU, you (as the legal “manufacturer” under Article 8 for a private-label product) must issue your own Declaration of Conformity. The report supports your certificate; it doesn’t replace it.
Can my factory issue its own CPC or Declaration of Conformity for me?
No. CPSC guidance states directly that an importer “cannot simply pass along a foreign manufacturer’s certificate of conformity” — you must issue your own CPC. Under the EU Toy Safety Directive, Article 8 makes the brand the legal manufacturer for a private-label product, and only the legal manufacturer can issue the Declaration of Conformity. A factory has no legal standing to issue either document on your behalf.
What happens if my factory changes a material without telling me?
It can invalidate your existing compliance testing without you knowing it. Heavy-metal migration and flammability results are tied to the specific materials tested — a supplier or filling change can shift the chemical composition even when the finished product looks identical. This factory’s own practice is to require written confirmation before any material or process change specifically to prevent this; it’s worth confirming your own supplier does the same in writing.
If there’s a recall, does CPSC go after my factory or me?
You. CPSC’s own enforcement record — including its 2009 action against RC2 Corporation, which resulted in a $1.25 million civil penalty and a recall that cost over $42 million — targets the US importer or brand, not the overseas factory. CPSC generally has no direct jurisdiction to fine or sanction a foreign factory; its enforcement authority runs to the US company that imported and sold the product.
Does working with an ISO 9001 or BSCI-certified factory mean my compliance is covered?
No — those certifications describe the factory’s quality-management system and social-compliance practices, not product-level legal certification. They’re a reasonable signal of a well-run factory, but they don’t substitute for the CPC, GCC, or DoC you’re required to issue yourself as the brand or importer.
What should I ask my factory for before placing a bulk order?
Ask for the complete technical file: materials sheet, construction documentation, and the underlying third-party test report — commissioned with you as the client of record, not the factory. Then confirm in writing what happens if a material or component changes mid-production, and make clear that you, not the factory, will be issuing the CPC, GCC, or DoC based on that documentation.
Glossary
| Term | Definition |
|---|---|
| CPC (Children’s Product Certificate) | The US certificate required for children’s products subject to a CPSC safety rule; must be issued by the domestic manufacturer or importer, based on third-party lab testing, and cannot simply be a foreign factory’s own certificate passed along. |
| GCC (General Certificate of Conformity) | The US certificate for general-use (non-children’s) consumer products; may rely on first-party or a documented reasonable testing program, but must still be issued by the domestic manufacturer or importer. |
| EU Declaration of Conformity (DoC) | The EU document, issued by the legal “manufacturer” (which includes a brand private-labeling an imported toy under Article 8), declaring the toy meets the Toy Safety Directive’s essential safety requirements. |
| Importer of Record (IOR) | The legal entity named on customs entry documents as eligible to import a product under the Tariff Act of 1930; CPSC treats the IOR as the certifying importer, whether or not a broker filed the paperwork. |
| TIC (Testing, Inspection, and Certification) | The category of accredited third-party providers — labs and certification bodies — that perform and verify product testing; Amazon’s Direct Validation policy requires TIC providers to submit children’s toy compliance documents directly, rather than the seller. |
| Private labeler | A company that sells a product under its own brand name without being the physical manufacturer; under US and EU rules, a private labeler generally takes on the legal manufacturer’s certification obligations for that product. |
Disclaimer: This article is educational, not legal advice — confirm your specific certification obligations with qualified compliance counsel and, where relevant, directly with CPSC, the EU authorities, or the marketplace in question. This guide cites three different kinds of information that are kept separate rather than merged: publicly documented US and EU law and CPSC guidance (cited with source, including the RC2 Corporation enforcement action), this factory’s own real description of the documents it can and cannot provide and how it manages the brand-factory handoff, and illustrative pitfall patterns presented as industry-wide scenarios this factory has seen in the plush toy trade — not claimed as incidents unique to any single named company. The SHEIN lab-whitelist policy described in this article (effective June 20, 2026) is reported consistently across multiple independent cross-border compliance sources but was not found stated directly on SHEIN’s own public pages as of this writing, and is flagged accordingly rather than presented as independently confirmed platform policy.
References
1. CPSC.gov — Children’s Product Certificate (CPC) FAQ (Tier 1)
2. CPSC.gov — Business Guidance FAQ (overseas manufacturing / importer responsibility) (Tier 1)
3. CPSC.gov — Record of Commission Action, RC2 Corporation Civil Penalty (Tier 1)
4. EUR-Lex — Directive 2009/48/EC on the Safety of Toys, Article 8 (Tier 1)
5. European Commission — Toy Safety in the EU (Tier 1)
6. Amazon Seller Central — Direct Product Validation: Third-Party TIC Services (Tier 1)
7. QIMA — EU Toy Safety Directive: Ensuring Compliance for Toys (Tier 2)
Ready to Get Clear on Who Handles What?
Request a Custom Quotation and we’ll walk you through exactly what our team provides — material data, testing coordination, batch QC reports — and exactly which certificates you’ll need to issue yourself as the brand or importer.
→ Request a Quote: CONTACT – Plush Toy Manufacturer | Customized plush toys
