ESPR Penalties and Enforcement: What Happens If You Don't Comply

The Stakes of ESPR Non-Compliance

The Ecodesign for Sustainable Products Regulation (ESPR) is not a voluntary guideline or aspirational framework. It is a binding EU regulation with real enforcement mechanisms and meaningful penalties for businesses that fail to comply. As Digital Product Passport requirements come into force across successive product categories, market surveillance authorities across Europe will have the power, and the mandate, to take action against non-compliant products and the businesses responsible for them.

Despite this, many businesses remain unclear about what actually happens if they fail to meet their ESPR obligations. What are the penalties? Who enforces them? How severe are the consequences? And what can businesses do to protect themselves? This article provides a comprehensive overview of the ESPR's enforcement framework, drawing on the regulation itself and the established precedents from existing EU product legislation.

For a full understanding of the regulation that underpins these enforcement provisions, see our complete guide to the ESPR.

How ESPR Enforcement Works

The ESPR follows the established EU model for product regulation enforcement, which relies on market surveillance authorities (MSAs) in each EU member state. These national authorities are responsible for monitoring the market, identifying non-compliant products, and taking enforcement action against the responsible economic operators, whether those operators are manufacturers, importers, authorised representatives, or distributors.

Market surveillance under the ESPR operates alongside the existing framework established by Regulation (EU) 2019/1020, which sets out the general rules for market surveillance and compliance of products across the EU. This means that MSAs have a well-established toolkit of enforcement powers at their disposal, including the right to inspect products, request documentation, take samples for testing, and require corrective action.

The ESPR also mandates the creation of a Digital Product Passport registry, a centralised database that MSAs can query to verify that products on the market have valid, compliant DPPs. This makes enforcement significantly easier than under previous product regulations, where checking compliance often required physical inspections and manual document reviews. With DPPs, an authority can quickly check whether a product's passport exists, whether it contains all required data fields, and whether the information appears plausible and consistent.

Types of Penalties and Enforcement Actions

The ESPR delegates the setting of specific penalty levels to individual EU member states, requiring only that penalties be "effective, proportionate and dissuasive." This means that the exact fines and sanctions will vary from country to country, but the regulation establishes a clear framework of enforcement actions that all member states must make available. Based on the regulation and existing precedent from related EU product legislation, the enforcement toolkit includes:

• Corrective action notices requiring businesses to bring products into compliance within a specified timeframe
• Product withdrawal orders requiring non-compliant products to be removed from the market
• Product recall orders requiring businesses to retrieve non-compliant products already sold to consumers
• Import bans preventing non-compliant products from entering the EU market at customs
• Financial penalties (fines) scaled to the severity and duration of the non-compliance
• Publication of non-compliance findings, including naming the businesses and products involved
• Criminal sanctions in the most serious cases, particularly where non-compliance involves deliberate deception or poses safety risks

The financial penalties under existing EU product regulations provide a useful indication of the scale of fines that businesses might face. Under the EU Battery Regulation, for example, member states are required to set penalties that are proportionate to the gravity of the infringement, the economic benefits gained from non-compliance, and any previous infringements. Several member states have set maximum fines in the hundreds of thousands or even millions of euros for serious breaches of product regulations.

Product Bans and Market Withdrawal

For many businesses, the most commercially damaging enforcement action is not a fine but a product ban or market withdrawal order. Being told that your products can no longer be sold in the EU, or that products already on shelves must be recalled, has immediate and severe financial consequences, particularly for businesses that depend heavily on the European market.

Under the ESPR, a market surveillance authority can order a product to be withdrawn from the market if it lacks a valid Digital Product Passport, if the DPP does not contain all required information, if the information in the DPP is materially inaccurate, or if the product fails to meet applicable ecodesign performance requirements. The withdrawal order can apply to specific product batches, entire product lines, or all products from a particular manufacturer, depending on the nature and scope of the non-compliance.

Product recalls are even more disruptive. A recall requires the business not only to stop selling the product but to actively retrieve units that have already been purchased by consumers. This involves significant logistical costs, customer communication expenses, and reputational damage. For consumer-facing brands, a product recall is a highly visible event that can dominate media coverage and social media discussion for days or weeks.

It is worth noting that withdrawal and recall orders are not just theoretical possibilities. Under existing EU product regulations, thousands of products are withdrawn or recalled every year. The EU's Rapid Alert System for dangerous non-food products (the Safety Gate) publishes notifications of product enforcement actions weekly, and the numbers are substantial. There is no reason to expect that ESPR enforcement will be any less active once deadlines begin to arrive.

Variation Across EU Member States

Because the ESPR delegates penalty-setting to individual member states, businesses operating across multiple EU markets need to be aware that the specific penalties they face may vary significantly from one country to another. A non-compliance that attracts a modest fine in one member state might result in a much larger penalty in another.

Historically, some member states have been more active and aggressive in market surveillance than others. Germany, France, the Netherlands, and the Nordic countries have generally been considered among the most active enforcers of EU product regulations, with well-resourced market surveillance authorities and a track record of taking action against non-compliant products. Southern and Eastern European member states have sometimes been less active, though this is changing as EU-level coordination of market surveillance improves.

The ESPR itself includes provisions designed to improve coordination and consistency of enforcement across member states. The regulation requires member states to cooperate through the EU's market surveillance framework, share information about non-compliant products and operators, and coordinate cross-border enforcement actions. Over time, this should reduce the scope for businesses to exploit differences in enforcement intensity between member states.

For businesses that place products on the market across multiple EU countries, the safest approach is to aim for full compliance with the strictest interpretation of the requirements. This ensures that you are protected regardless of which member state's authorities conduct an inspection.

Lessons from Existing Product Regulation Enforcement

While the ESPR's DPP requirements are new, the broader framework of EU product regulation enforcement is well-established. Looking at how existing regulations have been enforced provides valuable insights into what businesses can expect under the ESPR.

The EU Battery Regulation, which includes some of the earliest DPP requirements, is a particularly relevant precedent. Under this regulation, batteries placed on the EU market from February 2027 must carry a Digital Product Passport containing detailed information about capacity, performance, durability, composition, and carbon footprint. Member states are already preparing their enforcement approaches for these requirements.

REACH (Registration, Evaluation, Authorisation and Restriction of Chemicals) provides another instructive example. REACH requires businesses to register chemicals and provide detailed data on their properties, uses, and hazards. Non-compliance with REACH has resulted in significant fines, running into millions of euros in some cases, product bans, and even criminal prosecutions. The European Chemicals Agency (ECHA) has developed sophisticated compliance checking processes, and its enforcement activities have become progressively more rigorous over time.

The CE marking system, which requires products to meet applicable EU safety, health, and environmental standards before being placed on the market, has also generated a substantial body of enforcement precedent. Products found on the market without valid CE marking, or with CE marking applied despite failing to meet the relevant requirements, are routinely withdrawn and their manufacturers penalised. The ESPR requirements for DPPs will effectively add another layer to this existing compliance framework.

Reputational and Commercial Consequences

Beyond the formal legal penalties, ESPR non-compliance carries significant reputational and commercial risks that can be equally damaging, if not more so, than fines or product withdrawals.

Market surveillance authorities in several EU member states publish details of enforcement actions, including the names of businesses and products found to be non-compliant. Being named in a public enforcement notice sends a powerful negative signal to customers, partners, investors, and regulators. In the age of social media, such notices can be amplified rapidly, reaching audiences far beyond the immediate regulatory community.

Retail and distribution partners may also take action independently of regulators. Major retailers increasingly require suppliers to demonstrate compliance with applicable regulations, and discovery of non-compliance can result in delisting, the removal of products from a retailer's range. For many brands, losing access to a major retail channel is commercially catastrophic, regardless of whether a formal enforcement action follows.

Investor and lender scrutiny of ESG (Environmental, Social, and Governance) performance is another factor. Regulatory non-compliance is a red flag for investors and can affect a company's ability to raise capital, secure credit facilities, or maintain insurance coverage. As sustainability regulation becomes more central to the business environment, the financial markets are paying closer attention to compliance performance.

How to Avoid ESPR Penalties

The good news is that ESPR penalties are entirely avoidable. The regulation is designed to ensure that products meet minimum standards of sustainability and transparency, and compliance, while demanding, is achievable for any business willing to invest the necessary time and resources.

The most effective way to avoid penalties is to begin preparing well in advance of the compliance deadlines for your product categories. Use our ESPR compliance checklist as a structured roadmap for your preparation efforts. Key steps include conducting a thorough data audit, engaging suppliers on data provision, selecting a robust DPP platform, and building internal processes for ongoing passport maintenance.

Equally important is understanding the specific requirements that apply to your products. The ESPR framework is built on delegated acts that set out detailed requirements for each product category. You need to know not just the general principles of the regulation but the specific data fields, performance standards, and documentation requirements that your products must satisfy. Our articles on ESPR timelines and deadlines and common DPP compliance mistakes provide detailed guidance on avoiding the most frequent pitfalls.

• Start compliance preparation at least 12-18 months before your sector's enforcement deadline
• Conduct a comprehensive data audit against the specific delegated act requirements for your product categories
• Engage suppliers early and establish clear data-sharing agreements
• Choose a DPP platform that meets current technical standards and can adapt as requirements evolve
• Implement internal review and quality assurance processes for all published DPPs
• Maintain thorough documentation of your compliance activities as evidence of due diligence
• Monitor regulatory developments and update your compliance programme as new delegated acts are published

Documentation as Your Best Defence

In any enforcement situation, the single most important factor in determining the outcome is the quality of your documentation. Market surveillance authorities are far more likely to take a lenient approach with businesses that can demonstrate a genuine, systematic effort to comply than with those that have made little or no preparation.

Your compliance documentation should cover every aspect of your ESPR compliance programme: the data sources used to populate your DPPs, the internal review processes you follow, the training provided to staff, the communications with suppliers regarding data accuracy, and the ongoing monitoring and maintenance activities you undertake. If an authority queries any aspect of your Digital Product Passports, you should be able to point to documented evidence that supports the information published.

Consider also conducting periodic internal audits of your DPP data. Check a random sample of product passports against the underlying source data to verify accuracy. Document the results of these audits and any corrective actions taken. This kind of proactive quality assurance is precisely the sort of due diligence that market surveillance authorities will look for, and reward, in the event of an inquiry. For a broader approach to compliance readiness, see our guide on auditing your products for DPP readiness.

The Bottom Line: Compliance Is Not Optional

The ESPR's enforcement framework is designed to ensure that all businesses placing products on the EU market meet their obligations. The consequences of non-compliance, fines, product bans, recalls, reputational damage, and lost market access, are severe enough that no business can afford to ignore them.

But the message should not be one of fear. The ESPR's requirements are clear, its timelines are published in advance, and the tools and guidance available to help businesses comply are growing rapidly. With structured preparation, investment in the right technology and processes, and a commitment to data accuracy and transparency, compliance is well within reach for businesses of all sizes.

The European Commission has made clear that the ESPR is a cornerstone of its Green Deal and Circular Economy agenda. Enforcement will be robust, coordinated, and increasingly sophisticated. The time to prepare is now.