Speaker, soundbar or headphones

Regimes engaged, per market

Standing when pasted with its name: mapped

What the file has to hold

• Technical file (10 of the 17 regimes, including GPSR, CRA, RED)
  The technical documentation: design, drawings, bill of materials, the standards applied, the conformity assessment route, and the evidence that the requirements are met. Kept for the retention period the regime sets, typically ten years from the last unit placed on the market.
• Declaration of conformity (7 of the 17 regimes, including CRA, RED, RoHS)
  The EU or UK declaration of conformity (or the food-contact declaration of compliance), signed by the manufacturer, naming the product, the legislation and the standards, and the notified or approved body where one was involved.
• Risk assessment (GPSR, CRA, CPSC, UK GPSR)
  The documented hazard identification and risk assessment for the product across its lifecycle, updated when the design, the use or the field data changes.
• Test reports (9 of the 17 regimes, including GPSR, CRA, CPSC)
  Test reports from an accredited or accepted laboratory against the standards the technical file names, tied to the exact model and revision tested.
• Labelling and instructions (13 of the 17 regimes, including GPSR, CRA, CPSC)
  Markings on the product and packaging (conformity mark, identification, warnings, manufacturer and importer details) and the instructions and safety information in the language of the market.
• Traceability records (GPSR, CPSC, UK GPSR)
  Batch, lot or serial identification on the product, the records that tie a unit to its production and supply chain, and UDI where the device rules require it.
• Third-party certificate (UL/NRTL)
  A type-examination certificate, notified or approved body certificate, or listing from a recognised laboratory, with the scope and the expiry.
• FCC authorisation (FCC Part 15)
  The FCC Supplier's Declaration of Conformity, or the grant of certification with the FCC ID, and the compliance statement in the manual.
• Substance declarations (5 of the 17 regimes, including RoHS, REACH, UK RoHS)
  Safety data sheets for mixtures and supplier material declarations for articles: the trail that shows what is in the product against the restricted lists.
• Registrations (WEEE, UK WEEE)
  Producer, establishment, device or product registrations in the databases the regime names (EUDAMED, EPREL, CPNP, the WEEE and battery registers, FDA registration and listing).
• Cybersecurity documentation (CRA, RED, UK PSTI)
  The software bill of materials, the vulnerability handling and disclosure policy, the stated support period, and the secure update mechanism, as the connected-product rules expect.

Duties that continue after sale

• Market surveillance cooperation (GPSR, CPSC, UK GPSR)
  Answer an authority's request for the technical file, the declaration and the supply chain within the time it sets, in a language it accepts, and cooperate with any corrective measure it requires.
  Licensed controls: GPSR Art.14, 15, 17 · GPSR Art.23, 24 · CPSC PM.4 · CPSC PM.3
• Incident reporting (GPSR, CRA, CPSC, UK GPSR)
  Notify the authority when a product has caused, or could cause, an accident, injury or serious incident, through the channel the regime names (the Safety Business Gateway, the MHRA, the FDA, SaferProducts.gov) and within its clock.
  Licensed controls: GPSR Art.20 · GPSR Art.25, 26, 27 · CRA Art.14, 16 · CPSC USCPSC 1 · CPSC PM.1
• Recall readiness (GPSR, CPSC, UK GPSR)
  Be able to identify affected units, reach the customers who hold them, issue a notice in the required form, offer the remedy the rules require, and show the authority the effectiveness of the action.
  Licensed controls: GPSR Art.35 · GPSR Art.36, 37 · CPSC USCPSC 3 · CPSC PM.2
• Traceability records (GPSR, CRA, UK GPSR)
  Keep the records that identify which batch went to which customer, and the identification on the product that lets a unit be traced back, for the retention period the regime sets.
  Licensed controls: GPSR Art.18 · GPSR Art.9 · CRA Art.23
• Security updates and vulnerability handling (CRA, CPSC, RED, UK PSTI)
  Provide security updates for the stated support period, run a coordinated vulnerability disclosure process, and report actively exploited vulnerabilities and severe incidents within the reporting clock.
  Licensed controls: CRA Art.13, Annex I · CRA Art.54, 55 · CPSC CS.4 · CPSC SW.3
• Producer responsibility for take-back (WEEE, UK WEEE)
  Keep producer registrations current in each market, report the quantities placed, and finance collection and treatment of the product and its batteries at end of life.
• Substance list watching (5 of the 17 regimes, including RoHS, REACH, UK RoHS)
  Track additions to the restricted and candidate substance lists, re-check supplier declarations against them, and update customer communication and labels when a substance in the product is added.

This week

Check whether the battery cell has a UN 38.3 test summary and whether the Bluetooth module's certification is in the vendor's name or yours.

What holding one is evidence for

Requirement text and evidence artefacts from a human-verified corpus. Data licensed to Conformity Sheet by The Art of Service Pty Ltd, revocable, non-transferable.