Article 1 sets the objective: lay down rules on safety of consumer products placed or made available on the market. Article 2 sets the scope: consumer products that are placed or made available on the market in the Union (including in the course of providing a service), with sectoral carve-outs for products covered by other Union law (medical devices under MDR/IVDR, motor vehicles, foodstuffs etc.). Article 3 supplies definitions, including 'product', 'consumer product', 'safe product', 'dangerous product', 'economic operator', 'manufacturer', 'authorised representative', 'importer', 'distributor', 'online marketplace provider', 'placing on the market', 'making available on the market', 'recall', 'withdrawal', 'distance sales', 'serious risk'. Note: products with digital elements covered by the Cyber Resilience Act ((EU) 2024/2847) are subject to CRA cybersecurity requirements under the CRA-Art.11 derogation; GPSR continues to apply to non-cybersecurity safety dimensions.
This control maps to 3 controls across 3 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.