Article 7 enumerates the economic operators that can be held liable: (1) the manufacturer of the defective product (including its components); (2) where the manufacturer is not established in the Union: (a) the importer of the product; (b) the manufacturer's authorised representative + (c) where neither importer nor AR can be identified - the fulfilment service provider; (3) economic operators that substantially modify the product (Article 4(18)) including distributors that perform substantial modifications; also platforms within the meaning of Article 6(3) DSA where the platform plays a 'predominant' role in the contractual relationship with the consumer. Article 7(2) Member States may limit Article 7(2)(c) FSP liability for products placed on the market before transposition. Article 7(2)(d) a person providing a related service which causes the product to be defective; Article 7(2)(e) where the manufacturer cannot be identified: each distributor of the product unless the distributor identifies the manufacturer / next operator in the supply chain (within 1 month from the request). Article 8 sets the chain-of-recourse rules among multiple liable operators.
This control maps to 3 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 3 it maps to, and the evidence behind each claim, over MCP and REST.