ESPR Penalties: What Non-Compliance Costs

The first question a board asks about any regulation is what happens if we miss it. For the Ecodesign for Sustainable Products Regulation the honest answer is uncomfortable, because the number everyone wants does not exist at EU level.

Regulation (EU) 2024/1781 requires member states to lay down rules on penalties and to make them effective, proportionate and dissuasive. It does not set the amounts. That means your exposure in Germany is not your exposure in Ireland, and a group placing product across the single market has as many penalty regimes as it has markets.

Why the fine is the least of it

Focusing on fines misreads how product regulation is enforced. Market surveillance authorities operating under Regulation (EU) 2019/1020 have powers that bite long before a penalty is assessed: they can require corrective action, prohibit making a product available, and order withdrawal or recall.

For a physical goods business those powers are the sanction. Stock that cannot legally be sold in a market still carries its full working capital cost, still occupies warehouse space, and still ages. A seasonal product prohibited during its season is written off regardless of whether the underlying issue is fixed in eight weeks.

Which failures count as non-compliance?

It helps to separate three failure modes, because they carry different risk and are found by different means.

• No passport at all for a product in a group where a delegated act applies. The most visible failure and the easiest for an authority to detect, because absence is checkable from the carrier alone.
• A passport that exists but is incomplete — required attributes missing or blank. Detected on inspection, and treated as non-compliance rather than as partial credit.
• A passport that is complete but wrong. The hardest to detect and the most dangerous, because it survives inspection until someone checks the underlying evidence and then looks deliberate.

The consequences that do not look like penalties

Three further exposures rarely appear in a compliance risk register and are usually larger than the fine.

The first is public procurement. ESPR anticipates ecodesign criteria being used in public tendering, which means a product that cannot evidence its parameters is not merely at risk of sanction — it is unable to bid. For manufacturers with meaningful public sector revenue this arrives before any enforcement action does.

The second is customer-imposed. Large buyers pass regulatory requirements up their supply chain contractually, and they do it earlier than regulators enforce. Most suppliers experience ESPR first as a purchase order condition, with the commercial consequence of losing the account rather than paying a fine.

The third is the retailer. Distributors have their own obligations not to make non-compliant product available, so a retailer with any compliance function will delist rather than carry the risk. That decision is made commercially, quickly, and without an appeal process.

How enforcement actually finds you

Market surveillance is sample-based and complaint-driven rather than comprehensive. The realistic triggers are worth knowing because they determine where to spend first.

Note how many of these are found by scanning the product rather than by auditing the company. A carrier that resolves to nothing is the single most detectable failure in the whole framework, and it is also the cheapest to prevent.

How penalties differ across member states

Because each member state legislates its own penalties, the same failure carries different consequences depending on where the product is placed. Some states express maxima as fixed amounts, others as a percentage of turnover, and a few attach personal liability to company officers for repeated breaches.

That variation matters for sequencing. A group with concentrated revenue in two or three markets should read those national implementing measures specifically rather than planning against an EU average that does not exist. It also matters for where you pilot: launching a passport programme first in a market with turnover-linked penalties is a choice worth making deliberately rather than by accident of sales volume.

Evidence is the thing that gets tested

When an authority engages, the conversation moves quickly from what the passport says to where the figures came from. That is the point at which most programmes discover whether they built a compliance capability or a publishing pipeline.

The distinction is concrete. A recycled content figure with the supplier who asserted it, the date, the chain-of-custody model and the test method behind it survives scrutiny. The same number with no provenance is indistinguishable from an estimate, and an authority is not obliged to give it the benefit of the doubt.

• Who asserted it — a named supplier or laboratory, not a department.
• When — because a screening against a candidate list that has since been updated is stale rather than wrong.
• By what method — the test standard, or the calculation rule, named rather than implied.
• Under which custody model — segregated and mass balance mean different things and are not interchangeable in a declaration.

What proportionate preparation looks like

Because exposure is national and enforcement is sampled, the rational response is not to gold-plate every market. It is to make the visible failures impossible and to keep evidence for the rest.

1. Ensure every in-scope product has a carrier that resolves, in every market you supply. This removes the most detectable failure entirely.
2. Keep a gap register naming missing attributes and their owners, so an inspection meets a documented programme rather than a shrug.
3. Record provenance for every attribute. An authority asking where a figure came from is a routine question that should have a routine answer.
4. Check your largest markets’ national penalty legislation specifically, because the range between member states is wide.
5. Treat a customer’s data request as an earlier deadline than the regulator’s, since commercially it usually is.

None of that requires knowing the fine. It requires knowing that the sanction which matters most is being told you cannot sell, and that the failure most likely to produce it is a code on a product that leads nowhere.

It is also worth being clear about what preparation does not need to include. Perfect data across every attribute is not the standard, and waiting for it delays the things that actually reduce risk. An authority encountering a working carrier, a documented gap register and named provenance is looking at a controlled programme, which changes the tone of the conversation considerably compared with a product that scans to a dead link.