CPSIA: Children's Product Certificates, Tracking Labels and 15(b) Reporting
The Consumer Product Safety Improvement Act of 2008 (CPSIA), administered by the US Consumer Product Safety Commission, is the dominant US safety regime for children's products. Every children's product must have a Children's Product Certificate (CPC) backed by third-party testing at a CPSC-accepted laboratory, a tracking label, and compliance with the Act's lead and phthalate limits. Adult consumer products use a General Certificate of Conformity (GCC) on a manufacturer 'reasonable testing program' rather than third-party testing. Section 15(b) imposes a 24-hour reporting duty on manufacturers and importers who learn that a product may contain a substantial product hazard. This guide is written for QA, regulatory and product leads at children's-product brands, manufacturers and importers.
Start free trial Free trial, no credit card, onboard in days, not months.
Children's product vs general-use: the threshold question
A 'children's product' under CPSIA is one designed or intended primarily for use by children 12 and under. The CPSC's four-factor analysis weighs (1) manufacturer's stated intent, (2) packaging, display and marketing, (3) reasonably foreseeable use, and (4) commonly recognised use patterns. The classification drives the entire compliance stack: children's products need a CPC, third-party testing, and tracking labels; general-use products need a GCC and a reasonable testing program. Misclassification — selling a product as 'adult' to dodge third-party testing when packaging and marketing scream 'children' — is the most common CPSC enforcement finding.
Lead, phthalates and the substance limits
CPSIA Section 101 sets total lead content limits: 100 ppm in any accessible substrate of a children's product, 90 ppm in paint or surface coatings on children's products. Section 108 prohibits children's toys and child-care articles with more than 0.1% of each of eight phthalates (DEHP, DBP, BBP, DINP, DIBP, DPENP, DHEXP, DCHP). Testing must be at a CPSC-accepted third-party laboratory; the test report is referenced from the CPC. Compliance is per substrate, not per finished product — a wooden toy with metal hardware and painted surfaces needs lead testing on every accessible substrate, not just the dominant material.
Children's Product Certificate (CPC) — content and format
16 CFR Part 1110 specifies the CPC content: identification of the product, citation to each rule the product is certified to (CPSIA lead, phthalates, lead in paint, plus any product-specific rule such as ASTM F963 for toys, 16 CFR 1500.18 for hazardous substances, etc.), identification of the US importer or domestic manufacturer, date and place of manufacture, date and place of testing, identification of the CPSC-accepted laboratory, and contact for the responsible person. The CPC is held by the importer or manufacturer, made available to the CPSC and to distributors and retailers on request, and accompanies imported goods at customs. Missing or incomplete CPCs are the single most common reason for CBP holds at US ports.
Tracking labels and the post-incident traceability rule
CPSIA Section 103 requires permanent, distinguishing marks on children's products and their packaging to enable identification of the source of manufacture, location and date of manufacture, and cohort (batch, run or other identifying characteristic). The label must allow consumers to determine these elements 'to the extent practicable.' CPSC has issued guidance but no rigid format — the requirement is functional. A common audit gap is a date code on the package that does not appear on the product itself, so a unit separated from packaging cannot be traced. Tracking labels are the underlying enabler of a 15(b) investigation and a recall.
Section 15(b): the 24-hour reporting clock
CPSIA Section 15(b) (codified at 15 U.S.C. § 2064(b)) requires manufacturers, importers, distributors and retailers to immediately inform the CPSC when they obtain information that reasonably supports the conclusion that a product (1) fails to comply with a consumer product safety rule, (2) contains a defect that could create a substantial product hazard, or (3) creates an unreasonable risk of serious injury or death. The CPSC's stated interpretation is 'within 24 hours' of crossing the reasonable-support threshold. Late reports are the largest source of CPSC civil penalty actions; recent settlements have crossed $20M and the agency has signalled it will continue pushing penalty levels through 2026.
A 60-day CPSIA readiness path
Days 1–10: SKU classification audit — apply the four-factor analysis and re-classify any borderline products; lock the analysis. Days 11–25: CPC reconstructability test against current product variants; refresh substrate-level lead and phthalate testing where outdated; confirm CPSC-accepted lab for every test. Days 26–40: tracking label audit on shelf — pull retail samples, check on-product traceability, fix artwork gaps. Days 41–55: 15(b) procedure refresh — train customer service to recognise reportable patterns, define the medical/safety reviewer who decides on 'reasonable support', drill the 24-hour clock. Days 56–60: freeze the baseline; load CPC, tracking-label evidence and 15(b) records into the audit file.
Where this lives in V5 Ultimate
The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.
Can we use our own internal lab for CPSIA testing?
For general-use products under a GCC, yes — the manufacturer or importer runs a 'reasonable testing program' which can be internal. For children's products under a CPC, no — third-party testing at a CPSC-accepted laboratory is mandatory. The CPSC publishes a list of accepted labs by scope (lead content, phthalates, ASTM F963 mechanical, etc.). Using a lab not accepted for the specific scope invalidates the CPC.
Does CPSIA apply to products sold only online and direct-to-consumer?
Yes. CPSIA applies to consumer products distributed in commerce in the US regardless of channel. Etsy sellers, Shopify storefronts, Amazon FBA — all carry CPC, tracking-label and 15(b) duties for children's products. The CPSC has prosecuted small DTC brands; size of business is not a defence.
What counts as 'reasonable support' under 15(b)?
The CPSC's interpretive guidance describes it as information that, taken together, would lead a reasonable person to conclude that a reportable condition may exist — including consumer complaints, lawsuits, comparable product incidents, test failures, and engineering analyses. The threshold is lower than 'proven hazard.' A single serious-injury report combined with engineering plausibility is generally sufficient. The CPSC encourages erring on the side of reporting; over-reporting carries no penalty, under-reporting carries seven-figure penalties.
How does CPSIA interact with ASTM F963 for toys?
ASTM F963 is the US toy safety standard, mandatory under CPSIA Section 106 for any product meeting the CPSC definition of a toy. The toy's CPC must cite both the CPSIA general substance limits (Section 101 lead, Section 108 phthalates) and ASTM F963 (mechanical, flammability, chemical, electrical, labelling). The CPSC accepts ASTM F963 test reports from accepted laboratories. See the ASTM F963 + EN 71 toy safety guide for the cross-walk with the EU regime.
See it on your shop floor.
Free trial, no credit card, onboard in days, not months.