Blog
Company updates, regulatory intelligence insights, and product news from Cleo Labs.

On 1 September 2026, Japan's two-year transition period following the Kobayashi beni koji supplement scandal ends: revised medicine-interaction labels become mandatory on every Foods with Function Claims product on shelves, and GMP manufacturing becomes mandatory for tablet and capsule products, even though the manufacturer has confirmed no case with a causal link among 416 death-related inquiries.

On 6 August 2026, CPSC warned against Budget Baby Boost crib bumpers sold on TikTok Shop, the ninth warning or recall against padded crib bumpers since October 2025, nearly four years after the Safe Sleep for Babies Act banned them. Two earlier listings, BDTROL and Hongmingzheng, carried the identical manufacturer's model number under different seller names three weeks apart.

On 19 August 2026, Health Canada recalled a custom-made Greystone Blinds roller shade for breaking the Corded Window Coverings Regulations, in force since May 2021. The regulator's own compliance testing found 43 of 44 window coverings sampled non-compliant, and only 12 of those 44 samples were imports, meaning most of the failures were domestically produced.

On 12 August 2026, Saudi Arabia's SFDA banned syringe-style cosmetic packaging outright, effective 1 January 2027. Ampoules and vials selling the same injectable-look serum stay legal, but only once their packaging carries a new bilingual Arabic-and-English warning against injection. Manufacturers have until 31 December 2026 to withdraw or relabel stock already on shelves.

On 14 August 2026, the UK's Office for Product Safety and Standards used the General Product Safety Regulations 2005 to declare disposable barbecues unsafe to supply in England, Scotland and Wales, over drought and heatwave conditions rather than any product defect. The guidance sets no calendar end date: withdrawal depends on a weather-conditions review, a compliance status a brand's own product file cannot resolve.

On 5 August 2026, CPSC said it had identified 55 shipments and blocked 355,683 units of counterfeit squishy toys at US ports, and issued notices of violation to the importers and sellers involved. Coverage focused on parenting safety tips. What it missed: the alert landed five months after CPSC's first mandatory safety standard for water-bead toys, 16 CFR 1250, took effect on 12 March 2026, a rule that added a bead-expansion size test, an acrylamide limit, and a mandatory warning label that a genuine, compliant squishy toy now has to carry.

On 6 August 2026, Korea's National Institute of Technology and Standards tested 484 products bought through overseas direct-purchase platforms and found 94 (19%) non-compliant, close to four times the 5% rate recorded for domestically distributed products. The worst result came from children's inflatable water-play equipment, a category outside the 34 named product types that already trigger an automatic KC-certification requirement, tracing back to a blanket import-blocking policy Korea announced and then withdrew within days in May 2024.

On 4 February 2026, ECHA added n-Hexane and Bisphenol AF (and its salts) to the REACH Candidate List, bringing it to 253 substances. Most coverage read it as a routine update. What it missed: n-Hexane is the first substance ECHA has ever listed purely for neurotoxicity, under a clause historically reserved for endocrine disruptors, and the six-month deadline to notify ECHA and the SCIP database passed on 4 August.

On 13 March 2026, Hong Kong gazetted its annual amendment to the Toys and Children's Products Safety Ordinance (Cap. 424), refreshing recognised safety standards for toys and four classes of children's products, effective 1 August 2026. The amendment names children's high chairs, playpens, children's paints and wheeled child conveyances, and only two of those four categories, paints and wheeled conveyances, also appeared on the very different seven-category list the previous amendment covered in 2025.

On 6 August 2026, China's SAMR published GB 7916-2026, Cosmetics: General Safety Requirements, the country's first mandatory national cosmetics safety standard, replacing the 1987 hygiene standard from 1 January 2028. Its children's-cosmetics microbial limit, ten times stricter than the general-product limit, applies to products for children up to 12, three times wider than the under-3 band most international rules use.

On 13 August 2026, the eighteen-month exemption that let India's micro and small furniture enterprises skip BIS certification under the Furniture (Quality Control) Order, 2025 (S.O. 801(E)) expires. A February 2026 amendment (S.O. 774(E)) added capped R&D import, stock clearance and export-component carve-outs, but none of them touched this deadline, set the day the order was notified on 13 February 2025.

On 1 August 2026, Malaysia's Food (Amendment) Regulations 2026 (P.U.(A) 48/2026) took effect, adding ceramic cooking ware as a fourth regulated category under Regulation 28's lead and cadmium migration schedule, six years after Malaysia first notified the change to the WTO. Whether a ceramic SKU is now in scope turns on a functional definition, intended to be heated by conventional thermal methods or microwaves, not on how it is marketed.

On 21 July 2026, South Korea's MFDS opened a public comment period, through 31 August, on a draft requiring a dedicated design, a "not a medicine" statement and an inner-pack use-by date on every customised health functional food. The same draft adds a less-covered requirement: manufacturers must log every batch reprocessing and periodically verify the compressed air and lubricants used in production.

On 17 July 2026, Germany published VerpackDG, the national act that operationalises the EU's Packaging and Packaging Waste Regulation (PPWR) from 12 August 2026. Ten weeks earlier, an EU Commission reasoned opinion under the bloc's own technical-notification procedure had set a standstill deadline that would have pushed German adoption to 17 August, five days too late.

Article 7 of the EU Battery Regulation (2023/1542) required the European Commission to adopt, by 18 February 2025, the delegated act defining carbon-footprint performance classes for EV batteries. It never did: SGS confirmed in July 2026 the effective date has shifted to 12 months after that act eventually enters into force. The next Article 7 deadline, for industrial batteries above 2 kWh, lands on 18 August 2026, the same day those batteries' carbon-footprint labels are due.

On 21 July 2026, the ACCC filed a Federal Court case against Dusk Australasia, alleging 66,453 button-battery homewares across 29 product lines were supplied without required pre-supply testing or warning labels between May 2023 and December 2024, weeks after Dusk had already given the ACCC a court-enforceable undertaking over the same category of breach. The twist: the ACCC's own filing says most of the untested products, once checked, passed.

On 20 July 2026, the European Commission opened the Digital Product Passport registry required under ESPR, and Commission Implementing Regulation (EU) 2026/1778, which governs how it operates, took effect on 6 August. Most coverage frames this as infrastructure for the battery passport due in 2027. What it misses: before any brand can register a single passport, it must first become a 'verified economic operator', a one-time eIDAS identity check with no product-category deadline that can start now.

On 20 July 2026, Brazil's Anvisa opened Public Consultation No. 1,400/2026, proposing to revise RDC No. 727/2022, the rule governing labels on packaged food: for the first time, information Anvisa classifies as supplementary could move onto a QR code, while mandatory content would still have to be printed. Most coverage reads this as Brazil catching up to digital labeling. What it misses: the same draft rewrites the trigger test for the Quantitative Ingredient Declaration, making it mandatory whenever an ingredient is highlighted through words, images or graphics, so a brand cannot know what belongs on a QR code until it knows which ingredients that test now catches.

On 4 August 2026, CPSC announced that Johnson Health Tech Trading, Inc. agreed to pay a $16.875 million civil penalty, just below the $17.15 million statutory cap, for knowingly failing to immediately report a defect in its Horizon T101-05 treadmills as Section 15(b) of the Consumer Product Safety Act requires. The company received at least 874 incident reports between March 2018 and October 2022, including at least 71 injuries, and made two production changes to fix the hazard, but never filed the required report. It is the same company's second Section 15(b) penalty in a decade: a different product line drew a $3 million fine for the identical failure in 2015.

On 16 July 2026, the UK's Office for Product Safety and Standards opened a 12-week consultation proposing to cut the legal noise limit for consumer fireworks from 120 to 110 A-weighted impulse decibels, a change OPSS estimates would remove around a third of today's consumer firework range from general sale. The consultation, open until 7 October 2026, also asks whether more products should join the existing banned list and whether Christmas crackers should lose their age restriction. The noise limit is a reserved, UK-wide product standard, but it would apply on top of, not instead of, Scotland's own licence, purchase-hour and Firework Control Zone rules, which already govern who can buy and use a firework regardless of how quiet it is.

On 23 July 2026, Taiwan's Executive Yuan approved draft amendments to the Act Governing Food Safety and Sanitation, requiring food businesses to report a discovered hazard within 24 hours and raising the maximum fine for concealment or delay tenfold, to NT$30 million. The bill answers a scandal in which Central Union Oil Corp knew for roughly three weeks that a batch of its soybean cooking oil tested at nearly four times Taiwan's carcinogen limit before reporting it, a delay that let the tainted oil reach 1,322 downstream businesses. Taiwan's Food and Drug Administration had already fined Central Union a record NT$165.2 million on 7 July. The less-covered provision requires raw-material suppliers to self-inspect every batch instead of every six months, and larger manufacturers to run certified test labs.

On 31 July 2026, Health Canada published a consumer product advisory, not a recall, for TQELFSS Crystal Clear Epoxy Resin Kits sold on Amazon.ca, because the kits fail the labelling rules of the Consumer Chemicals and Containers Regulations, 2001 and the foreign seller never responded to a request for a voluntary recall. Canada's marketplace pledge gets Health Canada a seller's contact details within five business days, but it cannot make an unreachable overseas company answer, so a public warning replaced an enforceable order. Health Canada's own recall database shows the same CCCR labelling failure hitting another epoxy resin kit brand, ResinAngel, earlier in 2026.

On 23 July 2026, Sweden's government opened a formal consultation (remiss KN2026/01597) on a national ban on PFAS in clothing, footwear, waterproofing agents, cosmetics, ski wax and kitchenware, proposed to take effect 1 January 2028. It would cover cookware, the one category France's own PFAS law (in force since 1 January 2026) excluded after lobbying from Tefal-maker Groupe SEB. Denmark already banned PFAS in clothing and footwear from 1 July 2026 under its own threshold, and a separate EU-wide REACH restriction on the compound PFHxA takes effect on 10 October 2026: four different rules for the same chemical family, live or pending across three countries plus the EU.

On 28 July 2026, France's Ministry for Ecological Transition announced that its new extended producer responsibility scheme for professional packaging, created by Décret n° 2025-1081 of 17 November 2025 and originally due to start on 1 July 2026, would not become operational until 1 January 2027. The stated reason: weeks after three eco-organismes (Citeo Pro, Léko Pro, Twiice) were approved to run it, the administration still had not finished identifying which companies placing packaging on the French market were actually liable, and their 2026 tariffs had come out too late for businesses to budget for. Liable companies now have until 31 December 2026 to register.

Switzerland's FSVO issued RO 2026 374 on 8 July 2026, amending its Ordinance on Materials and Articles Intended to Come into Contact with Food (RS 817.023.21): it takes effect 1 August 2026, revising migration-test methodology, recycler quality assurance requirements and the varnishes-and-coatings annex. It folds in two separate 2026 EU regulations on Switzerland's own legislative clock, twelve days after the EU's own main bisphenol A transition deadline of 20 July 2026 had already passed.

Directive (EU) 2024/1799, the EU's Right to Repair Directive, becomes applicable across the bloc on 31 July 2026: the deadline every member state had to transpose it into national law. The product scope and the 12-month warranty extension are EU-wide. The penalties, procedures and repairer-platform requirements are not: they're set in 27 separate national statutes, at least one of which, Germany's Reparaturgesetz, was only passed five weeks before the deadline.

On 20 July 2026, the European Commission published its annual report on customs controls for product compliance and safety, covering 2025. Most coverage will lead with the report's other headline: over 60% of checked toys, small electronics, cosmetics, PPE and food supplements bought online from outside the EU failed EU rules. What that framing skips is the number next to it: customs physically checked only 65 items per million imported, refusing fewer than 10 per million, with a 384-times gap in discovery rate between its best- and worst-performing member state. That gap is the evidence behind the EU Customs Authority and EU Customs Data Hub the Council and Parliament agreed to build in March.

On 8 July 2026, Korea's MFDS opened legislative pre-announcement on Cosmetics Act amendments introducing a mandatory Cosmetic Safety Assessment system: per-product safety files, a qualified assessor, phased in from 2028. Comments close 18 August 2026. Most coverage will lead with the bundled AI fake-expert advertising ban. What it misses: the phase-in's KRW 1 billion production/import threshold sounds like an SME carve-out, but almost any brand with real export volume into Korea clears it, making 2028, not 2031, the deadline that actually applies.

From 6 August 2026, Commission Regulation (EU) 2023/1464 makes entry 77 of REACH Annex XVII enforceable: 0.062 mg/m³ for wood-based panels and furniture, 0.080 mg/m³ for every other article that releases formaldehyde indoors under normal use: toys, foam goods, laminates, resin-bonded housings. Most coverage read this as a furniture update. What it misses: vehicle interiors get an extra year, to 6 August 2027, on the identical furniture limit, and the exemptions (naturally-occurring formaldehyde, outdoor-only, industrial-only) are narrow, everything else that off-gasses indoors is in scope regardless of category.

From 30 July 2026, Commission Implementing Decision (EU) 2025/1175 becomes the sole compliant basis for cosmetic ingredient labelling in the EU: 348 new INCI names, a glossary now totalling 30,418 names, and mandatory Colour Index nomenclature for colorants other than hair dyes. Most coverage read this as adding entries. What it misses: the decision also revises names already in the glossary, so some correctly-labelled products fail on 30 July with an unchanged formula, one day before a second, unrelated EU cosmetics deadline lands on 31 July.

On 22 July 2026, CPSC, through the Department of Justice, sued the Chinese manufacturer and Chinese trading company behind Lakkzoom immersion water heaters under Section 12 of the Consumer Product Safety Act: its first use of this 'imminent hazard' court authority in nearly 40 years. Most coverage read it as a fire-hazard alert. What it misses: Section 12 exists because the normal negotiated-recall route had no accountable, data-backed US importer to work with.

On 12 August 2026, the EU's Packaging and Packaging Waste Regulation (2025/40) becomes directly applicable EU-wide, requiring a Declaration of Conformity and technical documentation per unique packaging type. Most coverage treats this as one deadline. What it misses: there is no single EU packaging registry, producers must register the same packaging separately in every member state's national system.

On 20 July 2026, the UK's Office for Product Safety and Standards told businesses that a passed final-product asbestos test is not, on its own, enough to assure sand-containing toys are safe. Most coverage read it as one more update in an eight-month recall saga that began with a Chinese quarry contaminating craft sand sold across a dozen countries. What it misses: OPSS just redefined proof itself, from a lab certificate to documented, traceable supply-chain sourcing data.

On 13 July 2026, the European Commission adopted a Delegated Regulation removing leather, re-treaded tyres and four other categories from the EU Deforestation Regulation's Annex I, while adding soluble coffee, palm-oil derivatives and frozen cattle tongues on a later 2027 deadline. Most coverage led with 'leather is out.' What it misses: the seven base commodities didn't change, only the derived-products list did, and a brand's EUDR obligation for any given SKU is only as current as its last check against that list.

Nigeria's Bureau of Public Procurement and Standards Organisation of Nigeria launched the Digital Standards Platform on 17 July 2026, making a digital NIS Attestation Certificate a mandatory bid document for federal procurement. Most coverage frames it as a quality-and-anti-corruption launch. What it misses: the certificate stacks on top of the 'Nigeria First' local-sourcing rule already screening the same shipment, and the automotive sector's May 2026 rollout, which checks compliance down to individual Vehicle Identification Numbers, shows how granular the data check is designed to get.

South Africa's Government Notice R. 6436, published 18 July 2025 under the Agricultural Product Standards Act, became enforceable 18 July 2026. Most coverage treats it as a naming ban on terms like "chicken-style". What it misses: a product needs a lab-verified minimum of 9% protein before it can even use the words "meat alternative", and enforcement now forks between the Food Safety Agency for domestic sale and the Border Management Authority for imports, codifying a naming dispute the Food Safety Agency first threatened to enforce back in 2022.

Under Indonesia's Government Regulation No. 42 of 2024, mandatory halal certification extends on 17 October 2026 from food and beverages to cosmetics, pharmaceuticals, traditional medicines, health supplements and other consumer goods. Most coverage treats this as a certification deadline. What it misses: BPJPH's administrative-sanctions regulation only came into force 5 June 2026, and the draft guidelines defining a compliant cosmetics ingredient supply chain, critical control points against mixing halal and non-halal materials, were only notified to the WTO 4 June, staying open for public comment until 2 August, eleven weeks before enforcement starts.

On 19 July 2024, Thailand replaced its prepackaged-food labeling rule (Notification No. 367) with Notification No. 450, adding shellfish and squid to the mandatory allergen list and giving the market a two-year window to sell through old-format stock. That window closes 19 July 2026. Most coverage treats this as a routine grace-period expiry. What it misses: the clock runs from the notification's effective date, not from any product's manufacture date, so a batch labeled in 2023 becomes illegal to sell the moment it's still on a Thai shelf on 19 July 2026, regardless of when it left the factory.

From 1 July 2026, Taiwan's Cosmetic Hygiene and Safety Management Act requires every remaining category of general cosmetic to have a completed Product Information File (PIF) before sale, and its manufacturing site to hold ISO 22716-aligned GMP certification. Most coverage has filed this as the last step of a 2018 compliance calendar. What it misses: the rollout deliberately started with the highest-risk categories in 2024 and 2025, sunscreen, hair dye, children's and lip products. What lands now is everything else: the ordinary SKUs brands were least likely to have already built compliance data for, because they were never in scope before.

From 31 July 2026, under Commission Regulation (EU) 2023/1545, any cosmetic product placed on the EU market for the first time must declare fragrance allergens against an Annex III list that has grown from 26 substances to 82. Products already on EU shelves before that date get until 31 July 2028 to sell through. Most coverage has filed this as a single list update. What it misses: the Commission itself corrected three Annex III entries in a corrigendum published in November 2025, eight months after most brands had already built their SKU-level allergen mapping against the original 2023 text, and eight months before the deadline actually bites.

From 1 July 2026, Singapore's Energy Conservation (Amendment) Act 2026 extends the Minimum Energy Performance Standards (MEPS) and Mandatory Energy Labelling Scheme (MELS), in force for NEA-registered suppliers since 2012, to air conditioners, refrigerators, clothes dryers, televisions and lamps that a business or individual imports directly for its own use. Most coverage has filed this as a blanket update to an existing appliance rule. What it misses: the supplier-side regime did not change. What changed is that an identical SKU can no longer cross the border unregistered and untested just because the importer labels the purchase "for own use", and e-commerce platforms operating in Singapore are now the ones required to police that distinction, listing by listing.

On 8 July 2026, the US Consumer Product Safety Commission's eFiling rule became mandatory: importers, domestic manufacturers and private labelers of CPSC-regulated consumer products must now file their certificate-of-compliance data electronically, through CBP's Automated Commercial Environment, at the moment of entry, not produce it later on request. Most coverage has filed this as a customs-paperwork upgrade. What it misses: CPSC itself says it will not have ACE reject entries solely for missing eFiling data at launch, only warning messages. The consequence that actually starts on day one is a risk score, built from whether certificate data is there, complete and correct, that determines how often CBP holds a company's containers for inspection from here on.

On 30 June 2026, Canada's Prohibition of Certain Toxic Substances Regulations, 2025 (SOR/2025-270) came into force, repealing the 2012 regulations and newly banning two persistent flame retardants, Dechlorane Plus (DP) and Decabromodiphenyl Ethane (DBDPE), along with products containing them. Most coverage has filed this as a chemicals-industry story about two obscure substances. What it misses: the ban reaches the manufacture, use, sale and import of finished products that contain DP or DBDPE (electronics, automotive parts, technical textiles) not just the neat chemicals. And the only bridge for a company already exposed is a one-time, 30-day permit-application window that opened 1 July and closes 30 July 2026.

On 1 July 2026, Vietnam's old two-tier product-quality classification: "Group 1" self-declared goods and "Group 2" goods subject to mandatory state inspection, run since 2008 under Decrees 132/2008, 74/2018 and 13/2022: formally expired. In its place, a three-tier risk classification (low/medium/high), introduced by Decree No. 37/2026/NĐ-CP on 23 January 2026, became the sole basis for compliance. Most coverage already filed this under "January news" and moved on. What it missed: the January decree only opened a six-month transition, during which both systems ran in parallel, 1 July is the date the old system actually died. And on that same date, a wholly separate statute, the new Law on E-Commerce No. 122/2025/QH15, also took effect, adding a platform-level product-disclosure regime on top of the reclassification.

From 26 June 2026, Australia's Consumer Goods (Aquatic Toys) Safety Standard 2026 replaced the 2020 version, with suppliers given a two-year transition running to 25 June 2028. Most coverage reads it as a routine refresh: a newer safety clause, tighter warning labels. The nuance it misses: the ACCC built a "dynamic referencing" mechanism into the standard itself. Compliance now tracks whichever version of ISO 8124-1 or AS/NZS ISO 8124.1 is current: each new edition becomes a valid compliance option automatically, six months after ISO or Standards Australia publishes it, and the old edition stops being valid two and a half years after that. No further Australian legislation required.

On 1 July 2026, California's Responsible Textile Recovery Act (SB 707) required every producer of apparel and textile articles selling into the state, above a $1 million global-turnover threshold, to register with Landbell USA, the Producer Responsibility Organization CalRecycle approved on 27 February 2026: the country's first statewide EPR program for textiles. Most coverage reads the deadline as settled. The nuance it misses: the trade group representing over 1,100 apparel and footwear brands sued to vacate CalRecycle's approval of Landbell USA months earlier, and the court hearing on its request to halt the program doesn't happen until 7 August, five weeks after registration was already due.

From 1 July 2026, China's SAMR Order No. 119 bans reprocessed and recycled fiber as raw material in underwear and infant fiber products, while companion mandatory standard GB 18383-2025 adds a goods-receipt record-keeping duty and a label-disclosure requirement for recycled content. Most coverage reads this as a blanket recycled-fiber ban. The nuance it misses: for infant products, the standard reopens a narrow exception, recycled polyester used as internal filling, not fabric.

From 8 July 2026, Japan’s METI adds baby strollers and infant bed guards to the Consumer Product Safety Act’s “Specified Products for Children” category, under a Cabinet Decision of 3 April 2026: either product now needs the Child PSC Mark to be legally supplied. Most coverage reads this as one deadline. The nuance it misses: bed guards without the mark can still be sold through 7 July 2027, while strollers get a full extra year, through 7 July 2028, for the exact same rule.

From 31 July 2026, Brazil's INMETRO (Portaria nº 459/2025) bars manufacturers and importers from supplying footwear to the domestic market unless it carries a GTIN alongside brand, manufacturer CNPJ, country of origin and composition data, making a standard voluntary since 2018 (ABNT NBR 16679) compulsory for the first time. Nearly every outlet calls this an anti-piracy label. The nuance it misses: retailers get until 31 December 2027, 17 more months, to sell through stock that was never tagged at all.

From 1 July 2026, Connecticut bars the sale of 12 product categories (apparel, cookware, cosmetics, children's products among them) containing intentionally added PFAS unless labeled with state-approved wording, under Conn. Gen. Stat. § 22a-903c (full sales ban: 1 January 2028). The nuance most coverage misses: on 1 January 2027, New Mexico's own PFAS rule takes effect requiring a structurally different label, a printed symbol, not text. Same product fact, two incompatible label formats, two clocks.

From 15 July 2026, the UK bans the UV filter Enzacamene (4-MBC) in cosmetics and cuts the formaldehyde-release labelling threshold 50x, from 0.05% to 0.001%, under SI 2026/23; 16 more CMR substances are prohibited from 15 August. The nuance most coverage misses: this only applies to Great Britain. Northern Ireland stays on the EU’s own, separately timed cosmetics rules under the Windsor Framework: one SKU, two rulebooks.

On 25 June 2026, India's DPIIT notified the Transition Facilitation (Quality Control) Order, 2026: a 5-year alternative sourcing route across 10 mandatory BIS Quality Control Orders (toys, footwear, protective footwear included, air conditioners, furniture, electrical appliances). Most coverage reads it as industry relief. The nuance it misses: only a company incorporated under India's Companies Act, 2013 can apply.

From 19 July 2026, the EU’s ESPR (Reg (EU) 2024/1781) bans large companies from destroying unsold apparel, clothing accessories and footwear. The quieter, wider rule is the Article 24 disclosure obligation: every covered brand must annually account for the number, weight and reasons of the unsold products it discards, reaching leather goods and handbags the ban leaves out. The ban targets a practice; the disclosure targets your product data.

On 1 July 2026 the EU removes the €150 customs-duty exemption on low-value imports and replaces it with a temporary €3 flat duty per item until 2028. The €3 is a customs matter for your forwarder. The structural shift is that every parcel now runs on clean, classified product data, and from 1 November 2026, up to three product identifiers per declaration line.

Cleo Labs is the winner of the Scaleway Startup Challenge at VivaTech 2026 (“product compliance for global brands”): up to €250K in cloud credits and dedicated Scaleway support. Meet the team on the Scaleway booth, June 17–20, Hall 7.3 – Booth 3F10, Porte de Versailles, Paris.

Regulation (EU) 2024/1781, the Ecodesign for Sustainable Products Regulation (ESPR), entered into force on 18 July 2024, replacing Directive 2009/125/EC. It extends ecodesign obligations to almost all physical goods sold in the EU, introduces the Digital Product Passport (DPP) and bans destruction of unsold consumer goods. This guide explains what ESPR requires, which products are in scope, how it interacts with REACH, the Battery Regulation and GPSR, and what to prepare before the delegated acts are published.

Seven days after open-sourcing the Cleo skills_library and its MCP server, here is the honest retrospective: the decision, what shipped in a week, what worked (dev.to traction, npm wedge), what flopped (awesome-llm-apps rejection, bad Show HN timing), and the roadmap for the next 60 skills.
On 3 June 2026, France’s consumer authority (DGCCRF) fined Shein over €22M: €5.77M and €16.73M across two entities: for hiding garment origin, undeclared microplastics, a denied 14-day withdrawal right and non-compliant order confirmations. Not a DSA case and not a safety ban: a transparency case that pushes France’s total fines on Shein past €210M and resets the traceability baseline for every textile brand.

Step-by-step guide: plug the @cleo-labs/skills-mcp package into Cursor, get 45 product compliance skills in any project, and run your first real compliance query in under a minute. No API key required for the base catalog.

Five product compliance scenarios (retinol cosmetics, Bluetooth CE marking, Japan supplement export, toy EN 71-3 migration limits, EU Battery Regulation deadlines) answered in 49 seconds total with the Cleo skills_library on Claude Code. With timings, citations and the cost they would have been the traditional way.

MARIA, the engine behind Cleo, moved to Claude Opus 4.8. We ran a head-to-head eval against Opus 4.7 on 5 real product cases, grading every cited regulation against the official source. 4.8: 5/5 correct verdicts vs 4/5, and a 2.7% citation-error rate vs 9.4%.

Cleo opens up Legal Atlas: a machine-readable legal database aggregating legislation, case law and doctrine from 1,494 official sources across 177 jurisdictions, exposed through a single REST API. Built for legal-tech, law firms and AI agents.

Cleo Labs just released a library of 40 production-grade compliance skills for Claude Code and AI agents. Install in 30 seconds. Powered by the Cleo Legal API. Open-source under MIT.
On 28 May 2026, the European Commission imposed a €200M fine on Temu under the Digital Services Act for failing to identify, analyse and assess the systemic risks of illegal products on its platform. The first DSA fine targeting illegal products on a marketplace, and what it means for European brands selling cosmetics, toys, electronics and jewellery.
Most PLM compliance modules are empty shells. The gap between having a PLM and being compliant is about the regulatory data you inject. Here's why data quality is the real bottleneck, and how to fix it.
The data behind Cleo grew more this month than in our entire first year. 50,101 regulations indexed (×2), 27,500+ authorities (+45%), +11 new countries including China, 134 organizations tracking 2,839 real products, +6 API filters, and Cleo as a connector inside ChatGPT.
Four product launches this month: +18 new countries (now 106 total, 234M+ legal documents), in-app AI chat with slash commands and @entity mentions, Cleo Insight as a connector inside Claude / Cursor / ChatGPT, and a public API v1 with seven endpoints.

Round led by Larry Berger, with Kima Ventures, Financière Saint-James, and several tech ecosystem figures: plus additional funding from Deel. Cleo Labs will accelerate technology development, structure European expansion, and prepare for entry into the U.S. market.

CE marking is the European passport for products. Roughly 25 harmonisation directives and regulations cover machinery, electrical equipment, radio devices, toys, medical devices, PPE, construction products and more, and from December 2027, software and connected devices join the list under the Cyber Resilience Act. Here is what 2026 actually requires across both worlds.

In 2024, cosmetics accounted for 36% of all alerts on EU Safety Gate: the leading category, ahead of toys, clothing and electronics. Three recent recalls (MCI/MI in leave-on creams, heavy metals in makeup, French PFAS law n°2025-188) show why compliance in cosmetics is not an event but a regulatory flow that has to be tracked across living annexes.

A product can look identical across markets: its legal status will not. Four real magnetic toy recalls from the UK and Canada show how a single technical threshold (flux index, small parts cylinder, warnings) separates a sellable product from one yanked off the shelves.

Every physical product sold globally faces 100+ regulations across R&D, manufacturing, labelling, and customs. Here's how Cleo Labs is automating global product compliance with AI, and why Deel just picked us as their winner at Station F.

A new research paper interviews EU-based data practitioners and exposes 5 systemic gaps between GDPR requirements and ML pipeline reality.

Kinder Surprise, Red Bull, melatonin gummies: these everyday products are perfectly legal in one country and completely banned in another. Here's why, and what it means for brands selling internationally.

A landmark paper introduces TRISM, the first framework to separate trust, risk, and security in multi-agent AI systems. 66 citations in 3 months: here's why compliance teams should pay attention.

A cosmetic product sold globally must comply with completely different regulatory frameworks in each market. The EU bans over 1,600 ingredients; the US bans 11. Japan requires quasi-drug classification for anti-aging claims. China mandates animal testing for imported ordinary cosmetics. This guide maps the key differences across five major markets.

Starting in 2027, the EU will require Digital Product Passports for textiles, electronics, batteries and more: every product will need a QR code linking to a structured dataset on its composition, origin, repairability and end-of-life. Here's how retail brands should prepare under ESPR (Regulation 2024/1781).

From CAS number screening to full formulation compliance across 106 countries: chemicals, packaging, labeling, and regulatory forecasting for South Africa, Mexico, EU, Brazil, China, India, and beyond.

Launching a product across 106 countries? Map every regulation (ingredients, labeling, safety, packaging) with AI-powered compliance intelligence.

Most compliance AI assumes regulatory text is authentic. A new research paper introduces DEF, the first framework that detects falsified legal documents.

Peer-reviewed 2026 studies confirm multi-agent AI can evaluate compliance across GDPR, AI Act, NIS2, and DORA: faster and more accurately.

The EU General Product Safety Regulation (GPSR, Regulation 2023/988) replaced the General Product Safety Directive on December 13, 2024. It applies to every non-food consumer product sold in the EU: from cosmetics to electronics to toys. Here is what brands need to do, with risk assessment, documentation and online-marketplace obligations.

Product compliance is the fastest-growing challenge for EU tech companies. This guide covers every framework from CE marking to AI Act.

From CNIL enforcement to Sapin II and the Duty of Vigilance law, here's everything tech companies need to know about regulatory compliance in France.

Beyond the directive itself, CSRD compliance is a massive data aggregation challenge. Here are the concrete problems large companies face.

Most companies confuse product compliance with corporate compliance. The distinction matters, especially in the EU, where product-specific regulations are multiplying faster than ever.

A data-driven breakdown of how GDPR enforcement varies across EU member states. Compare fines, enforcement patterns, and DPA priorities in 2026.

NIS2 dramatically expands cybersecurity obligations across the EU. This guide covers who's in scope, what's required, the penalties for non-compliance, and how to prepare.

The UK regulatory landscape has diverged from the EU since Brexit. From UK GDPR to FCA Consumer Duty, here's what European companies need to track.

GRC platforms were built for 5 regulations. Fintechs face 50+. Here's why compliance IT teams are switching to AI-powered regulatory intelligence.

Operating in both Brazil and the EU? Here's a practical comparison of LGPD and GDPR covering legal bases, DPO requirements, data transfers, and penalties.

Launching a fintech in the EU means navigating PSD2, MiCA, DORA, AML6, GDPR, and the AI Act. This checklist covers every regulatory step.

With high-risk AI system requirements taking effect in August 2026, compliance teams have months, not years, to prepare. A practical guide to AI Act obligations, timelines, and how to build readiness.
DORA is fully applicable, but many financial entities are still catching up. A practical tracker of every key deadline, requirement, and action item for ICT risk management compliance in 2026.

Regulatory complexity is outpacing compliance teams. Agentic AI (systems that reason, plan, and act autonomously) is the only viable response.

From GDPR's €5B+ in cumulative fines to AI Act penalties of 7% of global revenue, the cost of non-compliance in the EU has never been higher. Here are the numbers that matter.

AI tools for compliance are proliferating. But which ones actually deliver? A research-backed guide to evaluating AI compliance platforms, from regulatory monitoring to due diligence.

From keyword alerts to contextual intelligence: how AI-powered monitoring systems are replacing manual regulatory watch and giving compliance teams a decisive edge.

The RegTech market is projected to reach $42B by 2026. This landscape guide maps the key players, emerging categories, and the shift from reactive GRC to proactive regulatory intelligence.

A deep dive into the multi-agent AI architecture behind Cleo's regulatory risk scoring, from the 5-stage pipeline to the 30+ specialized agents that achieve 98.5% accuracy.

NIS2 and DORA are rewriting the rules for cybersecurity compliance in the EU. For tech companies, this means new obligations for incident reporting, risk management, and supply chain security.

From the EU AI Act enforcement wave to cross-border data transfer upheaval, here are the five regulatory trends shaping compliance strategy this year.

Regulators demand that AI-driven compliance decisions be auditable and explainable. Black-box models create risk even when they perform well. Here's how to build AI that regulators trust.

Manual third-party screening is slow, expensive, and error-prone. AI-powered due diligence collapses weeks of work into hours, with better coverage and full auditability.

Eight years after GDPR, enforcement has matured. Here's what compliance teams need to know about the regulation's new reality in 2026.