Compliance-by-design platform interfaces
compliance-by-design-interfacesDomain: marketplace-platformType: in-houseDescription
Compliance-by-design interfaces are the marketplace-platform answer to a structural problem: traders selling on a platform are responsible for product-compliance disclosures, but the platform is the surface those disclosures actually live on, and a regulator inspecting a non-compliant listing reaches the platform first. The DSA Article 31, the EU General Product Safety Regulation (GPSR), and the EU Market Surveillance Regulation 2019/1020 resolve this by requiring platforms hosting third-party traders to design listing flows that prompt traders for the legally-required information at listing time: CE markings, ingredient lists, country of origin, hazard warnings, energy-label data, GPSR economic-operator details where applicable to the product category. The structurally interesting piece is the bright-line allocation of responsibility. The platform does not verify that the trader's claims are true (that responsibility stays with the trader); the platform makes it impossible to publish without making the claims at all. That distinction is what lets the compliance burden land on the listing-form design rather than on a substantive product-safety review pipeline that would not be feasible at marketplace scale. Implementation has two layers. The listing-form surface asks the right questions, with required fields making the listing un-publishable when the trader skips the data the regulation demands for that product category; the field set is keyed to category-specific regulatory requirements (a toy listing demands EN 71 compliance attestation that a software listing does not), and the gating logic is the part that has to be honest rather than soft (a "recommended" field that the trader can skip is not a required field for regulatory purposes). The verification layer does a sanity check on what traders actually entered: format validation that catches malformed CE marks or missing digits in registration numbers, cross-reference against authoritative registries where they exist (the EU Economic Operators Registration and Identification database, the European Chemicals Agency CLP inventory, energy-label databases per product family), and risk-based human review for higher-risk categories. The statutory anchor is DSA (Regulation (EU) 2022/2065) Article 31(2), which sets the compliance-by-design interfaces obligation for online platforms allowing consumers to conclude distance contracts with traders. GPSR (Regulation (EU) 2023/988) layered the product-safety information requirements on top, particularly Article 22 covering online marketplaces. The Market Surveillance Regulation (Regulation (EU) 2019/1020) covers the broader product-information allocation between platforms and market surveillance authorities. The UK Online Safety Act 2023 layers parallel duties for in-scope services with marketplace functionality, with Ofcom guidance setting the operational expectation. Evidence formats that satisfy a regulator inquiry include the listing-form schema documenting required and optional fields per product category, the field-level help copy that explains the regulatory basis to the trader at listing time, and rejection-rate dashboards showing the platform's volume of listings blocked at submission for missing or invalid regulatory data.
Applicability
Applies when: business model role is intermediary or mixed.
Required by (1 regulation)
- DSA
Article 31(2) — compliance-by-design interfaces.
Regulation (EU) 2022/2065 of the European Parliament and of the Council (Digital Services Act)
Fulfilled by (1)
- In-house build · high effort
Magist does not accept payment from vendors. Methodology.
Evidence formats
- listing-form schema
- field-level help copy
- rejection-rate dashboards