A cardboard shipping box filled with children's toys — a teddy bear, rainbow stacking rings, and plush animals — representing CPSC-regulated children's products imported from China to the United States
Insight

CPSC eFiling for China-to-US Shipments: CPC, IOR, Customs Brokers and DDP Explained

Ever Ocean
132 min read

📌Last updated: July 24, 2026. Implementation status snapshot — this box is updated as CPSC and CBP guidance change; verify current details against CPSC and the latest CBP CSMS messages before filing.

  • Mandatory since July 8, 2026 for regulated consumer products entered into the United States.
  • Foreign Trade Zone (FTZ) goods are covered from a later date, January 8, 2027.
  • Missing or short certificate data: under the current CBP configuration, a CPSC PGA Message Set is not force-rejected on every CP1/CP2-flagged entry, but this does not waive the certification obligation and the configuration can change.

If you already have a Children’s Product Certificate, you may assume your shipment is ready for U.S. customs clearance. That is not always true.

A CPC is an essential part of compliance for covered children’s products, but it is only one link in a longer import chain. The product, test reports, certificate, responsible certifier, Importer of Record, CPSC Product Registry data, customs broker, and shipment entry must all connect correctly.

That is why some sellers now hear two apparently conflicting answers:

  • “You have a CPC, so the shipment is fine.”
  • “We cannot accept products that require a CPC.”

The difference is often not the existence of the certificate. It is whether the parties involved can establish a clear, supportable CPSC eFiling process.

Quick answer: A CPC may be necessary, but it is not a complete import setup. Before shipping, identify who is responsible for product certification, who will act as the Importer of Record, who will maintain the certificate data, and who will transmit the CPSC PGA Message Set through ACE.

What Changed on July 8, 2026?

Beginning July 8, 2026, importers of regulated consumer products generally must submit required Certificate of Compliance data electronically when the goods are entered into the United States. The data is transmitted to U.S. Customs and Border Protection through a CPSC Partner Government Agency, or PGA, Message Set.

The important distinction is that eFiling changes how certificate information is submitted, not which products require certification. Requirements to issue CPCs and General Certificates of Conformity already existed. The new system moves certificate data into the import-entry process instead of relying mainly on certificates being retained and produced on request.

The CPSC’s July 8, 2026 implementation notice describes eFiling as a way to give CPSC certificate information before regulated products enter U.S. commerce.

The rule is not limited to children’s toys

Children’s toys and baby products receive significant attention because children’s products often require third-party testing and a CPC. However, eFiling is not a toy-only rule.

It applies to imported finished products that are subject to a CPSC-enforced rule, ban, standard, or regulation requiring a Certificate of Compliance. Depending on the product, that certificate may be:

  • a Children’s Product Certificate (CPC) for covered children’s products; or
  • a General Certificate of Conformity (GCC) for certain regulated general-use products.

A product’s age grading, intended use, materials, construction, components, and applicable safety rules matter more than a broad label such as “toy,” “clothing,” or “household goods.”

Why Having a CPC May Not Be Enough

A test report, CPC, and eFiling record perform different functions.

ItemWhat it doesWhat it does not do
Third-party test reportProvides evidence that the tested product or sample was evaluated against applicable requirementsDoes not by itself identify the import-entry parties or transmit data to CBP
CPCCertifies that a covered children’s product complies with the applicable children’s product safety rulesDoes not automatically create a Product Registry record or file the customs entry
CPSC eFilingTransmits required certificate data at import, either directly or by referencing Product Registry dataDoes not replace testing, correct classification, or the underlying certificate
Customs entryDeclares the merchandise and responsible parties to CBPDoes not make an unsupported certificate valid

The CPC must identify the product, applicable rules, certifying importer or domestic manufacturer, records contact, manufacturing information, testing information, and the laboratory or other testing party on which the certificate depends. The CPSC’s CPC requirements explain the required certificate elements and provide examples.

Problems arise when these records do not match the commercial reality of the shipment. Common examples include:

  • The certificate identifies one company, but nobody has confirmed who will be responsible for certification at entry.
  • A seller possesses a PDF report but cannot connect it to the exact SKU, materials, factory, or production run being shipped.
  • The freight provider can transport the cargo but will not allow its Importer of Record to assume CPSC certification responsibility.
  • The customs broker receives an HTS code and commercial invoice but not the certificate data or Product Registry identifiers needed for the PGA filing.
  • A CPC was prepared using incomplete or inapplicable test evidence.

In other words, “we have a certificate” and “this shipment has a defensible eFiling process” are not the same statement.

The Parties in a CPSC eFiling Shipment

Several parties may appear in the same shipment, but their roles should not be treated as interchangeable.

PartyTypical roleKey CPSC question
Overseas manufacturerProduces the goods and supplies product, factory, material, and production informationDoes the actual product match the tested and certified product?
Exporter or sellerArranges the sale and may coordinate documents and shippingWho has the reports and who is authorized to use them?
Owner, purchaser, or consigneeHas a commercial interest in the imported finished productIs this party responsible for certification even if another party makes entry?
CertifierAssumes responsibility for the validity, accuracy, completeness, and availability of certificate dataDoes this party have enough product and testing knowledge to certify?
Importer of RecordMakes or authorizes the U.S. customs entry and is responsible for entry complianceIs the IOR also the certifier, or will the entry identify another responsible party?
Customs brokerTransmits entry and PGA data in ACE under authorizationHas the broker received the correct certificate data or registry identifiers?
Freight forwarderCoordinates transportation and, in some services, brokers, warehouses, or third-party import arrangementsIs the forwarder only moving freight, or is it also providing an IOR/eFiling structure?

The CPSC guidance for customs brokers explains that a broker’s responsibilities depend on the arrangement: a broker may be the IOR and responsible for certification, or it may identify another party responsible for certification when filing the PGA data.

This is why asking only “Can you ship CPC products?” is not enough. A better question is:

Who will be identified as responsible for CPSC certification, and how will that party’s certificate data be connected to this customs entry?

Does the CPC Importer Have to Match the Importer of Record?

Not in every possible arrangement—but the relationship must be explicit and supportable.

For eFiling purposes, CPSC generally treats the importer as the Importer of Record eligible to make entry. This may be an owner, purchaser, or an authorized customs broker. However, CPSC also recognizes that an IOR such as a broker may not have enough knowledge of the product to be responsible for testing and certification.

In that situation, the broker may identify the owner, purchaser, or consignee that authorized the entry as the party responsible for CPSC certificate requirements. CPSC also states that a non-IOR owner, purchaser, or consignee responsible for certification can create a Product Registry business account without supplying an IOR number.

The CPSC guidance for importers therefore does not support a universal rule that the CPC certifier and customs IOR must always be the same company.

But this does not mean that any mismatch is automatically acceptable. The parties still need to answer:

  1. Who is legally responsible for the certificate data?
  2. Does that party have the applicable reports and product records?
  3. Who owns or maintains the Product Registry record?
  4. How will the customs broker identify the responsible party?
  5. Who will respond if CPSC asks for supporting documents?

A freight provider may impose a stricter internal rule and accept shipments only when the IOR and certifier match. That is a commercial risk-control policy, not necessarily the only structure recognized by CPSC.

The customs bond, entry documents, and broker coordination behind those roles are part of the same U.S. import setup, even though they are a separate question from CPSC certification.

China Export Declaration vs U.S. Import Entry

Discussions about “buying export documents,” Chinese export rights, and U.S. IOR arrangements often mix two separate borders.

China sideUnited States side
Export declaration and exporter informationImport entry and Importer of Record
China customs and export documentationCBP entry, customs bond, and U.S. broker
Export tax and foreign-exchange considerationsDuties, U.S. admissibility, and PGA filings
Seller, trading company, or authorized export partyOwner, purchaser, consignee, IOR, broker, and CPSC certifier

How goods are exported from China does not by itself determine who must be responsible for CPSC certification in the United States. Conversely, setting up a U.S. IOR does not resolve Chinese export, tax, or licensing requirements.

The two sides must connect through consistent commercial documents, but they should not be treated as the same legal question.

How CPSC eFiling Works Under DDP Shipping

DDP can simplify logistics for a buyer because the seller is expected under the Incoterm to handle import clearance and import duties. However, an Incoterm does not manufacture product-safety evidence or decide which party has enough knowledge to certify a regulated product.

A workable DDP arrangement for CPSC-regulated cargo still needs named answers for:

  • the IOR;
  • the party responsible for the CPC or GCC;
  • the holder of the test records;
  • the Product Registry account or full certificate data;
  • the customs broker transmitting the PGA Message Set; and
  • the party responding to a CPSC request or examination.

This is the practical reason some forwarders stop accepting CPC products. Their regular DDP channel may rely on a shared or third-party IOR that is willing to handle ordinary customs entries but is not willing to assume responsibility for children’s product certification across many unrelated sellers and SKUs.

Three common import setups

SetupPossible advantageMain issue to resolve
U.S. buyer uses its own IOR and brokerThe commercial owner controls entry records and repeat importsBuyer must organize certificate data and broker instructions
Seller or nonresident party establishes an import structureSeller may retain control over DDP delivery and compliance recordsRequires a valid customs setup, clear U.S. agency relationships, and product knowledge
Forwarder or third party provides the IOR arrangementConvenient for small sellers without their own U.S. import infrastructureProvider must accept the product and define whether it is the certifier or only the entry party

No setup is made compliant merely by calling it DDP. The controlling question is whether the responsible parties and data flow are real, authorized, and documented.

A freight provider can help coordinate the shipment, but cargo acceptance should be checked product by product, and a quoted “door to door” or “all inclusive” DDP scope should be confirmed item by item before it counts as a complete compliance answer.

Product Registry, Full PGA and Reference PGA

There are two main ways certificate data can be submitted with an entry.

Full PGA Message Set

The filer transmits the complete required certificate data through ACE for the shipment. This may be suitable when a business does not store the certificate in the CPSC Product Registry or has infrequent, changing products.

Reference PGA Message Set

The importer or responsible business first enters and certifies the product data in the Product Registry. The customs broker then files a smaller message set that references that record using certificate identifiers.

The CPSC Product Registry is a repository for certificate data. It does not independently transmit the customs entry to ACE. The importer must still provide the relevant identifiers to the broker, and the broker must include the reference in the entry filing.

The CPSC eFiling Quick Start Guide explains that a certificate with unchanged details can be entered once and referenced for repeated shipments of the same product.

A simple workflow looks like this:

  1. Determine whether the finished product requires a CPC or GCC.
  2. Identify every applicable safety rule.
  3. Complete the required testing and supporting records.
  4. Issue an accurate certificate.
  5. Decide who is responsible for the certificate data.
  6. Store the data in Product Registry or prepare a Full PGA data set.
  7. Give the broker the identifiers or complete data before entry.
  8. Retain supporting records in case CPSC requests them.

What to Prepare Before Shipping

The exact file depends on the product, but a CPSC-ready shipment typically requires more than one PDF labeled “certificate.”

Product identification

  • Product name and description
  • Model, item number, or SKU
  • Product and packaging photographs
  • Intended age and use
  • Materials, components, coatings, and relevant construction details
  • Manufacturer and factory information

Testing and certification

  • Applicable CPSC rule citations
  • Test reports supporting the finished product certificate
  • Confirmation that the laboratory is accepted for the applicable third-party testing scope when required
  • CPC or GCC with complete and accurate certificate elements
  • Manufacturing and testing dates and locations
  • Records custodian and laboratory contact information

Product and packaging records

  • Tracking-label information for children’s products
  • Required warnings, age grading, and instructions
  • Consistency between the product, packaging, report, certificate, and commercial invoice

Entry and eFiling information

  • Correct HTS classification for the actual product
  • IOR and certifier arrangement
  • Product Registry identifiers or Full PGA certificate data
  • Broker authorization and filing instructions
  • Commercial invoice, packing list, and transportation documents

Do not send a customs broker a folder of reports and assume the broker will determine the applicable product rules. The product owner and certifier should organize the data so the broker can transmit a defined filing.

What to Ask Your Freight Forwarder and Customs Broker

Before booking CPSC-regulated cargo, request written answers to the following questions:

  • Do you accept this exact product, age grading, materials, and battery configuration?
  • Who will be the Importer of Record for this entry?
  • Who will be identified as responsible for CPSC certification?
  • Does the responsible party have access to the test reports and product records?
  • Who owns or maintains the Product Registry record?
  • Will the broker file a Full PGA or Reference PGA Message Set?
  • If using a reference filing, which certificate identifiers must be provided?
  • Who checks that the SKU on the invoice matches the tested and certified product?
  • Who responds if CPSC requests the certificate or underlying test evidence?
  • What happens if the shipment is held for document review or examination?
  • Does the quoted service include only transportation, or also the agreed import and PGA coordination?

A provider that says “CPC cargo is fine” but cannot identify the IOR, certifier, and filing party has not yet described a complete process.

Run these as the CPSC-specific part of vetting a freight forwarder before booking, not as a substitute for the wider provider check.

Multiple SKUs and Repeat Shipments

The Product Registry can reduce repeated data entry when the same product is imported more than once. If the certificate details remain identical, the existing record may be referenced for subsequent shipments.

However, that does not mean one report automatically covers any number of SKUs.

Whether variants can share testing evidence depends on factors such as:

  • identical or different materials;
  • colors, paints, inks, coatings, or plasticizers;
  • product construction and mechanical hazards;
  • intended age group;
  • battery, magnet, electrical, or small-parts features;
  • manufacturing factory and process;
  • applicable safety rules; and
  • the sampling and product-family rationale accepted by the laboratory.

A comment such as “one report covers 50 to 100 SKUs” is not a universal CPSC rule. A multi-SKU strategy should begin with a technical review of product differences, not a target number of SKUs per report.

If a material, component, factory, or product design changes, determine whether the change affects the validity of the existing testing and certificate before reusing the record.

HTS Flags, CP1/CP2 and Disclaim Messages

CPSC and CBP use HTS flags to alert the trade community that a tariff classification may include products subject to CPSC requirements.

The key word is may.

CPSC’s HTS and eFiling guidance explains that its list of approximately 600 HTS codes is intended to assist importers and brokers. It is not an exhaustive list of every code under which a certificate may be required.

Therefore:

  • A flagged HTS code does not prove that every product under that code requires a certificate.
  • A code missing from the guidance does not prove that the product is outside CPSC requirements.
  • Product classification does not replace analysis of the product’s intended use, age grading, materials, and applicable rules.
  • A disclaim message should be used only when the applicable conditions are actually met.

CP1 and CP2 are entry-system flags, not product-safety verdicts. They tell the filer to evaluate whether CPSC data is required; they do not turn an uncertified regulated product into an exempt product.

What Happens If Certificate Data Is Missing?

A common claim is that any missing eFiling data will automatically cause the entry to be rejected or the goods to be returned. The current implementation is more nuanced.

CBP’s July 2026 implementation message states that software providers are not expected to force a CPSC PGA Message Set for every CP1- or CP2-flagged HTS code. Filers can technically transmit an entry without a CPSC message even when a code is flagged.

That clarification affects whether the entry software automatically blocks filing. It does not eliminate the underlying certification obligation.

The CPSC eFiling FAQ should be checked for current implementation answers, while the CBP implementation message confirms that missing data is not configured as an automatic rejection in every flagged entry.

Possible consequences of an unsupported or missing filing can still include:

  • advisory or warning messages;
  • higher targeting risk;
  • requests for certificates or test records;
  • document review or physical examination;
  • detention or other enforcement action; and
  • post-entry investigation.

Customs release is not proof that the product was compliant. CPSC may ask for supporting records later.

Common Myths and Risky Shortcuts

ClaimMore accurate answer
“Only children’s toys are affected.”Children’s products are important, but regulated general-use products requiring a GCC may also be subject to eFiling.
“The CPC company must always be identical to the IOR.”Not universally. CPSC permits structures in which the entry identifies another responsible owner, purchaser, or consignee, but the roles and data must be explicit.
“The test report must always be issued in the IOR’s name.”The report must support the actual product and applicable requirements. The certifier relies on valid evidence; the report and import-party roles should not be confused.
“A U.S. company with a green-card owner is always required.”That is not a general CPSC eFiling rule. A provider may impose separate onboarding or risk requirements.
“If the forwarder accepts the cargo, there is no compliance problem.”Cargo acceptance is a commercial decision, not a government finding that the product is compliant.
“If the goods clear, the certificate is no longer important.”CPSC may request records or investigate after release.
“Use another HTS code to avoid the flag.”Knowingly using an incorrect classification creates a separate customs risk and does not remove product-safety obligations.
“DDP means the forwarder owns all product compliance.”DDP allocates delivery and import-cost responsibilities between seller and buyer; it does not automatically assign CPSC certification to a freight provider.

A Pre-Shipment Decision Path

Use this order before sending regulated products to the United States:

  1. Classify the product itself. Determine intended age, use, materials, components, and applicable CPSC rules.
  2. Confirm whether certification is required. Identify CPC, GCC, or a valid basis for a disclaim.
  3. Build the evidence file. Complete applicable testing and verify that the report covers the finished product being shipped.
  4. Issue the certificate. Ensure the product, rule citations, certifier, factory, testing, and records information are accurate.
  5. Name the responsible parties. Identify the certifier, IOR, Product Registry owner, customs broker, and records contact.
  6. Choose the filing method. Prepare either Full PGA data or valid Product Registry identifiers for a Reference PGA filing.
  7. Confirm the transport channel. Make sure the forwarder and IOR arrangement accept the product and understand the filing structure.
  8. Audit shipment consistency. Match the invoice, SKU, packaging, labels, report, certificate, registry record, and broker instructions.

If any step depends on “the forwarder will probably handle it,” the arrangement is not ready for shipment.

Frequently Asked Questions

Does the company named on a CPC have to be the Importer of Record?

Not in every arrangement. CPSC allows an entry filer to identify a responsible owner, purchaser, or consignee when the IOR or broker is not the certification party. The responsibility and data flow must still be clearly documented.

Can a customs broker submit CPSC eFiling data?

Yes. A customs broker can transmit the required PGA Message Set through ACE. The broker needs complete certificate data or valid Product Registry identifiers and does not automatically become responsible for creating or supporting the certificate.

Can a freight forwarder act as the IOR for products requiring a CPC?

Potentially, if the provider’s arrangement allows it. Many forwarders decline because an IOR for regulated children’s products may face certification, recordkeeping, and enforcement exposure. Ask whether the provider is the certifier or only coordinates entry.

Do I need a U.S. company to use the CPSC Product Registry?

CPSC states that a non-IOR owner, purchaser, or consignee responsible for certification can create a business account without providing an IOR number. Customs, tax, agency, and service-provider onboarding requirements must still be evaluated separately.

Can I ship CPSC-regulated products under DDP?

Yes, if the DDP structure has an accepted IOR, a responsible certifier, valid supporting evidence, defined Product Registry or Full PGA data, and a broker able to file the entry correctly. The Incoterm alone is not enough.

Can one CPC or test report cover multiple SKUs?

Sometimes related variants can be grouped, but there is no universal SKU limit. Coverage depends on product design, materials, colors, components, age grading, factory, applicable rules, and the laboratory’s testing rationale.

Does every product under a flagged HTS code require a CPC or GCC?

No. An HTS flag indicates that the classification may include regulated products. The actual product must be evaluated. The reverse is also important: an unflagged code does not guarantee that no certificate is required.

Will CBP automatically reject an entry without CPSC PGA data?

Not in every flagged entry under the current implementation configuration. However, the absence of an automatic software rejection does not waive certification or eFiling obligations and does not prevent examination or enforcement.

Plan a CPSC-Ready Shipment

If your China-to-US shipment may require a CPC or GCC, decide who holds each role before you book. Talk to our China–USA freight team about how the Importer of Record, certifier, Product Registry record, and PGA filing will be arranged for your products.

This article is for general informational purposes and does not replace product-specific advice from CPSC, a qualified customs broker, testing laboratory, or legal adviser.