ACCEPTABLE QUALITY LIMIT (AQL) FOR PRODUCT INSPECTIONS

If you import children's products into the United States, CPSIA is the law that decides whether your container is released, whether your Amazon listing stays up, and whether your product is legal to sell at all.

It has been in force since 2008. What changed this month is not what CPSIA requires, but when you have to prove it.

The rule that changed on 8 July 2026

CPSC eFiling is now mandatory. Certificate data must be transmitted electronically to US Customs at the time of entry, through the ACE system, instead of being held by the importer and produced on request. Four of the seven data elements you have to file are not facts about your company at all. Two describe your factory: the date of manufacture and the place of manufacture. Two describe the testing: the date of the most recent test and the laboratory that performed it. A certificate is no longer a document you keep. It is data you declare, and none of it originates in your office.

This guide covers what CPSIA requires, how the certificate works, what has just changed at the border, and where in the sourcing chain each requirement is verified.

What Is CPSIA? (2008 Law, Why It Exists, Who's Affected)

The Consumer Product Safety Improvement Act of 2008 is the US federal law governing the safety of children's products. It was passed after a wave of recalls of imported toys containing lead paint, and its structure reflects that origin: it does not rely on the importer's assurance, it requires proof from an independent laboratory.

What CPSIA does	What that means for an importer
Sets hard limits on lead and phthalates in children's products	These are prohibitions, not warnings. Above the limit, the product is a banned hazardous substance.
Requires testing by a third party laboratory accepted by the CPSC	Your supplier's own test report does not satisfy the law
Requires a Children's Product Certificate	The certificate is issued by you, the importer, on the strength of that testing
Requires a permanent tracking label	So that a recall can be traced to a batch, a date and a facility
Makes ASTM F963, the toy safety standard, mandatory	A voluntary industry standard became federal law

CPSIA is enforced by the Consumer Product Safety Commission (CPSC). The two are often confused: the CPSC is the agency, CPSIA is one of the laws it enforces.

Which Products Fall Under CPSIA? (Ages, Categories, Definition of "Children's Product")

A children's product is a consumer product designed or intended primarily for children 12 years of age or younger. The test is not what the product is, but who it is for.

Term	Definition	Why it matters
Children's product	Designed or intended primarily for children aged 12 or under	The trigger for the whole CPSIA regime
Children's toy	A product designed or intended for a child aged 12 or under to use when the child plays	The trigger for the phthalate prohibition and for ASTM F963
Child care article	A product intended to facilitate sleep or the feeding of children aged 3 or under, or to help them with sucking or teething	The trigger for the phthalate prohibition, even where the item is not a toy

The judgement call that catches importers is the word "primarily". A product marketed to adults but obviously usable by a child, or sold in a children's section, or decorated with cartoon characters, can be treated as a children's product regardless of what your listing says. If the packaging shows a child using it, you are in scope.

CPSIA Testing Requirements: Lead, Phthalates, Small Parts

Three requirements catch almost every imported children's product.

Lead. Two separate limits apply, and confusing them is the most common error in the industry.

Limit	What it covers
100 ppm	Total lead content in any accessible component part: the material itself, whether or not anything is painted over it
90 ppm	Lead in paint and similar surface coatings

A painted metal toy has to satisfy both: 90 ppm in the paint, 100 ppm in the metal underneath. Paint is not a barrier that makes the substrate inaccessible.

Phthalates. A children's toy or child care article may not contain more than 0.1 per cent (1,000 ppm) of any regulated phthalate in any accessible component part. Eight are prohibited: DEHP, DBP and BBP under section 108(a) of CPSIA, and DINP, DIBP, DPENP, DHEXP and DCHP under 16 CFR part 1307. The restriction applies to any plasticised component, which in practice means every soft PVC part, grip, cable sheath and imitation leather surface.

Small parts. A toy intended for a child under three must not contain a small part that fits entirely inside the small parts cylinder defined at 16 CFR part 1501, before or after use and abuse testing. The phrase that matters is "after use and abuse testing": a toy that passes on arrival and sheds an eye, a wheel or a button when a child pulls it has failed.

Where these three actually fail

Not in the main material, which the supplier chose carefully and had tested. In the component: the zip, the button, the paint on the third production run, the cheaper plasticiser a subcontractor substituted after the sample was approved.

ASTM F963: The Toy Safety Standard Bundled with CPSIA

Section 106 of CPSIA turned ASTM F963, a voluntary industry standard, into a mandatory federal safety standard for toys. Compliance is not optional and it is not a marketing claim.

The current mandatory version is ASTM F963-23, effective for toys manufactured on or after 20 April 2024. It replaced ASTM F963-17.

ASTM F963 covers	Examples
Soluble heavy elements in surface coatings and in substrates that can be sucked, mouthed or ingested	Eight elements including antimony, arsenic, barium, cadmium, chromium, lead, mercury and selenium
Mechanical and physical hazards	Small parts, sharp edges, sharp points, projectiles, cords and elastics
Flammability	Textile and material burn rates
Sound pressure	How loud a toy may be
Labelling and instructions	Age grading, warnings

Not every section applies to every toy. It is the importer's job, not the factory's, to identify which sections apply to their product. That determination is what a test plan is built on, and getting it wrong means paying for a test that does not certify what you need certified.

Children's Product Certificate (CPC): What Amazon and Retailers Require

The CPC is the document that makes your product legal to import. Three things about it surprise importers.

You issue it, not the laboratory. The certificate is issued by the importer (or the domestic manufacturer). The laboratory produces a test report. You turn that report into a certificate, and you are the party who is liable for its accuracy.

It must be based on third party testing. For children's products, the testing has to be done by a laboratory that the CPSC has accepted. A supplier's in-house report does not qualify. This is stricter than the rule for general-use products, which may be certified on a reasonable testing programme without third party testing.

A testing exemption does not remove the certificate. If your material qualifies for a testing exemption, you still issue a certificate, citing the rule and naming the exemption. "Exempt from testing" is not "exempt from certifying". This trap catches a large number of importers.

The CPC must state	Detail
The product it covers	Identified specifically enough to be matched to a shipment
Each safety rule it is certified to	Every applicable rule, cited
The importer or domestic manufacturer	Name, address, telephone
The contact who holds the test records	A named person, reachable
Date and place of manufacture	Of the product itself
Date and place of testing	When and where the product was most recently tested
The laboratory	The CPSC-accepted third party laboratory that performed the testing

Read that list again with a sourcing eye. Only three of those seven items are facts about your own company. Two are facts about your factory and your production run, and two are facts about the testing. That is what makes the next section a supply chain problem rather than a paperwork problem.

CPSC eFiling: Why Your Certificate Now Has to Reach Customs Before Your Container Does

This is the change that has just landed, and most importers have not yet felt it.

	Before 8 July 2026	Now
Who holds the certificate	The importer	The importer
When Customs sees it	Only if it asks, usually after a container is pulled for examination	At the time of entry, every time
How	A PDF produced on request	Certificate data transmitted electronically to CBP through the ACE system
Consequence of getting it wrong	A delayed container, sometimes	A risk score that determines how often your future containers are examined

The dates. Mandatory from 8 July 2026 for most imported regulated consumer products. For goods entering a Foreign Trade Zone and later withdrawn for consumption or warehousing, 8 January 2027. There is no de minimis exemption: if a product needs a certificate, it needs an eFiled certificate, whatever the shipment is worth. And the revised rule adds a requirement that catches people out: you must also identify any testing exclusion you are relying on. An exclusion is not silence. It is something you declare.

The trap. At launch, the CPSC does not intend to have the system reject entries solely for a missing filing. It sends warning messages instead.

Do not read that as a grace period. In the same guidance, the CPSC says it will continue to enforce certificate requirements and will submit requests to Customs to initiate seizure of non-compliant products. Nothing is rejected at the door, and your goods can still be seized behind it.

And the filings you make, or fail to make, feed a risk score. Incomplete or absent data raises your profile for holds and examinations; clean data lowers it. The importers who treat July 2026 as optional are not escaping the rule. They are building a record that will decide how often their containers get opened for the next several years. It would be a mistake to read that as a grace period. The CPSC continues to enforce certificate requirements, can request seizure of non-compliant products, and adjusts each entry line's risk score based on the data you file. Clean filings reduce holds and examinations. Absent or inconsistent ones raise your profile, quietly, for months.

Why this is a sourcing problem, not a customs problem

Date of manufacture. Place of manufacture. Date of the most recent test. The testing laboratory. Four of the seven data elements you now have to file at every entry exist upstream of you: two at the factory, two at the laboratory. None of them are in your office. An importer running twenty SKUs across five suppliers now needs that data structured, accurate and broker-ready before the vessel arrives. For the two that describe the factory, the party best placed to capture them is the one standing on the production floor.

CPSIA Tracking Label Requirements (Placement, Content, Format)

Section 103 of CPSIA requires a permanent, distinguishing mark on the product and on its packaging, so that a recall can be traced back to a specific batch from a specific facility.

The tracking label must allow you to determine	In practice
The manufacturer or private labeller	A name or a code that resolves to one
The location of manufacture	City and country, or a code
The date of manufacture	Month and year at minimum
Batch, run or other identifying information	A batch or run number

The CPSC does not prescribe a format. It prescribes an outcome: someone holding the product must be able to trace it. Two failures recur:

[CHECKLIST] - The label is on the packaging but not on the product. Both are required. Packaging is thrown away; the product is what a recall has to find. - The label is not permanent. A paper sticker that peels off in a bath, or a printed mark that abrades off a toy in normal use, does not satisfy a requirement that exists to survive years of use. [/CHECKLIST]

ASTM F963-23 added a section restating these tracking label requirements, which tells you how often the toy industry was getting them wrong.

Third-Party Testing: CPSC-Accepted Labs (Including in China)

For children's products, the testing behind your CPC must be performed by a laboratory that the CPSC has accepted. This is a specific status, and the mechanism is worth understanding because it explains the trap. To be accepted, a laboratory must be accredited to ISO 17025 by an accreditation body that is a signatory to the ILAC Mutual Recognition Arrangement, and it must apply to the CPSC listing the specific rules, standards and test methods for which it seeks acceptance. Acceptance is granted against that list, not to the laboratory in general.

The CPSC publishes the list of accepted laboratories, and it includes a substantial number based in China and elsewhere in Asia. Testing at source is normal, legal and usually faster.

Three points decide whether the test is worth what you paid for it:

Point	Why it matters
The laboratory must be CPSC-accepted for the specific rule	Acceptance is granted rule by rule. So a laboratory accepted for lead content is not automatically accepted for ASTM F963. It was accepted for the rules it applied for, and no others. Ask for the scope, not for the badge.
The test plan must match the product	A test on the wrong component certifies nothing. The scope of testing follows from the bill of materials, and getting it wrong is a common and expensive mistake.
The sample must represent the production	A laboratory certifies the sample it received. It says nothing about the run that came off the line three months later.

A laboratory tests the sample it is given. It does not choose that sample, and it does not see your container.

That sentence is the whole argument, and it describes work that no laboratory sells, because no laboratory is at the factory.

The question	Who can actually answer it
Which components are actually in the box that went to the laboratory?	Somebody who has read your bill of materials and seen the goods, not somebody waiting for a parcel. A painted metal part is two tests. A supplier who sends the unpainted version has not lied, and your certificate is still wrong.
Is the sample that went to the laboratory representative of the lot?	Somebody who drew it, on site, under ISO 2859-1. If the factory chose the sample, you have certified the factory's best unit.
Do the goods in the container match the goods on the certificate?	Somebody who opened the cartons. A substituted pigment, a new component supplier, a second production run: none of these reach the laboratory report.
Is the tracking label physically on the product, and does the date it carries match the date you eFiled?	Somebody who was there when it was applied.

On the testing itself, our advice is the same advice we would give about anyone, including any laboratory we introduce you to: ask for the scope, not for the badge. CPSC acceptance is granted rule by rule. Ask which rules, in writing, before the sample ships. A laboratory accepted for lead is not accepted for ASTM F963 unless it applied for ASTM F963. See our lab testing and compliance services.

CPSIA Compliance for Amazon Sellers (Listing Docs, Category Ungate)

Amazon requires a Children's Product Certificate and the supporting test reports before it will approve a seller in children's categories, and it can request them at any time afterwards. A listing that cannot produce them is suspended, not warned.

[CHECKLIST] - The CPC has to name the right rules. An ungating application rejected for an incomplete certificate is almost always missing a rule citation, not a test. - The test reports must come from a CPSC-accepted laboratory. A supplier's own report will fail review. - The certificate must match the product being listed. A certificate covering a similar SKU, or an earlier production run, is the most common reason a resubmission fails. - The eFiling data and the listing documents must agree. From July 2026 you are declaring manufacture and test data to Customs as well as to Amazon. Two versions of the same facts is a problem you create for yourself. [/CHECKLIST]

For the wider set of requirements Amazon enforces at receiving, see our Amazon FBA requirements guide and our guidance on product testing for Amazon FBA. For the category where CPSIA bites hardest, see Amazon FBA for toys and kids products.

Common CPSIA Non-Compliances at China Factories

These are the failure modes that recur, and every one of them is visible at the factory before the container is sealed.

Failure	What happened	When it is catchable
Component substitution	The approved sample used a compliant plasticiser or pigment. The production run used a cheaper one from a different subcontractor.	At a during production inspection, by checking the material against the approved sample
Paint on the second run	The first run was tested. The second run was painted with a different batch of paint.	At inspection, by re-testing surface coatings on production units
Small parts after use and abuse	The toy passes on arrival. The eye, wheel or button detaches when pulled.	In the laboratory, on a production sample, not on the golden sample
Tracking label on the box only	The label is printed on the carton, not on the product itself.	At inspection, by looking at the unit
Certificate covering the wrong batch	The CPC references a test done on last season's production.	Before shipment, by matching the certificate to the manufacture date
Inaccessible part assumed compliant	A part treated as inaccessible turns out to be reachable after use and abuse testing.	In the laboratory, by testing the accessibility determination rather than assuming it

The pattern: the laboratory certifies a sample, the factory ships a production run, and nobody checks that they are the same thing.

Penalties for CPSIA Non-Compliance (Fines, Recalls, Import Refusal)

There are four consequences, and the financial penalty is rarely the one that hurts most.

Consequence	What it looks like
Refused entry	US Customs refuses the shipment. The goods do not enter. You have paid for production and freight and have nothing to sell.
Seizure	The CPSC can request that Customs seize non-compliant products.
Recall	A mandatory or voluntary recall, at your cost, including retrieval, refunds and destruction. For an Amazon seller, this reaches customers who have already been shipped.
Civil penalties	Assessed per violation, with statutory maximums that are adjusted for inflation each year. Knowing violations expose responsible individuals as well as the company.
Listing removal	Amazon suspends the listing. The revenue stops immediately, whatever the eventual legal outcome.

For an importer, the practical risk is not a fine. It is a container that does not clear, a season that is missed, and a listing that is dark during the weeks it takes to fix a laboratory report.

AQF's CPSIA Testing & Inspection Workflow

CPSIA compliance breaks at the join between the laboratory and the factory. The laboratory certifies the sample it was sent. The factory ships whatever it produced. AQF covers both ends of that join.

Stage	What AQF does
Confirm the test scope with the laboratory	The client or the laboratory sets the list of tests. AQF works from the bill of materials and the product's markets to sense-check that scope against the components actually present, so that the wrong part is not certified
Coordinate the testing	Chemical and mechanical testing through accredited partner laboratories, on the components identified rather than on the product as a whole
Verify in production	An on-site inspection at the factory, confirming that the material in the container matches the material that was tested, that the tracking label is on the product and not just on the box, and that the paint on this run is the paint that was certified
Capture the certificate data	The date and place of manufacture that your eFiling now requires are recorded at the factory, at the time of production, by someone who was there

That last line is the one that matters most in 2026. Since 8 July, the manufacture data has to be filed with Customs at every entry. An inspector standing on the production floor is the party best placed to record it accurately.

For the neighbouring US requirement on the same products, see our Prop 65 compliance guide. A children's toy can pass CPSIA lead testing and still require a Proposition 65 warning: CPSIA sets a limit you must stay under, while Prop 65 asks whether exposure exceeds the level California considers safe, and requires you to say so if it does.

Frequently Asked Questions

What is CPSIA?

The Consumer Product Safety Improvement Act of 2008 is the US federal law governing the safety of children's products. It sets hard limits on lead and phthalates, requires testing by a laboratory accepted by the Consumer Product Safety Commission, requires the importer to issue a Children's Product Certificate, requires a permanent tracking label, and makes the toy safety standard ASTM F963 mandatory. It is enforced by the CPSC, which is the agency rather than the law: the two are frequently confused.

What products are covered by CPSIA?

Any consumer product designed or intended primarily for children aged 12 or younger. Two narrower definitions matter as well: a children's toy is a product intended for a child of 12 or under to use when playing, and a child care article is a product intended to facilitate sleep or feeding for children aged 3 or under, or to help them with sucking or teething. Both of those trigger the phthalate prohibition. The word to watch is "primarily": a product marketed to adults but sold in a children's section, or shown on the packaging in the hands of a child, can be treated as a children's product regardless of how it is listed.

What are the lead limits under CPSIA?

There are two, and they are often confused. Total lead content in any accessible component part must not exceed 100 ppm. This applies to the material itself, whether or not it is painted: an unpainted plastic part is in scope exactly as a painted one is. Lead in paint and similar surface coatings must not exceed 90 ppm. A painted metal toy must satisfy both limits, because the CPSC does not treat paint, coatings or electroplating as a barrier that renders the lead underneath inaccessible.

Which phthalates are restricted under CPSIA, and at what level?

Eight phthalates are prohibited above 0.1 per cent, which is 1,000 ppm, in any accessible component part of a children's toy or child care article: DEHP, DBP and BBP under section 108 of CPSIA, and DINP, DIBP, DPENP, DHEXP and DCHP under 16 CFR part 1307. The restriction applies to any plasticised component part, which in practice means soft PVC, grips, cable sheathing and imitation leather.

What is a Children's Product Certificate (CPC)?

The CPC is the document certifying that a children's product complies with every applicable CPSIA rule. It is issued by the importer or the domestic manufacturer, not by the laboratory, and it must be based on testing performed by a laboratory accepted by the CPSC. It identifies the product, cites each safety rule the product is certified to, names the party holding the test records, and states the date and place of manufacture, the date and place of testing, and the laboratory that performed the testing. Note that a testing exemption does not remove the requirement to issue a certificate: you still certify, citing the rule and naming the exemption.

What is CPSC eFiling and when did it start?

CPSC eFiling is the electronic filing of certificate data with US Customs and Border Protection at the time of entry, through the ACE system, rather than holding the certificate and producing it on request. It became mandatory on 8 July 2026 for most imported regulated consumer products, and applies from 8 January 2027 to goods entering from a Foreign Trade Zone and later withdrawn for consumption or warehousing. It does not change which products need a certificate, only how and when the certificate data is filed. There is no de minimis exemption. Four of the seven data elements are not facts about the importer's own company: the date and place of manufacture come from the factory, and the date of the most recent test and the testing laboratory come from the laboratory.

Do I need a CPC to sell children's products on Amazon?

Yes. Amazon requires a Children's Product Certificate and the supporting third party test reports before approving a seller in children's categories, and it can request them again at any point afterwards. A listing whose documentation cannot be produced is suspended rather than warned. The most common reason an application is rejected is an incomplete certificate, usually a missing rule citation, rather than a failed test.

What is a CPSIA tracking label?

A permanent distinguishing mark required by section 103 of CPSIA, on the product itself and on its packaging, allowing anyone holding the product to determine the manufacturer or private labeller, the location and date of manufacture, and batch or run information. The CPSC does not prescribe a format, it prescribes an outcome: traceability. Two failures recur, and both are visible at the factory: the label appears on the packaging but not on the product, and the label is not permanent enough to survive normal use.

Can I test for CPSIA compliance in China?

Yes. For children's products, the testing behind your certificate must be performed by a laboratory that the CPSC has accepted, and the CPSC's published list of accepted laboratories includes a substantial number based in China and elsewhere in Asia. Two points are worth knowing. Acceptance is granted rule by rule, so a laboratory accepted for lead content is not automatically accepted for ASTM F963. And the laboratory certifies only the sample it received, which is why testing at source works best when it is paired with an inspection that confirms the production run matches the sample.

What is ASTM F963?

ASTM F963 is the US toy safety standard. Section 106 of CPSIA made it a mandatory federal safety standard rather than a voluntary industry one. It covers soluble heavy elements in coatings and in materials that can be mouthed, mechanical and physical hazards such as small parts and sharp edges, flammability, sound levels, and labelling. The current mandatory version is ASTM F963-23, which applies to toys manufactured on or after 20 April 2024 and replaced ASTM F963-17.

How much does CPSIA testing cost?

The cost depends on the scope rather than on a list price. What drives it is the number of separate components and materials that have to be tested individually, how many CPSIA rules apply to the product, whether ASTM F963 mechanical testing is needed as well as chemical analysis, and how many SKUs share a test plan. A single material soft toy is a small job. A painted wooden ride-on with metal fittings, an electrical component and a textile seat is not. Ask for a quote based on your bill of materials.

What happens if my product fails CPSIA?

The immediate consequences are commercial rather than legal. US Customs can refuse the shipment entry, the CPSC can request seizure, Amazon suspends the listing, and a recall may follow at your cost. Civil penalties are assessed per violation, with statutory maximums adjusted annually for inflation, and knowing violations can expose responsible individuals as well as the company. For most importers the real damage is a container that does not clear, a season that is missed, and a listing that stays dark for the weeks it takes to fix a laboratory report.

Are CPSIA and CPSC the same thing?

No. The CPSC, the Consumer Product Safety Commission, is the federal agency. CPSIA, the Consumer Product Safety Improvement Act of 2008, is one of the laws that agency enforces. A laboratory is described as CPSC-accepted, not CPSIA-accepted, and a certificate is issued under CPSIA and enforced by the CPSC.