GPSR & EAA Compliance for Magento
A technical guide for Magento 2 and Adobe Commerce merchants who need to comply with EU product safety and accessibility laws. Attribute setup, template changes, and extension recommendations.
Dec 13, 2024
GPSR in force
Jun 28, 2025
EAA deadline
All EU sellers
Applies to
€100,000
Max fine (DE)
Magento B2B note: GPSR applies to B2C sales. If your Magento store has both B2B and B2C customer groups, compliance requirements apply to all product pages accessible to consumers. Adobe Commerce's customer segment features can help you tailor display by segment.
6-step compliance setup for Magento 2
Steps 1–3 cover the GPSR product information requirements. Steps 4–5 cover GDPR cookie law. Step 6 covers EAA accessibility.
Create product attributes for GPSR fields
Magento's custom attribute system is the right tool for GPSR compliance fields. Create text attributes for manufacturer name, manufacturer address, manufacturer contact details, and product reference number.
How to do it: Go to Stores → Attributes → Product → Add New Attribute. Set the Input Type to "Text Field", Scope to "Global", and check "Used in Product Listing" so the values are available in frontend templates. Create four attributes: manufacturer_name, manufacturer_address, manufacturer_contact, and product_reference.
Add attributes to all attribute sets
After creating the attributes, add them to your attribute sets so they appear on all product edit pages. For most stores, adding them to the "Default" attribute set is sufficient.
How to do it: In Stores → Attributes → Attribute Set, open each set and drag the compliance attributes into an existing group (e.g., "General") or create a new "GPSR Compliance" group. This makes the fields visible in the product admin panel.
Display GPSR info on product pages
Once the attributes have values, you need to display them on product detail pages. This requires a template override or a layout XML addition to render the attribute values where customers can see them.
How to do it: Create an override of catalog/product/view.phtml or add a new layout handle in your theme to render manufacturer information. Alternatively, install an extension like "Magento 2 Custom Product Options" to display attributes without template editing.
Update your CMS legal pages
Go to Content → Pages and ensure you have published pages for: Privacy Policy, Terms of Service, Legal Notice (Impressum), and Right of Withdrawal. These must be linked in the footer on every page.
How to do it: In Magento's footer links block (Content → Blocks, or footer.phtml), add links to all legal pages. For multi-store setups, create separate pages per store view with localised content — GPSR requires safety information in the buyer's language.
Install a GDPR cookie consent extension
Magento's built-in cookie functionality is not GDPR-compliant out of the box. You need an extension that: (a) presents a consent banner before non-essential cookies load, (b) logs consent, and (c) respects withdrawal of consent.
How to do it: Popular GDPR extensions for Magento 2: "Mageplaza GDPR" (free tier available), "Amasty GDPR" (paid, comprehensive), or "CookiePro by OneTrust" (enterprise). Whichever you choose, test that Google Analytics and Meta Pixel are genuinely blocked before consent using browser devtools.
Audit and fix EAA accessibility issues
The EAA requires WCAG 2.1 Level AA from June 28, 2025. In Magento, the most common issues are: missing image alt attributes, insufficient color contrast in themes, inaccessible navigation menus, and forms without proper labels.
How to do it: Start with an automated scan (EuroGPSR below) to identify specific issues. For alt text, Magento stores image alt text per product image in the admin under Catalog → Products → Images. Theme contrast and navigation issues typically require CSS/template changes. Adobe's Luma and Blank themes have improved accessibility since Magento 2.4.4.
Recommended extensions
These extensions cover the compliance gaps that are hardest to solve with native Magento configuration.
Mageplaza GDPR
FREEby Mageplaza
Cookie consent, data subject requests, consent logging. Free tier covers the essential compliance requirements for most stores.
Amasty GDPR
PAIDby Amasty
Full GDPR suite with cookie consent, data anonymisation, and right-to-erasure workflows. Best option for larger operations.
Weltpixel Product Labels
PAIDby Weltpixel
Useful for displaying GPSR safety labels and warnings as product badges. Conditional display rules per product or category.
Scan your Magento store
Get a free EAA + GPSR compliance report with severity-ranked issues and fix guidance tailored for Magento.
Scan your store for free
Enter any page URL from your store. Your homepage is a good starting point.
No account required · Results in ~60 seconds · First scan free