Product Recalls: Reporting Duties, Corrective Action Plans, and Records

The federal duty to report a dangerous consumer product is triggered earlier than most companies expect. Under 15 U.S.C. § 2064(b), a manufacturer, importer, distributor or retailer must immediately inform the Consumer Product Safety Commission once it obtains information which reasonably supports the conclusion that a product fails to comply with a safety rule, contains a defect that could create a substantial product hazard, or creates an unreasonable risk of serious injury or death. "Immediately" is interpreted through CPSC's regulations as a very short window — in practice, within 24 hours. These duties are federal; the injury claims that follow a recall are governed by state law.

The first question is which agency

There is no single federal recall system. Three regimes cover most products, and they differ in who reports, how fast, and what remedy is required.

Products can sit in more than one regime — a child car seat, a food-contact appliance, a drug delivery device — and the answer is not always obvious. Where jurisdiction is unclear, agencies coordinate, but the firm's duty to report is not suspended while it works out which one applies.

What "reasonably supports the conclusion" means in practice

The statutory language does not require the firm to be sure. It requires it to report when the information it has would reasonably support the conclusion — a much lower bar than proof, and one that can be met by a pattern of complaints long before an engineering root cause is identified.

The most important consequence is procedural. A firm may report while stating clearly that it does not believe the product is defective. The CPSC's business guidance contemplates exactly that, and reporting is not an admission. Firms that delay reporting in order to finish an investigation are choosing the one path that adds a separate violation to whatever the underlying product problem turns out to be.

• A cluster of complaints describing the same failure mode, even without injuries.
• A single incident involving serious injury, fire, or a child.
• Warranty or return data showing a failure rate that departs from the norm for the line.
• Testing that shows a unit outside a mandatory or voluntary standard.
• A supplier notice that a component was out of specification.
• A recall of the same component by another brand that uses it.
• Insurance or litigation claims alleging the same failure.

Watch out: The duty falls on distributors and retailers too, not only manufacturers and importers. A retailer that learns of a hazard through its own returns data has its own reporting obligation and cannot simply pass the information upstream and wait.

The clocks, side by side

1. Consumer products — immediately

   The statutory duty is to inform CPSC immediately on obtaining the qualifying information; the Commission's regulations treat that as a matter of hours rather than days.

2. Vehicles — within five working days

   Under NHTSA's regulations, a manufacturer that determines a safety-related defect or non-compliance exists must file a defect information report within five working days.

3. Certain foods — within 24 hours

   The responsible party for an article of food with a reasonable probability of serious health consequences must submit a report to FDA's registry within 24 hours of determining that.

4. Devices and drugs — regime-specific

   Medical device reporting and drug field alert requirements run on their own regulatory timetables, separate from any recall decision.

Because the clocks are short, the decision cannot wait for a scheduled meeting. Companies that handle this well have a standing protocol naming who convenes the group, who can authorize a report, and who acts if that person is unreachable.

What a corrective action plan has to do

After a report, the firm and the agency negotiate a corrective action plan. The plan is where the recall actually gets defined, and its elements are consistent across regimes even though the terminology differs.

1. Scope. Which models, date codes, lot numbers and serial ranges are affected, and how many units went where. This is where distribution records earn their keep.
2. Remedy. Repair, replacement, or refund — and who bears the cost. Under NHTSA's regime, the remedy for a defect is provided to owners without charge.
3. Notice. The wording of the announcement, and how it reaches consumers: direct notice to registered owners, retailer and distributor notification, website and social channels, and press release.
4. Stop-sale and quarantine. Halting shipment, pulling stock from shelves and distribution centers, and blocking online listings.
5. Disposition. What happens to returned units — repair, destruction, or documented disposal — so recalled goods do not re-enter the market.
6. Progress reporting. Periodic reports to the agency on units recovered and remedied, which is how effectiveness is measured.

Practical step: CPSC operates a Fast Track process for firms willing to commence a corrective action promptly after reporting. Where a firm qualifies, the Commission generally does not proceed to a preliminary determination that the product presents a substantial hazard, which shortens the process considerably. The program was operating on those lines as of mid-2026, and the current conditions are on CPSC's own pages.

Records, contracts, and what state law adds

Recall capability is mostly a records question decided long before an incident. A firm that cannot say which lot went to which distributor is forced into a far broader and more expensive recall than the defect requires.

• Distribution records tying lot and date codes to customers, retailers and regions.
• A single complaint and incident log covering every channel — support, warranty, social, retailer feedback.
• Testing and certification records, including supplier certificates for components.
• Supplier agreements allocating recall costs, with indemnity and insurance requirements.
• Retained samples from production runs, held for the period the product is in use.
• A litigation-hold procedure so that documents and physical samples are preserved once a claim is foreseeable.

Cost allocation belongs in the supply agreement rather than in a negotiation after the event. Where products are made through a shared arrangement, our guide to joint venture agreements covers how liability and cost sharing get settled in advance. Imported goods add a further federal layer — importers carry the same reporting duties and separate trade obligations covered in our guide to screening a transaction before it proceeds.

State law then supplies what federal recall law does not. Product liability — negligence, strict liability, warranty — is state law, and a completed recall does not resolve claims by people already injured, though the recall record becomes evidence in them. State attorneys general enforce state consumer protection statutes independently of the federal agencies, and repair, parts and warranty obligations vary by state, as our explainer on right-to-repair laws describes. Ordinary operating permissions continue to apply throughout — see our guide to every licensing layer that applies.

Common questions

Can we investigate first and report once we know the cause?

That is the most common and most expensive mistake. The statutory trigger is information that reasonably supports a conclusion, not a completed root-cause analysis. Firms are expected to report on what they have and supplement as they learn more. Waiting converts a product problem into a separate reporting failure, which agencies treat seriously and which is easy to prove from internal emails.

Does a recall have to be nationwide?

Not necessarily. Scope follows the affected population — specific models, lots, date codes or serial ranges — and good distribution records are what allow a narrow scope to be defended. Where a firm cannot identify which units are affected, agencies push toward a broader recall because there is no reliable way to exclude anything. The recordkeeping decision is effectively a scope decision.

What if our product was sold under a retailer's own brand?

Both firms can have duties. The manufacturer, the importer and the private-label retailer may each hold information triggering a report, and each has its own obligation. Supply agreements should say who leads communication with the agency, who funds the corrective action, and how information is shared, because a disorganised split of responsibility slows the response and both names still appear on the notice.

How is recall effectiveness measured?

By the proportion of affected units actually remedied or recovered, reported to the agency over time. Low response rates often lead agencies to ask for further outreach — repeat notices, additional channels, or direct contact with registered purchasers. Firms that captured customer registration data at the point of sale generally reach far better rates than those relying on a press release and a website page.

The first forty-eight hours

Convene the standing group immediately: quality, legal, regulatory, operations, customer support and communications. Fix one decision-maker and one record of decisions.

Preserve everything before anything else — the incident report, the unit involved, retained samples, testing files, supplier records — and issue a litigation hold. Documents destroyed in the ordinary course after an incident become the story.

Assess against the statutory trigger rather than against certainty, and report if the information reasonably supports the conclusion. Stop shipment and quarantine stock while the assessment runs, because units leaving the warehouse during the analysis widen the eventual recall.

Then build the corrective action proposal with the agency rather than around it, and keep the public notice accurate — claims about a remedy are advertising claims and are subject to the FTC's business guidance as well. Vehicle and food recall procedures are set out by NHTSA and the FDA respectively.