Article Highlights:
Regulation (EU) 2025/2509 replaces Directive 2009/48/EC and strengthens the chemical safety requirements that apply to toys. The regulation entered into force on January 1, 2026 and will begin applying on August 1, 2030, giving manufacturers a significant transition period to prepare.
One of the most notable changes is the expansion of the chemical scope beyond the traditional focus on carcinogenic, mutagenic, and reproductive toxic substances. The regulation introduces bans on several hazard categories, including CMR substances, certain endocrine disruptors. specific target organ toxicants, and regulatory sensitizers, among other chemical groups.
The most important structural change in the Toy Safety Regulation may be its use of generic prohibitions. Under the new framework, certain hazardous substances are prohibited based on their classification under the CLP Regulation, rather than only because an individual substance has been specifically added to a toy restriction list.
How does the EU Toy Safety Regulation change chemical compliance requirements? The law’s name notwithstanding, the answer goes beyond toys. Regulation (EU) 2025/2509 introduces a broader approach to chemical compliance that places greater emphasis on hazard classification, exposure, and supply chain information. The regulation, which repeals the existing Toy Safety Directive, will fully apply starting on August 1, 2030. While that might seem like a ways away, its approach is worth tracking and understanding now for chemical compliance professionals across regulated industries.
The requirements of the EU Toy Safety Directive go beyond restricting chemicals in toys. The more important development is how those restrictions are structured. The regulation combines generic prohibitions based on hazard classifications under the EU Classification, Labelling and Packaging Regulation, substance-specific requirements, exposure assessment, and digital compliance documentation. Together, these elements point toward a more dynamic model of chemical regulatory compliance for the EU.
What the EU Toy Safety Regulation Changes for Chemical Compliance
Regulation (EU) 2025/2509 replaces Directive 2009/48/EC and strengthens the chemical safety requirements that apply to toys. The regulation entered into force on January 1, 2026 and will begin applying on August 1, 2030, giving manufacturers a significant transition period to prepare.
One of the most notable changes is the expansion of the chemical scope beyond the traditional focus on carcinogenic, mutagenic, and reproductive toxic substances. The regulation introduces generic prohibitions covering several hazard categories, including:
CMR substances
Certain endocrine disruptors
Specific target organ toxicants
Respiratory sensitizers
Certain skin sensitizers when they meet the specified CLP classifications.
Intentional use of PFAS in toys is also prohibited, subject to the interaction with other applicable EU restrictions.
This creates a different type of chemical risk assessment. Instead of relying exclusively on a predefined list of named substances, companies need processes that can connect product substances with changing hazard classifications and regulatory requirements. For chemical compliance professionals, that distinction is important. A compliance program built primarily around static substance lists can become difficult to maintain when regulatory obligations are increasingly connected to hazard properties, exposure, and product contexts.
From Fixed Lists to Generic Bans: A New Chemical Compliance Model
The most important structural change in the Toy Safety Regulation may be its use of generic prohibitions. Under the new framework, certain hazardous substances are prohibited based on their classification under the CLP Regulation, rather than only because an individual substance has been specifically added to a toy restriction list. These prohibited substance categories include all the chemicals outlined above.
This matters because hazard classification can change independently of a product-specific restriction list. As substances are classified or reclassified, the population of chemicals potentially subject to a generic prohibition can also change. For chemical compliance professionals, this shifts part of the work from maintaining a list to maintaining a relationship between substances, hazard classifications, regulatory rules, and products.
While the distinction may seem subtle, it actually represents a fundamentally different compliance model.
It also illustrates why chemical regulatory compliance is becoming more dependent on structured substance data. If a company only knows that a supplier has declared a component compliant with a particular regulation, it may not have enough information to evaluate the component against a new requirement based on hazard classifications.
The Toy Safety Regulation still contains substance-specific requirements and does not eliminate traditional regulatory lists. Instead, it adds another layer to the compliance model. Companies therefore need to manage both specific restrictions and broader classification-based requirements.
Exposure Assessments Raise the Chemical Compliance Bar
The regulation also pushes chemical risk assessment beyond the traditional question of whether an individual substance exceeds a specific limit. Article 25 requires manufacturers to conduct a safety assessment covering chemical hazards and potential exposure. For chemical hazards, the assessment must consider exposure to individual chemicals as well as known additional hazards arising from combined exposure to different chemicals present in the toy. The regulation also requires the assessment to be updated when additional relevant information becomes available.
This is significant because conventional substance compliance often operates on a substance-by-substance basis. A supplier provides information about a material, the manufacturer compares the reported substance concentrations with applicable thresholds, and the resulting status is recorded. A cumulative exposure approach requires more context.
The compliance professional may need to understand which chemicals are present across different components, how they can contribute to exposure, and whether interactions between chemicals create additional known risks. The regulation specifically recognizes combined exposure in its chemical safety framework and also considers overall exposure from other sources in certain derogation assessments.
The practical implications here are that chemical compliance data cannot always remain isolated at the individual component level. Product composition, substance identity, concentration, use, exposure, and regulatory status increasingly need to be connected.
How This Connects to Other EU Regulations
The Toy Safety Regulation is part of a larger EU regulatory environment—one in which product compliance requirements increasingly overlap.
REACH remains central to the chemical requirements for toys. The Toy Safety Regulation explicitly requires toys to comply with applicable EU chemicals legislation, including REACH, while also establishing additional requirements specific to toys. The new regulation can therefore add another layer to an existing REACH assessment, rather than replacing it outright.
The Packaging and Packaging Waste Regulation (PPWR) provides another example of this convergence. The PPWR establishes restrictions and thresholds relating to substances in packaging, including PFAS restrictions for food contact packaging that began applying on August 12, 2026. It also establishes limits on the combined concentration of lead, cadmium, mercury, and hexavalent chromium in packaging and packaging components.
For a company selling a regulated product, the relevant compliance question may not be whether the product complies with one regulation. Organizations may need to determine whether the product, its packaging, its materials, and its supply chain satisfy several overlapping chemical requirements at the same time.
The Cyber Resilience Act adds a different dimension to these emerging new obligations. The CRA applies to products with digital elements and specifically identifies certain connected toys as important products subject to stricter conformity assessment requirements. Its requirements address cybersecurity, vulnerability management, technical documentation, and supply chain considerations rather than chemical safety.
For connected toys, however, these obligations can exist alongside the chemical and product safety requirements of the Toy Safety Regulation. This illustrates a broader trend: a single product can increasingly sit at the intersection of multiple regulatory regimes, each requiring its own evidence and risk assessment. Chemical compliance professionals should therefore think less in terms of isolated regulations and more in terms of a connected product compliance environment.
The Digital Product Passport and What It Means for Chemical Compliance Data
The Toy Safety Regulation also brings chemical compliance closer to the broader EU move toward digital product information.
Manufacturers will soon be required to create a Digital Product Passport for toys before placing them on the EU market. These passports must contain specified information demonstrating compliance, remain available for 10 years, and be accessible to relevant stakeholders according to defined access rights. The regulation also requires the passport to be interoperable with other Digital Product Passports required under EU law.
This builds directly on the Digital Product Passport infrastructure established through the Ecodesign for Sustainable Products Regulation. The ESPR establishes a framework in which product-specific rules can require digital passports containing compliance documentation, product identifiers, and other information needed to improve traceability and verification across the value chain.
For chemical compliance teams, the important point is that product compliance data is increasingly becoming structured product information rather than documentation stored separately in a collection of files.
A supplier declaration, test report, safety assessment, substance composition record, or regulatory determination may eventually need to connect to a specific product, component, material, or product identifier. This makes data quality and traceability increasingly important parts of chemical risk management.
What Chemical Compliance Professionals Should Do Now
Companies do not need to wait until 2030 to start preparing for this model. The transition period provides an opportunity to evaluate whether existing compliance processes can support a more dynamic approach to substance compliance.
The first step is substance mapping. Companies should understand which substances are present in their products and materials, where those substances occur, and which regulatory classifications are associated with them. This provides the foundation for evaluating and meeting requirements that depend on substance identities or hazard classifications.
The second step is supply chain due diligence. Supplier declarations remain important, but companies may need more granular information about substances, concentrations, and changes to formulations. A compliance process that only captures a general declaration of conformity may not provide enough information to evaluate new requirements as regulations evolve.
Testing portfolios should also be reviewed. Testing should support regulatory requirements and identified risk rather than operate as a disconnected exercise. Where documentation is incomplete, companies should be able to determine which materials or suppliers warrant additional evidence.
Finally, documentation efforts need to support traceability. Technical documentation, supplier evidence, test results, substance information, and product records should all be connected in a way that allows compliance teams to understand not only the current status of a given product, but also the evidence supporting that status.
Bringing Chemical Compliance Data Together
The new Toy Safety Regulation demonstrates why chemical compliance increasingly requires centralized data rather than fragmented compliance processes. Compliance solution Z2 is designed around this need, bringing substance, supplier, product, and regulatory information together so compliance teams can evaluate requirements across multiple regulations from a centralized data environment. Instead of managing REACH, RoHS, PFAS, and packaging requirements in a siloed fashion, teams that use Z2 can see the regulatory requirements alongside the underlying product and supplier data used to assess compliance.
As the EU continues moving toward classification-based restrictions, cumulative risk considerations, and Digital Product Passports, that connection will only become more valuable over time. And while the Toy Safety Regulation may have been drafted for toys, its structure and obligations convey a broader message for chemical compliance professionals: the future of compliance will depend less on maintaining static lists and more on consistently tracking the data, relationships, and regulatory context needed to understand all of a product’s risks.
To learn about how Z2 can help your businesses comply with a wide range of chemical regulations, schedule a free trial with one of our product experts.