ECHA's 2026 OR Inspections: What Non-EU Manufacturers Need to Know

## ECHA's 2026 OR Inspections: What Non-EU Manufacturers Need to Know With the European Chemicals Agency (ECHA) Forum planning a pilot enforcement project in 2026 focused on Only Representatives (ORs), non-EU manufacturers are facing a new level of scrutiny over their EU REACH compliance. This initiative signals a clear shift towards holding ORs accountable for their legal obligations, which in turn places significant pressure on the non-EU companies they represent. For manufacturers outside the EU, selecting a robust, transparent, and inspection-ready OR is no longer just a matter of compliance—it is a critical risk management strategy. The role of the OR is to fulfill the registration and communication obligations of importers under the REACH Regulation (EC) No 1907/2006 on behalf of a non-EU manufacturer. This upcoming enforcement project means that national authorities will likely be conducting more frequent and in-depth inspections of ORs. Manufacturers must be prepared to answer: Is our OR truly fulfilling all its duties, and can it withstand an unannounced inspection? This article provides a comprehensive framework for vetting a potential or current OR to ensure they are fully prepared for the heightened regulatory oversight. ### Key Points * **Documentation is Paramount:** A competent OR must operate a robust system for managing and maintaining all required REACH documentation, including the registration dossier, tonnage tracking records per importer, up-to-date Safety Data Sheets (SDS), and proof of supply chain communication. * **Inspection Readiness is Non-Negotiable:** The OR must have a documented internal protocol for managing information requests and on-site inspections from National Enforcement Authorities (NEAs), including clear procedures for notifying the non-EU manufacturer. * **Contractual Clarity Defines Liability:** The service agreement must explicitly delineate responsibilities, data ownership, and liability between the manufacturer and the OR, particularly in the event of non-compliance discovered during an inspection. * **Supply Chain Communication is a Core Focus:** Effective management of downstream user communication is a critical REACH obligation and a common focus of enforcement actions. The OR must demonstrate a systematic approach to this process. * **Proactive Vetting is the Best Defense:** The time to assess an OR’s capabilities is now, not when an inspection notice arrives. A thorough evaluation of their systems, protocols, and experience is essential for mitigating compliance risks. ## The Shifting Landscape: Why OR Inspections are a Priority The Only Representative is the legal entity within the EU responsible for a non-EU company's REACH compliance. For ECHA and NEAs, the OR is the primary point of contact and accountability. By focusing enforcement efforts on ORs, authorities can efficiently audit the compliance of numerous non-EU manufacturers. Inspectors will be looking beyond the initial registration dossier. They will scrutinize ongoing obligations, such as: * **Tonnage Coverage:** Is the registered tonnage sufficient for the actual amounts being imported into the EU by all downstream users under the OR agreement? * **Dossier Updates:** Has the registration dossier been updated with any new information on the substance, its uses, or hazards? * **Supply Chain Communication:** Is the OR effectively communicating up and down the supply chain, particularly regarding exposure scenarios and risk management measures? An OR that fails an inspection can face significant penalties, which can disrupt the non-EU manufacturer's market access and lead to financial and reputational damage. ## A Framework for Vetting Your Only Representative To protect your business, it is crucial to conduct thorough due diligence. The following sections provide a detailed checklist of questions and criteria to evaluate an OR's readiness for inspection. ### 1. Assessing Documentation and Data Management Robust and accessible documentation is the foundation of REACH compliance. An inspection will almost certainly begin with a request for records. **Key Questions to Ask:** * How do you maintain and provide us with access to the full registration dossier and its supporting data? * What is your system for tracking substance tonnage per individual importer to ensure the registered tonnage bands are not exceeded? Can you provide a sample report? * How do you manage, update, and distribute Safety Data Sheets (SDS) to all relevant parties in the supply chain, ensuring they are in the correct languages? * Can you demonstrate your record-keeping system for downstream user communication, including inquiries received and responses provided? * What is your procedure for keeping the registration dossier up-to-date in IUCLID as required by REACH Article 22? **What to Look For:** * **Positive Signs:** Use of a secure, dedicated digital platform or portal for clients; clear, documented procedures (SOPs); ability to quickly generate sample reports; proactive communication about dossier updates. * **Red Flags:** Reliance on simple spreadsheets for tonnage tracking; vague answers about data access; no clear system for SDS version control; inability to provide evidence of downstream user communication. ### 2. Evaluating Inspection Readiness and Response Protocols A prepared OR does not wait for an inspection to happen; they have a plan in place. **Key Questions to Ask:** * Do you have a written internal protocol or Standard Operating Procedure (SOP) for managing an inspection from a National Enforcement Authority? * What is your immediate procedure for notifying us (the non-EU manufacturer) upon receiving an information request or notice of an on-site inspection? * Who is the designated point of contact for inspections, and what is their direct experience in handling regulatory audits? * What are your standard timelines for responding to an information request from an authority, and how do you ensure these are met? * How do you prepare for an on-site visit from an inspector? **What a Good Protocol Includes:** * **Designated Team:** Clearly defined roles and responsibilities for the inspection response team. * **Communication Plan:** A flowchart detailing who to contact (internally and externally) and when. * **Document Retrieval:** A process for quickly gathering all potentially requested documents. * **Response Template:** Pre-prepared templates for formal responses to authorities. * **Post-Inspection Follow-up:** A procedure for documenting the inspection, communicating findings to the manufacturer, and implementing any corrective actions. ### 3. Scrutinizing Contractual Agreements and Liability The service agreement is the legally binding document that defines the relationship. It must be clear, comprehensive, and fair. **Key Questions to Ask:** * How does the service agreement define liability in the case of non-compliance fines or penalties resulting from an inspection? * Who is contractually responsible for the costs associated with preparing for and responding to an inspection (e.g., staff time, legal fees)? * How is ownership of the registration data and the registration number itself defined? * What are the terms for contract termination, and what is the process for transferring the OR role to another provider without disrupting market access? **Key Clauses to Review:** * **Scope of Services:** Ensure the contract covers ongoing compliance and inspection support, not just the initial registration. * **Liability and Indemnification:** Look for clear language on who is responsible for what. Be wary of clauses that place all liability on the manufacturer, even for the OR's errors. * **Data Ownership:** The contract should clearly state that the non-EU manufacturer owns the data and the registration number. * **Cooperation:** The agreement should mandate the OR's full cooperation during any enforcement activity. ### 4. Analyzing Downstream User and Supply Chain Communication This is a critical, and often overlooked, aspect of the OR's duties. Inspectors frequently check whether the uses of a substance in the EU are correctly identified and covered by the registration. **Key Questions to Ask:** * What is your proactive process for identifying all downstream users and the specific uses of our substance within their operations? * How do you ensure that all identified uses are covered by the registration's exposure scenarios and communicate any necessary risk management measures? * What system do you use to document these communications to prove compliance to an inspector? * How do you handle inquiries from downstream users regarding the substance's safe use? **What to Look For:** * A systematic approach, such as regular surveys or a communication platform. * Clear evidence of a two-way communication flow. * Knowledge of how to assess uses and, if necessary, update a Chemical Safety Report (CSR). ## Comparing OR Preparedness: Two Scenarios To illustrate the importance of these questions, consider two different types of ORs. ### Scenario 1: The Inspection-Ready OR This OR provides the manufacturer with access to a secure online portal showing real-time tonnage data for each importer. Their service agreement is detailed, and they readily provide their inspection response SOP. When asked about downstream users, they show a documented history of annual surveys and communication campaigns. They have an experienced regulatory professional as the designated contact for audits and can clearly explain how they would manage an inspection from start to finish. ### Scenario 2: The High-Risk OR This OR offers a low-cost registration service. They track tonnage manually in a spreadsheet, which is updated quarterly. When asked about inspection readiness, they state they will "handle it if it comes up" but have no formal protocol. Their contract is brief and places all liability on the non-EU manufacturer. They have little to no records of communication with downstream users beyond the initial importers. This OR represents a significant compliance risk. ## Strategic Considerations for Non-EU Manufacturers The upcoming ECHA enforcement project should serve as a catalyst for action. 1. **Audit Your Current OR:** If you already have an OR, use the framework above to conduct a friendly audit of their preparedness. 2. **Don't Prioritize Cost Alone:** While budget is a factor, the cheapest OR service often carries the highest risk of non-compliance. The cost of a failed inspection and disrupted market access will far outweigh any initial savings. 3. **View Your OR as a Partner:** Your OR is your legal representative in the EU. Select one that acts as a true partner in compliance, offering transparency, expertise, and proactive support. ## Finding and Comparing REACH Only Representative Providers Choosing the right Only Representative is a critical business decision. It is essential to evaluate multiple providers to find one that aligns with your company's risk tolerance and compliance standards. When comparing options, look beyond the price and assess their experience with substances similar to yours, the depth of their services (e.g., do they offer ongoing support or just registration?), and their demonstrated readiness for regulatory scrutiny. Using a professional directory can streamline the process of identifying and vetting qualified providers. To find qualified vetted providers [click here](https://cruxi.ai/regulatory-directories/reach_only_rep) and request quotes for free. ## Key ECHA References For official information, manufacturers should refer directly to ECHA's resources. While specific guidance documents are updated periodically, the following are fundamental references: * The REACH Regulation (EC) No 1907/2006 * ECHA Guidance on Registration * ECHA Guidance for Only Representatives * Information on ECHA Forum Enforcement Projects (available on the ECHA website) *** This article is for general educational purposes only and is not legal, medical, or regulatory advice. For device-specific questions, sponsors should consult qualified experts and consider engaging FDA via the Q-Submission program. --- *This answer was AI-assisted and reviewed for accuracy by Lo H. Khamis.*