EU Fines Temu €200 Million Over Failures to Assess Risks From Dangerous Products

A €200 Million Penalty With a Deadline to Act

The European Commission fined Temu €200 million on 28 May 2026 after finding that the Chinese ecommerce platform failed to properly assess the risks of dangerous and illegal products reaching European shoppers. Temu must now submit an action plan by 28 August 2026 explaining how it will remedy the breach.

Independent testing carried out for EU regulators found that a very high percentage of electrical chargers bought through the platform failed basic safety tests. A high proportion of baby toys also presented safety risks of medium to high severity, including chemicals above legal limits and small detachable parts that could cause suffocation.

The decision concerns structural failures in the first Digital Services Act risk assessment that Temu produced in 2024. The Commission said the company relied too heavily on general information about ecommerce instead of examining the dangers arising from its own marketplace, recommendation systems and promotional activity.

Temu disputes the decision and considers the fine disproportionate. It says its systems have changed since that assessment and that it has taken further steps to strengthen governance, risk assessment and user protection.

The penalty is only the second monetary punishment issued under the Digital Services Act, or DSA, since the legislation took full effect. It follows a €120 million fine against X in December 2025. The Temu fine is €80 million larger, setting a new financial marker for enforcement of the law.

The Commission said it calculated the penalty by considering the nature of the infringement, its gravity in terms of affected EU users and its duration. Regulators regard a failure to conduct proper risk assessments as a particularly serious breach because those assessments are meant to identify dangers before they cause harm.

How Temu Came Under Europe's Strictest Rules

Temu has grown rapidly in Europe, reaching roughly 130 million monthly active users across the EU. At that scale, weaknesses in how a marketplace checks goods and manages sellers can expose millions of people to unsafe products.

The Commission designated Temu a Very Large Online Platform in May 2024 after it reported more than 45 million monthly users. That classification places a company under the strictest tier of DSA regulation and gives the Commission greater oversight powers.

The formal investigation began in October 2024, following complaints from the European consumer organisation BEUC and 17 of its national member groups. Those complaints described a pattern of unsafe goods reaching European households and prompted scrutiny of whether Temu was identifying and reducing risks before shoppers were harmed.

The main dates show how the case developed:

• February 2024: The DSA became applicable to all online platforms.
• May 2024: The Commission designated Temu a Very Large Online Platform.
• October 2024: The Commission opened formal proceedings following the consumer complaints.
• December 2025: X received a €120 million fine, the first monetary penalty under the DSA.
• 28 May 2026: The Commission announced the €200 million Temu fine.
• 28 August 2026: Temu must submit its action plan to remedy the risk assessment breach.

What Product Tests Found

An independent testing organisation conducted a mystery shopping exercise on behalf of EU regulators. Mystery shopping means purchasing goods as an ordinary customer would, allowing investigators to examine products actually offered through the marketplace.

A very high percentage of the electrical chargers purchased through Temu failed basic electrical safety tests. Such faults create risks of electric shock or fire in homes where the chargers are used.

Baby toys presented another serious concern. A high proportion carried risks assessed as medium to high in severity. Some contained chemicals exceeding legal safety limits, while others had small detachable parts that posed suffocation hazards to infants.

Regulators also identified problematic jewelry and other consumer goods that failed to meet European product standards. The BEUC coalition had previously flagged lava lamps carrying electrocution risks and bicycle helmets that failed to protect riders during falls.

The findings connected product safety concerns to gaps in vendor vetting and quality control. Temu's combination of extremely low prices and rapid shipping across borders had helped attract European customers, while the investigation exposed weaknesses in the checks intended to protect those customers.

The Commission's evidence indicated that EU consumers were very likely to encounter illegal items while browsing Temu. That finding conflicted with the company's internal assumptions that unsafe products were isolated incidents. For regulators, the frequency with which shoppers could encounter such goods was central to assessing the scale of the problem.

What the Digital Services Act Requires

The DSA is the EU's framework for making online services safer and more transparent. For ordinary platforms, its obligations include removing illegal content when notified. Very Large Online Platforms have additional duties because of the number of people their services reach.

Temu and other platforms in that category must proactively assess structural risks linked to their services and adopt corresponding measures to reduce them. In simple terms, they must examine how their operations could expose users to harm and put safeguards in place before that harm occurs.

A detailed assessment should examine the company's own business model, user base, algorithms and supply chains. Broad descriptions of risks across the ecommerce industry are insufficient when the platform's particular features may affect which goods people see and buy.

The rules represent a shift from earlier approaches that largely required platforms to react after users or authorities identified specific problems. A risk assessment is intended to guide decisions about prevention, rather than serve only as a document describing general concerns.

The DSA allows fines of up to 6 percent of global annual turnover for breaches. It also gives regulators powers to order changes to platform design, recommendation systems and policies governing access to data when those features contribute to consumer harm.

Why the 2024 Assessment Fell Short

The Commission found several weaknesses in Temu's 2024 assessment. The document relied on general information about ecommerce risks instead of specific evidence about the marketplace Temu operated. It also seriously underestimated how often European consumers were likely to encounter illegal items.

Officials said the assessment lacked specificity, was not grounded in solid evidence and was not comprehensive. The Commission said those shortcomings left regulators, users and the public in the dark about the true scale of potential harm from illegal products sold on the platform.

Temu also failed to properly examine how the design of its service could increase the reach of illegal goods. That included its recommendation systems and product promotion programmes involving affiliated influencers.

Recommendation systems are the tools that select or rank products for shoppers. If they give unsafe goods greater visibility, the potential harm can extend beyond the original listing. Promotions by affiliated influencers can also bring products to more consumers.

The Commission's concern was that Temu had not adequately assessed those mechanisms. An assessment that overlooks how a platform directs attention towards products leaves important gaps in the company's ability to design effective safeguards.

Henna Virkkunen, the Commission's Executive Vice-President for Tech Sovereignty, Security and Democracy, said risk management was central to operating in the European digital single market. She told reporters that the decision was intended to send a "very strong message" to Temu and the wider industry.

Virkkunen also explained why the Commission considered the assessment inadequate:

Risk assessments are not box ticking exercises; they are the backbone of the DSA. The Temu risk assessment underestimates concrete risks, lacks specificity, is not grounded in solid evidence, and is not comprehensive. Now it is time for Temu to comply with the law.

The Commission's position was that generic compliance documents could no longer satisfy regulators when concrete product testing and customs data revealed widespread failures to meet legal requirements. The assessment needed to address the risks present in the service European consumers were actually using.

Temu Says Its Systems Have Changed

Temu responded that it respects the objectives of the DSA and the need for clear, consistent rules across the digital economy. The company nevertheless disagrees with the Commission's decision and regards the €200 million penalty as disproportionate.

A spokesperson said the decision concerns Temu's first DSA assessment, produced in 2024, and does not reflect the current state of its systems. The retailer said it had engaged constructively with the Commission throughout the process.

Temu also said it had since taken further steps to strengthen risk assessment, platform governance and user protection. It intends to continue engaging with regulators in good faith while reviewing the decision carefully and considering all available options.

A legal challenge is among the possibilities left open by that response. Temu had not announced a decision to pursue one as of 28 May.

The disagreement over proportionality sits within a law that permits fines reaching 6 percent of global annual turnover. The €200 million penalty remains well below the theoretical maximum Temu could have faced given its global sales volumes.

The sum is substantial, although it likely represents only a fraction of the worldwide revenue generated by Temu following its rapid growth in North America, Europe and other regions. Even penalties representing a fraction of global turnover can influence corporate decisions when a company faces several enforcement actions.

What Happens After the August Deadline

Temu has until 28 August 2026 to submit an action plan setting out specific measures to remedy the breach of its risk assessment obligations. Paying the fine and correcting the underlying failure are separate parts of the enforcement process.

The European Board for Digital Services will then have one month to issue an opinion on the plan. The Commission will have a further month to adopt a final decision and set a reasonable period for implementation.

The process therefore extends beyond the initial deadline. Temu must propose corrective measures, those measures must undergo regulatory review, and the Commission must determine the implementation timetable.

Failure to comply could trigger additional periodic penalty payments. Those payments would add continuing financial pressure on the company to carry out the required changes.

Other Investigations Continue

The risk assessment decision does not end the Commission's scrutiny of Temu. Investigations continue into other suspected DSA breaches, including the potentially addictive design of the platform, the transparency of its recommendation systems and the access it grants external researchers to data.

Those issues concern different aspects of how the service operates. Platform design can influence how long people continue shopping, while transparency about recommendations concerns how products are selected for users. Access to data allows outside researchers to examine a platform's operations.

EU consumer protection authorities have separately examined Temu under ordinary consumer law. Their concerns include alleged fake discounts, pressure selling, forced gamification of shopping, misleading information about refunds, suspected fake reviews and hidden contact details.

Gamification means introducing game elements into an activity such as shopping. In this consumer protection inquiry, the concern is about practices that push shoppers into participating in those features.

The consumer protection probe also found insufficient information about vendors on product listings. That makes it harder for buyers to identify who ultimately stands behind the goods they purchase, including when they need help with a faulty or unsafe item.

Why the Case Matters Beyond Temu

European authorities face growing pressure from the volume of inexpensive goods entering the EU through platforms that sell directly to consumers. Millions of parcels create a heavy workload for customs officials and product safety authorities responsible for checking what reaches the market.

Temu's expansion forms part of that broader challenge. Supply chains stretching from Chinese factories to European doorsteps can be difficult for national authorities to monitor, especially when goods arrive through large numbers of individual orders.

EU policymakers are also confronting concerns about fair competition with European retailers. The question of how marketplaces manage product safety is tied to the practical task of supervising goods sold across borders at enormous scale.

The Commission has opened similar DSA investigations into Shein and AliExpress. Temu is therefore a major ecommerce enforcement target within a wider effort to bring large online marketplaces under closer supervision.

The decision gives other platforms a concrete example of what the Commission expects from risk assessments: evidence about their own services, realistic estimates of exposure to illegal goods and an examination of the systems that promote products. The outcome is likely to influence how marketplaces organise risk assessments and verify vendors in the months ahead.

The Bottom Line

• The Commission fined Temu €200 million on 28 May 2026 for failing to properly assess risks from illegal products under the Digital Services Act.
• Testing found widespread safety failures involving chargers and baby toys, alongside concerns about jewelry and other goods.
• The Commission said Temu's 2024 assessment relied on general industry information and overlooked risks linked to its own marketplace, recommendations and influencer promotions.
• Temu disputes the decision, calls the fine disproportionate and says it has strengthened its systems since 2024.
• The penalty is the second monetary punishment under the DSA, following the €120 million fine against X in December 2025.
• Temu must submit an action plan by 28 August 2026. Further regulatory review and an implementation period will follow.
• Investigations into platform design, recommendation transparency, researcher access to data and consumer protection practices continue.