Checklist · Tort

Managing a Product Recall: A Practical Checklist

15 U.S.C. § 2084

Type
Checklist
Jurisdiction
National
Date
2024-10-19
Topic
Tort

A recall is a legal proceeding that happens at the speed of a crisis. This checklist walks a company through the fifteen phases of managing one: standing up a cross-functional recall team under privilege, recognizing the information that triggers a reporting duty, meeting the Consumer Product Safety Commission's 24-hour rule under Section 15(b) of the Consumer Product Safety Act, and navigating the parallel regimes at NHTSA for vehicles and FDA and USDA for food, drugs, and devices. It covers the hazard analysis, the immediate stop-sale and quarantine, the choice among repair, replace, and refund, the negotiation of the corrective action plan and joint press release, notice to the distribution chain and to consumers, and the tracking of recall effectiveness. It also covers the things companies forget until it is too late: tendering to insurers, preserving the litigation record, and managing the post-sale duty to warn. Under-reporting is where companies get destroyed, and the penalties are severe.

Managing a Product Recall: A Practical Checklist

Tort > Products Liability | Published 19 October 2024 - Updated 26 January 2026 | UpLaw - uplaw.us

A recall is not a public relations exercise with a legal component. It is a regulatory proceeding, a mass-tort predicate, an insurance claim, and a document-preservation event — all running simultaneously, on a clock that starts before you know you are in one.

Keywords: product recall, CPSC, Section 15(b), substantial product hazard, 24-hour rule, corrective action plan, Fast Track Recall, NHTSA, FDA recall, reportable food, post-sale duty to warn, recall effectiveness, stop sale, recall insurance

How to use this checklist

The single most consequential decision in a recall is made in the first forty-eight hours, usually by people who do not know they are making it: an engineer who logs a complaint as "customer misuse," a quality manager who wants "a few more data points," a general counsel who says "let's get comfortable before we call the agency." The federal reporting statutes are not built to accommodate that instinct. They require you to report when you have information that reasonably supports the conclusion of a defect — not when you have concluded that a defect exists.

Our running example is Kestrel Appliance Works, a mid-market manufacturer of countertop convection ovens sold through big-box retailers and its own website. Kestrel's field-quality inbox has just received its fourth report in six weeks of a Model K-7 unit whose heating element continued to draw power after the timer reached zero. Two of the four reports mention scorching. One mentions a small flame. Nobody has been hurt. Kestrel's engineering team is confident the units came from a single supplier lot and that the failure rate is "well under one percent." That confidence is exactly what will get Kestrel sued and fined.

Work these phases roughly in order, but understand that Phases 1, 2, 3, and 6 substantially overlap in real time.

Which law governs — read this before you rely on anything below

A recall sits on top of two different bodies of law, and conflating them is the most common analytical error in this area.

The reporting and corrective-action obligations are federal and statutory. The Consumer Product Safety Act, the National Traffic and Motor Vehicle Safety Act, and the Federal Food, Drug, and Cosmetic Act — together with their regulations — apply uniformly nationwide, and the clocks, thresholds, and penalty provisions cited in this checklist are federal. Those are the rules you can state flatly.

The liability consequences are overwhelmingly state law. Products liability, negligence, the post-sale duty to warn, any common-law duty to recall, punitive damages, and insurance coverage are creatures of state law, and the states genuinely diverge — on the design-defect test (consumer expectations, risk-utility, or a hybrid), on whether Restatement (Second) § 402A or Restatement (Third) governs, on comparative versus contributory fault, on whether the subsequent-remedial-measures rule reaches strict liability, and on how coverage exclusions are construed. There is no nationwide rule of products liability, no nationwide post-sale duty to warn, and no nationwide law of insurance coverage. Where this checklist describes a tort or coverage principle, treat it as the majority or Restatement framework and confirm the rule in your forum. The Restatements are persuasive authority, not law, until a state adopts them.

Finally, dollar figures and thresholds move. CPSC civil-penalty caps are adjusted annually for inflation; NHTSA's no-charge-remedy age limits and penalty maxima are periodically revised; and if the recall touches imports or exports, tariff schedules and sanctions/denied-party lists change constantly. Verify every number against the currently published source before you advise on it. Nothing in this document is a substitute for pulling the current figure.

Phase 1 — Stand up the recall team and put the analysis under privilege

  • [ ] Convene a cross-functional recall committee within 24 hours of the first credible signal: legal, quality/engineering, regulatory affairs, supply chain, customer service, communications, and a senior business decision-maker with authority to stop shipments.
  • [ ] Designate a single recall lead with authority to escalate directly to the CEO and, if the issuer is public, to the disclosure committee.
  • [ ] Have counsel — in-house or outside — formally direct the hazard investigation in writing, so that the investigation is conducted for the purpose of providing legal advice.
  • [ ] Label investigative work product accordingly and route engineering analyses, root-cause memoranda, and consultant reports through counsel.
  • [ ] Issue a litigation hold immediately. Suspend auto-deletion of email, ticketing systems, Slack/Teams, warranty databases, supplier correspondence, and test data.
  • [ ] Identify custodians: field quality, design engineering, the supplier-quality engineer, customer service supervisors, and the product manager.
  • [ ] Open a privileged incident chronology maintained by counsel.
  • [ ] Instruct the team, in writing, on how to write during a recall (see the traps below).

Why it matters, and the traps. The privilege you can claim is real but narrow. Upjohn Co. v. United States, 449 U.S. 383 (1981), protects counsel's communications with employees at any level when made for the purpose of securing legal advice, and Fed. R. Civ. P. 26(b)(3) protects materials prepared in anticipation of litigation. But privilege does not attach to the underlying facts, to test data that exists independently of the investigation, or to documents the company is legally obligated to create and file. Your Section 15(b) report to the Commission is not privileged. Your incident data is not privileged. And the ordinary-course quality records that existed before counsel got involved never become privileged by being handed to a lawyer.

The trap that destroys companies is not the privileged memo — it is the unprivileged one. Somebody writes "we've known about this since March" in an email to a supplier. Somebody puts "we should have caught this in DV testing" in a Jira ticket. Those documents will be produced, and they will be blown up on foamcore at trial. Train the team: describe observations, not conclusions about blame; do not speculate about legal exposure outside of counsel's channel; and never, ever write anything intended to be jocular.

Set up preservation correctly the first time using Issuing a Litigation Hold and Preserving ESI: A Practical Checklist, and plan for the privilege fight you will have later with Building a Privilege Log: A Practical Checklist.

Phase 2 — The trigger: what information obligates you to report, and to whom

  • [ ] Identify the regulator with jurisdiction over the product. Consumer products (appliances, toys, furniture, electronics, juvenile products) → CPSC. Motor vehicles and motor vehicle equipment, including tires and child restraints → NHTSA. Food, drugs, medical devices, cosmetics, dietary supplements → FDA. Meat, poultry, and processed egg products → USDA/FSIS. Pesticides → EPA. Boats → Coast Guard.
  • [ ] Determine which entity in the chain has the duty. Under the CPSA, the duty falls on manufacturers, importers, distributors, and retailers alike — a retailer that knows what you know has its own independent obligation.
  • [ ] Sweep every information source, not just the formal complaint log: warranty claims, returns and RMA data, social media and review sites, retailer chargebacks, insurance subrogation letters, supplier deviation reports, and internal test failures.
  • [ ] Check whether any lawsuit or claim has been filed alleging death or grievous bodily injury — that triggers a separate reporting duty under CPSA § 37, 15 U.S.C. § 2084, when three such suits are filed and settled or adjudicated adversely within a two-year period.
  • [ ] Diary the date on which the company first obtained each piece of information. That date, not the date of your conclusion, is what the agency and a jury will focus on.

Why it matters, and the traps. The reportability question is about information, not proof. Section 15(b) of the Consumer Product Safety Act, 15 U.S.C. § 2064(b), requires a subject firm to "immediately inform the Commission" when it obtains information which reasonably supports the conclusion that a product (1) fails to comply with an applicable consumer product safety rule or a voluntary standard on which the Commission has relied; (2) fails to comply with any other rule, regulation, standard, or ban enforced by the Commission; (3) contains a defect which could create a substantial product hazard; or (4) creates an unreasonable risk of serious injury or death. The fourth prong is independent of defect — a product can be non-defective and still reportable.

Kestrel's engineers are debating whether four failures out of 60,000 units is a "defect." That debate is a category error. The question is whether Kestrel now possesses information reasonably supporting the conclusion that the K-7 contains a defect which could create a substantial product hazard. Four independent thermal-runaway reports, two with scorching and one with fire, on a countertop appliance used near cabinetry and unattended by design, comfortably clears that bar. Low failure rates do not save you when the failure mode is fire.

Phase 3 — The CPSC 24-hour rule: reporting a substantial product hazard

  • [ ] Calendar the clock. Under 16 C.F.R. § 1115.14(e), a firm should report within 24 hours of obtaining reportable information.
  • [ ] If you need to evaluate first, understand the boundaries: 16 C.F.R. § 1115.14(d) permits a reasonable time to investigate, not to exceed 10 working days, unless the firm can affirmatively demonstrate that a longer period is reasonable. The clock still runs from when you obtained the information.
  • [ ] Decide the form of report: an initial report under 16 C.F.R. § 1115.13(c) (limited information, filed fast, to be supplemented), or a Full Report under § 1115.13(d).
  • [ ] Assemble the Full Report contents: identification of the firm and product, model and date-code range, units manufactured and distributed, the nature and extent of the defect, the nature and extent of the risk, incident and injury data with dates, the results of any engineering or testing analysis, the number of units still in the distribution chain, and the corrective action proposed.
  • [ ] Consider Fast Track. Under the Commission's Fast Track Recall program, a firm that reports and, within 20 business days, implements a corrective action acceptable to staff can avoid a staff preliminary determination that the product presents a substantial product hazard.
  • [ ] Preserve the record of when you decided and why, so that the reporting timeline is defensible.
  • [ ] Note that reporting is expressly not an admission: 15 U.S.C. § 2064(b) provides that a report does not constitute an admission of the existence of a defect or hazard, and 16 C.F.R. Part 1115 permits a firm to report while disputing that the product is defective.

Why it matters, and the traps. The statutory safe harbor for reporting is your friend, and firms consistently fail to use it. You may file a Section 15(b) report that says, in substance, we do not believe this product is defective, and we file this report without admission, but we are reporting out of an abundance of caution. Firms that do this almost never get penalized for the reporting decision. Firms that sit on incident data for six months while "gathering data" get penalized, and the penalty is calibrated to the delay.

The exposure is not theoretical. Civil penalties under 15 U.S.C. § 2069, as amended by the Consumer Product Safety Improvement Act of 2008, run to a statutory base of $100,000 per violation with a maximum of $15,000,000 for any related series of violations — figures that are adjusted annually for inflation, so always confirm the currently published amounts before advising on exposure. Knowing and willful violations carry criminal penalties under 15 U.S.C. § 2070, and the CPSIA removed the old prerequisite that the Commission first give the firm notice of noncompliance. Individual directors, officers, and agents can be reached. The Department of Justice and CPSC have repeatedly obtained eight-figure civil penalties from firms whose sin was not making a bad product but sitting on what they knew about it.

Note also Section 6(b), 15 U.S.C. § 2055(b): before the Commission publicly discloses information from which the public could readily identify your firm, it must ordinarily notify you and give you an opportunity to comment on accuracy. This is a meaningful procedural right. Use it; do not squander it by responding late.

If the Commission opens an investigation into your reporting timeline, you are now in a different posture — see Responding to a Government Subpoena or Investigation: A Practical Checklist and, for the individual-liability dimension, White-Collar Crime and Corporate Criminal Liability: A Comprehensive Guide.

Phase 4 — Parallel regimes: NHTSA, FDA, and USDA

  • [ ] Vehicles and motor vehicle equipment (NHTSA). Under 49 U.S.C. §§ 30118–30120, a manufacturer that learns a vehicle or item of equipment contains a safety-related defect or fails to comply with a Federal Motor Vehicle Safety Standard must notify NHTSA and owners and remedy without charge. File the Part 573 Safety Recall Report within 5 working days of the defect determination (49 C.F.R. § 573.6). Owner notification follows on the agency's timetable. Remedy options are repair, replace, or refund the purchase price less depreciation (49 U.S.C. § 30120). The no-charge remedy obligation is subject to an age limit measured from first purchase (currently 15 calendar years for vehicles, 10 for tires) — confirm the current figures.
  • [ ] Maintain Early Warning Reporting submissions under the TREAD Act, 49 U.S.C. § 30166(m), and understand that your EWR data is what the agency will use to test whether you knew earlier than you said.
  • [ ] Food (FDA). Under 21 U.S.C. § 350f, a responsible party must submit a Reportable Food Registry report within 24 hours of determining an article of food (other than infant formula and dietary supplements) is a reportable food. FDA has mandatory food recall authority under 21 U.S.C. § 350l if the firm will not act voluntarily.
  • [ ] Drugs, devices, and biologics (FDA). Follow 21 C.F.R. Part 7, which classifies recalls as Class I (reasonable probability of serious adverse health consequences or death), Class II (temporary or medically reversible consequences), or Class III (unlikely to cause adverse consequences). Device manufacturers must report corrections and removals under 21 C.F.R. Part 806 (generally within 10 working days) and adverse events under the MDR rule, 21 C.F.R. Part 803. FDA can order a device recall under 21 U.S.C. § 360h(e).
  • [ ] Meat, poultry, and egg products (USDA/FSIS). Recalls are conducted voluntarily under the Federal Meat Inspection Act, 21 U.S.C. § 601 et seq., and the Poultry Products Inspection Act, 21 U.S.C. § 451 et seq.; FSIS backs the "voluntary" request with detention and seizure authority.
  • [ ] Check for overlapping jurisdiction. A children's food product in a choking-hazard package can implicate both FDA and CPSC. A battery in a vehicle can implicate both NHTSA and CPSC.
  • [ ] Check international obligations: EU RAPEX/Safety Gate, Health Canada under the Canada Consumer Product Safety Act, UK OPSS, Australia's ACCC. Reporting deadlines abroad are often shorter than you expect and are not satisfied by your U.S. filing.

Why it matters, and the traps. Companies with a single product line often assume a single regulator. That assumption fails at the edges, and it fails expensively. It also fails temporally: the FDA reportable-food clock and the CPSC clock both run in 24 hours, but the NHTSA clock runs in five working days from a determination — which invites the mistake of postponing the determination. NHTSA's enforcement posture has consistently been that a manufacturer cannot stop the clock by simply declining to make the determination the evidence compels; do not plan around a strategy of studied indecision.

A word of caution about all agency positions in this space, including that one. Agency guidance documents, recall handbooks, enforcement manuals, and informal staff interpretations are not binding law, and a court reviewing an agency's reading of its statute will now decide the statutory question de novo. Loper Bright Enterprises v. Raimondo, 603 U.S. 369 (2024), overruled Chevron; agency interpretations command only the weight their reasoning earns, in the Skidmore sense. Practically, this cuts both ways in a recall. It does not license you to ignore the CPSC Recall Handbook or NHTSA's stated position — the agency still controls the enforcement referral, the penalty demand, and the press release, and litigating deference is not a plan for surviving the next 72 hours. But it does mean that a genuinely unlawful agency demand is contestable on the merits, and it means you should never assume a guidance-document gloss is the statute. Read the statute and the regulation. They are what a court will read.

For a firm exporting or importing the affected units, coordinate with the trade and customs workstream — see International Trade Law: A Comprehensive Guide to Customs, Tariffs, and Trade Remedies. CPSC and Customs jointly target noncompliant imports at the port, and a recall can turn into an import detention problem overnight. If recalled units are being pulled back across a border, note that tariff classifications, duty rates, and sanctions and denied-party lists change frequently — confirm the current schedules and lists at the time of the movement rather than relying on a prior filing.

Phase 5 — The hazard analysis

  • [ ] Build a verified incident table: date received, date of incident, model, date code, lot, retailer, failure mode, injury/property damage, unit returned (Y/N), and unit tested (Y/N).
  • [ ] Secure the exemplars. Retrieve failed units, tag them, photograph them before disassembly, and preserve chain of custody. Do not destructively test the only exemplar without notice to potential adverse parties.
  • [ ] Perform root-cause analysis: is this a manufacturing defect (a departure from the design in a subset of units), a design defect (every unit is the same and the design is the problem), or a warnings/instructions failure?
  • [ ] Quantify exposure: units manufactured, units shipped, units sold through, units in retailer inventory, units in transit, units still in the field, and expected remaining service life.
  • [ ] Assess severity and probability: what is the worst credible outcome, what is the population at risk (children? the elderly? unattended use?), and what is the failure rate over the installed base.
  • [ ] Determine the date-code/lot boundary — and then widen it. Under-scoping a recall is the single most common cause of a second recall.
  • [ ] Have the analysis reviewed by an independent expert whose report is commissioned through counsel.

Why it matters, and the traps. The defect taxonomy you use in the hazard analysis is the same taxonomy the plaintiffs' bar will use against you, so get it right the first time — the framework is laid out in Products Liability: A Comprehensive Guide to Design Defect, Manufacturing Defect, and Failure to Warn. The characterization has real consequences: a manufacturing defect confined to Supplier Lot 14 supports a narrow recall and a strong indemnity claim against the supplier. A design defect means every K-7 ever sold is implicated, the recall population is 60,000 rather than 3,000, and the design-defect test in the forum state — consumer expectations, risk-utility, or some hybrid, and states genuinely diverge — becomes the central battleground.

Kestrel's temptation will be to declare a supplier-lot manufacturing defect on thin evidence because it is the cheaper story. If the true root cause is a thermostat cutoff that is marginal by design and only fails when a marginal component stacks with it, the narrow recall will fail, incidents will continue, the second recall will follow, and the delay between the two will be the centerpiece of the punitive damages case.

Phase 6 — Stop sale and quarantine, immediately

  • [ ] Issue a stop-sale/stop-ship notice to every distributor, retailer, and marketplace the moment reportability is credible — do not wait for the agency.
  • [ ] Quarantine and physically segregate finished goods, WIP, service stock, and returns; block the SKU in the ERP and on every e-commerce listing, including third-party marketplaces and resale channels.
  • [ ] Halt production of the affected configuration.
  • [ ] Notify the contract manufacturer and freight forwarders; stop units in transit and at the port.
  • [ ] Document the stop-sale with time stamps. This record is your best evidence of good faith.

Why it matters, and the traps. Continuing to sell after a recall is announced is a prohibited act under 15 U.S.C. § 2068(a)(2)(B) — it is unlawful to sell or distribute in commerce a consumer product subject to voluntary corrective action taken in consultation with the Commission where the Commission has notified the public. Beyond the statute, nothing turns a defensible recall into a punitive-damages case faster than proof that units kept moving after the company knew. Sweep the long tail: outlet stores, employee sales, refurb channels, Amazon and eBay listings, and the pallets your liquidator already bought. Your contracts should give you the right to demand this; if they do not, fix that in the next revision — see The Commercial Contracts Toolkit: Drafting, Reviewing, and Enforcing Business Agreements.

Phase 7 — The reporting decision, documented

Why it matters, and the traps. Under-reporting is where companies get destroyed. The delta between a timely report and a late one is measured in orders of magnitude — a firm that reports on day 2 and recalls promptly typically pays remediation costs; a firm that reports on day 200 pays remediation costs, a civil penalty, a consent decree, a securities suit, and a punitive damages exposure that its insurance will not cover. The recall is survivable. The cover-up is not.

Phase 8 — Choose the corrective action

  • [ ] Evaluate the three options: repair (retrofit kit, field service, firmware update), replace (like-for-like or upgraded unit), or refund (full, prorated, or credit).
  • [ ] Model each option's effectiveness, not merely its cost. A repair requiring consumer disassembly will have a low uptake rate. A prepaid mailer with a full refund will have a high one.
  • [ ] Confirm the remedy actually cures the hazard. A replacement unit with the same thermostat is not a remedy.
  • [ ] Design the logistics: repair kits, prepaid return labels, call-center staffing and scripts, a dedicated recall microsite and toll-free number, and a destruction/disposal protocol for returned units (with exemplars preserved for litigation).
  • [ ] Price it: unit remedy cost × expected uptake × units in field, plus reverse logistics, call center, notice, and destruction.
  • [ ] Preserve supplier indemnity and contribution claims; send a notice of claim under the supply agreement and tender to the supplier's insurer.

Why it matters, and the traps. Regulators evaluate remedies by whether they get the hazard out of consumers' homes, and a remedy chosen to minimize per-unit cost frequently maximizes total cost because it is ignored. Kestrel's engineering team will propose a mail-in thermostat retrofit at $14 a unit. Consumers will not disassemble a countertop oven. Six months later Kestrel will be sitting in a CPSC conference room explaining a 4% response rate, and the Commission will ask for a second notice campaign and a refund option anyway — at which point Kestrel has paid for the retrofit and the refund.

Phase 9 — Negotiate the corrective action plan and the joint press release

  • [ ] Prepare a draft Corrective Action Plan (CAP): product description, hazard description, incident and injury counts, units and date codes, remedy, notice plan, and effectiveness monitoring.
  • [ ] Negotiate the hazard language. "Can overheat, posing fire and burn hazards" is a materially different sentence from "can catch fire, posing a risk of death." Both may be defensible; the difference is worth real money in the litigation that follows.
  • [ ] Negotiate the incident and injury numbers carefully — they must be accurate, and they will be quoted in every complaint filed against you.
  • [ ] Include a non-admission clause; the CPSA expressly contemplates it.
  • [ ] Exercise your Section 6(b) comment rights on accuracy before publication.
  • [ ] Coordinate the press release, the recall microsite, retailer point-of-sale signage, and social posts to go live simultaneously with the agency's announcement.
  • [ ] Vet every consumer-facing word for FTC compliance — a misleading recall communication is a deceptive act under Section 5 of the FTC Act, 15 U.S.C. § 45.

Why it matters, and the traps. The joint press release is the most-read legal document your company will ever publish, and the plaintiffs' bar reads it the day it drops. Every adjective in it is an admission you will be asked about at deposition. At the same time, understating the hazard to protect the litigation position is both an accuracy violation and a strategic disaster: if the notice does not convey the true risk, consumers will not act, uptake will collapse, and the next injury will occur to someone who read your notice and shrugged. Precision, not minimization, is the goal. For the advertising-law overlay on how you may describe the remedy and the product, see Advertising Law: A Comprehensive Guide to the FTC Act and Lanham Act and Consumer Protection Law: A Comprehensive Guide to the FDCPA, FCRA, TCPA, and State UDAP Statutes.

Phase 10 — Notify the distribution chain

  • [ ] Send written recall notices to every distributor, retailer, dealer, installer, and service provider, with model and date-code identification, photographs, the stop-sale instruction, return/disposition instructions, and a required acknowledgment.
  • [ ] Provide retailers with point-of-sale materials and, where they have the data, ask them to run customer-purchase-record notifications to their loyalty-program members.
  • [ ] Notify commercial and institutional purchasers directly.
  • [ ] Track acknowledgments and follow up on non-responders — the gaps are where units keep selling.
  • [ ] Reconcile retailer-reported inventory against your shipment records.

Why it matters, and the traps. Retailers have their own independent Section 15(b) duty; once you tell them, their clock is running too, and they will not thank you for having told them late. They also hold the single most valuable asset in the recall: purchase-level customer data that you, as a manufacturer selling through distribution, do not have. Retailer cooperation is what separates a 5% response rate from a 40% one — and the leverage to obtain it is contractual, which means it should already be in the supply agreement before you need it.

Phase 11 — Notify consumers

  • [ ] Mine every direct-contact channel: product registration cards, warranty registrations, e-commerce order history, app and firmware-update accounts, extended-warranty and service records, and the call-center database.
  • [ ] Send direct notice by mail and email to every identifiable purchaser. Direct notice massively outperforms public notice.
  • [ ] Publish public notice: joint agency press release, recall microsite, homepage banner, social channels, and paid notice where the population warrants it.
  • [ ] Write the notice for the consumer, not the lawyer: what the product is, how to identify it, what the hazard is, what to do right now (stop using it), and how to get the remedy.
  • [ ] Make the remedy frictionless: prepaid label, no receipt required, no proof of purchase, no registration wall.
  • [ ] For durable infant and toddler products, comply with the mandatory product-registration-card requirement of 15 U.S.C. § 2056a(d) — those cards exist precisely so this notice can be sent.
  • [ ] If your recall notice campaign touches personal data at scale, coordinate with privacy counsel; the incident-communication muscle memory in Responding to a Data Breach: A Notification and Incident Response Checklist transfers well.

Why it matters, and the traps. Recall completion rates are, as a general matter, dismal. Regulators and industry observers have long treated consumer-product response rates as low — frequently well below half the affected population, and lower still for inexpensive, unregistered, consumable, or long-in-service items. (Rates vary enormously by product category, price point, and remedy design; if you need a benchmark for a CAP negotiation, pull the agency's own current data for comparable products rather than relying on a rule of thumb.) The company that treats notice as a compliance formality gets the bad end of that distribution. The company that treats notice as a marketing campaign — segmented, repeated, incentivized, with a remedy that costs the consumer nothing and takes five minutes — gets multiples of them. That difference is not merely good citizenship. It is the difference between a hazard that is out of the field and a hazard that injures someone in year three, when your notice is Exhibit A on the plaintiff's post-sale-duty-to-warn theory.

Phase 12 — Track effectiveness and report to the agency

  • [ ] Report monthly (or on the CAP's cadence) to the agency: units remedied, units returned, units destroyed, response rate, and incidents post-announcement.
  • [ ] Track the response rate against the units-in-field denominator, and be honest about the denominator.
  • [ ] Watch for post-announcement incidents — an incident occurring after notice is the most dangerous fact in the file.
  • [ ] If uptake stalls, escalate: second-round direct notice, expanded remedy, increased refund, additional media, retailer re-engagement.
  • [ ] Do not close the recall until the agency agrees it is closed; monitoring obligations frequently run for years.

Why it matters, and the traps. A stalled recall is a live regulatory matter, and agencies do not forget them. More importantly, a stalled recall reopens the legal question you thought you had closed: if you know the hazard is still in the field and you have effective means to reach the people holding it, the reasonableness of your continuing conduct is squarely at issue.

Phase 13 — Insurance: tender early, and read the exclusions

  • [ ] Tender to every potentially responsive policy immediately and in writing: CGL, products/completed operations, excess and umbrella, product recall/contaminated products, D&O (for the securities and derivative exposure), and any supplier or vendor policy on which you are an additional insured.
  • [ ] Comply with notice conditions to the letter. Late notice is the most common coverage-defeating error.
  • [ ] Understand that the standard CGL form generally does not pay for the recall itself: the "recall of products, work or impaired property" exclusion (the so-called sistership exclusion) and the exclusions for damage to your own product exist precisely to carve out the cost of withdrawing and replacing your own goods. Recall-expense coverage is normally a separate endorsement or standalone policy.
  • [ ] Reserve rights and preserve claims against suppliers and their carriers; send an additional-insured tender.
  • [ ] Track recall costs in a discrete cost center from day one — you cannot recover what you cannot substantiate.

Why it matters, and the traps. Companies discover in week three of a recall that the policy they were counting on excludes the very cost they are incurring. Do the coverage read before the recall — that is what Insurance Coverage Law: A Comprehensive Guide for Policyholders and The Business Insurance and Coverage Toolkit are for — and tender it correctly when it happens, following Tendering a Claim and Preserving Coverage: A Policyholder's Checklist.

Coverage is state law, and the state matters enormously. Insurance is regulated and construed state by state, and there is no national rule here. Whether late notice actually forfeits coverage turns on the forum: a majority of states require the insurer to show prejudice from the delay before it can deny on notice grounds, while a minority still enforce notice as a strict condition precedent — and the answer may further depend on whether the policy is occurrence-based or claims-made. States also diverge on what counts as an "occurrence," on how the sistership and your-own-product exclusions are construed, on the scope of the duty to defend versus the duty to indemnify, and on whether punitive damages are insurable at all (several states hold they are not, as a matter of public policy). Do not rely on a summary — including this one — for the rule in your forum. Pull your actual policy forms and get a coverage opinion under the law of the state whose law will govern the policy.

Phase 14 — Coordinate with litigation counsel: the recall record becomes evidence

  • [ ] Assume every recall document is a future trial exhibit and manage it accordingly.
  • [ ] Anticipate the class action. Recalls generate economic-loss classes (benefit-of-the-bargain, unjust enrichment, state UDAP) even where nobody is injured, and the recall notice hands the plaintiffs a ready-made class definition. Prepare with Class Action Litigation: A Comprehensive Guide to Rule 23 and Opposing Class Certification: A Defense Checklist.
  • [ ] Understand Fed. R. Evid. 407. Subsequent remedial measures are inadmissible to prove negligence, culpable conduct, a defect in a product or its design, or a need for a warning — but they are admissible for impeachment, and, if disputed, to show ownership, control, or the feasibility of precautionary measures. Two enormous caveats: the exclusion does not reach the facts the recall reveals, and states diverge sharply — California, following Ault v. International Harvester Co., 13 Cal. 3d 113 (1974), has held the rule inapplicable to strict products liability claims, and other states have their own rules. Never assume your remedial evidence is safe; check the forum.
  • [ ] Preserve exemplars, returned units, and destroyed-unit records. Destroying returned units without a preservation protocol is a spoliation case waiting to happen under Fed. R. Civ. P. 37(e).
  • [ ] Coordinate the recall narrative and the litigation narrative so they do not contradict each other — see Defending a Products Liability Claim: A Practical Checklist.

Why it matters, and the traps. Companies routinely destroy returned recalled units as a matter of course, on the sensible logic that a hazardous product should not re-enter commerce. Then, two years later, a plaintiff who was injured by a K-7 wants to inspect a representative exemplar, and Kestrel has none — and the jury is instructed that it may infer the missing units would have been unfavorable to Kestrel. Build the exemplar-preservation protocol into the destruction protocol on day one.

Phase 15 — Post-recall: design changes, monitoring, and the post-sale duty to warn

  • [ ] Implement the design fix in current production and validate it.
  • [ ] Update the DFMEA, the design-validation protocol, and the supplier-quality controls that missed the failure.
  • [ ] Fix the detection failure, not just the product. Ask why the first three field reports were coded "customer misuse."
  • [ ] Build a standing post-sale surveillance function: a defined signal-detection threshold, an escalation path, and a documented periodic review of complaint, warranty, and return data.
  • [ ] Understand the continuing post-sale duty to warn: Restatement (Third) of Torts: Products Liability § 10 recognizes a duty to warn after sale when the seller knows or reasonably should know the product poses a substantial risk of harm, those to be warned can be identified and can be assumed to be unaware of the risk, a warning can be effectively communicated, and the risk is sufficiently great to justify the burden. States vary in whether and how they adopt it — check the forum.
  • [ ] Note the limits of a common-law duty to recall: Restatement (Third) § 11 recognizes such a duty only where a governmental directive requires recall, or where the seller voluntarily undertakes a recall and then performs it negligently. Most states have declined to impose a freestanding common-law duty to recall — but the "negligent undertaking" branch means that a badly executed voluntary recall creates liability that no recall at all might not have.
  • [ ] Fold the lessons into the compliance program — The Corporate Compliance Toolkit.

Why it matters, and the traps. The § 11 point is the one lawyers miss and juries seize on: once Kestrel undertakes a recall, it must do it non-negligently. A recall that under-scopes the population, understates the hazard, or is abandoned when uptake is low can itself be the negligent act. There is a bitter irony here that every products lawyer eventually confronts — but the answer is not to do less. It is to do the recall properly.

Common mistakes to avoid

  1. Waiting for certainty. The standard is "information that reasonably supports the conclusion," not proof. Certainty arrives on day 90; the report was due on day 2.
  2. Treating the 10-working-day investigation window as a right. It is a ceiling on a reasonable investigation, not a grace period, and the clock runs from receipt of the information.
  3. Under-scoping the recall. The second recall is always worse than the first, and the interval between them is the punitive damages case.
  4. Choosing the cheapest remedy. Uptake is the metric. A cheap remedy nobody uses costs more than an expensive one everybody uses.
  5. Forgetting the resale and marketplace channels. Units keep selling on Amazon, at outlets, and through liquidators after the announcement — and that is a prohibited act.
  6. Assuming CGL covers the recall. It generally does not. Recall expense is a separate endorsement.
  7. Late tender to insurers. Notice conditions are enforced.
  8. Destroying returned units without preserving exemplars. Spoliation.
  9. Assuming Rule 407 protects the recall. It excludes the remedial measure for certain purposes, in federal court, in a state that follows it — and several states do not apply it to strict liability at all.
  10. Writing badly. The unprivileged email is the exhibit. Train everyone before they write anything.
  11. Ignoring the parallel regimes and foreign regulators. One product can implicate CPSC, FDA, Health Canada, and the EU Safety Gate, on four different clocks.
  12. Failing to brief the board and the disclosure committee. A material recall is a securities-disclosure event and an oversight-duty event, not just an operations event.
  13. Assuming a nationwide rule of liability. The reporting duties are federal and uniform. The liability — design-defect test, post-sale duty to warn, duty to recall, comparative fault, punitive damages, insurability, notice-prejudice — is state law and varies materially. A memo that says "the rule is X" without naming a state is a memo that has not been written yet.
  14. Relying on a stale number. CPSC penalty caps adjust annually for inflation; NHTSA remedy-age limits and penalty maxima are revised; and if units cross a border, tariff rates and sanctions/denied-party lists change constantly. Pull the current published figure every time; never carry one forward from an old memo.
  15. Treating agency guidance as law. After Loper Bright, a court reviews the agency's statutory reading de novo. Guidance documents and recall handbooks are useful, often persuasive, and operationally controlling in the moment — but they are not the statute, and they are not entitled to Chevron deference, because Chevron is no longer good law.

The consolidated recall checklist

  • [ ] Recall committee convened; recall lead designated (24 hours)
  • [ ] Investigation directed by counsel; privilege protocol issued
  • [ ] Litigation hold issued; auto-deletion suspended; custodians identified
  • [ ] Regulator(s) with jurisdiction identified — CPSC / NHTSA / FDA / USDA / foreign
  • [ ] All information sources swept and dated (complaints, warranty, returns, social, supplier, test)
  • [ ] Reportability assessed against the statutory standard, on the record
  • [ ] Stop-sale and quarantine issued — production, distribution, retail, marketplace, transit
  • [ ] Report filed within the applicable clock (CPSC 24 hours; NHTSA Part 573 within 5 working days; FDA RFR within 24 hours; device corrections/removals within 10 working days)
  • [ ] Fast Track considered
  • [ ] Hazard analysis complete: root cause, defect type, population, severity, date-code boundary (widened)
  • [ ] Exemplars secured; chain of custody documented
  • [ ] Corrective action selected on an uptake-weighted basis; remedy verified to cure the hazard
  • [ ] CAP negotiated; hazard language and incident counts vetted; Section 6(b) rights exercised
  • [ ] Joint press release, microsite, hotline, and retailer signage launched simultaneously
  • [ ] Distribution chain notified; acknowledgments tracked; inventory reconciled
  • [ ] Consumers notified — direct notice to every identifiable purchaser, plus public notice
  • [ ] Remedy made frictionless (prepaid, no receipt, no registration wall)
  • [ ] Effectiveness tracked and reported; stalled uptake escalated with a second campaign
  • [ ] All potentially responsive insurance policies tendered in writing; recall costs cost-centered
  • [ ] Supplier indemnity and additional-insured claims preserved
  • [ ] Exemplar-preservation protocol built into the destruction protocol
  • [ ] Board and disclosure committee briefed; 8-K analysis run; insider blackout imposed if warranted
  • [ ] Design fix implemented and validated; detection failure remediated
  • [ ] Standing post-sale surveillance function established
  • [ ] Recall closed only with agency concurrence; monitoring obligations calendared

Primary Authority

Consumer products (CPSC)

  • Consumer Product Safety Act, 15 U.S.C. § 2064(b) — duty to report a defect that could create a substantial product hazard or an unreasonable risk of serious injury or death; § 2064(c)–(d) — public notice and repair/replace/refund orders
  • 15 U.S.C. § 2055(b) — Section 6(b) restrictions on Commission disclosure of firm-identifying information
  • 15 U.S.C. § 2068(a)(2)(B) — prohibited act: distributing a product subject to publicly announced voluntary corrective action
  • 15 U.S.C. § 2069 — civil penalties (statutory base $100,000 per violation / $15,000,000 per related series under the CPSIA of 2008, adjusted annually for inflation — verify current published figures)
  • 15 U.S.C. § 2070 — criminal penalties for knowing and willful violations
  • 15 U.S.C. § 2084 — Section 37 reporting of certain settled or adversely adjudicated injury lawsuits
  • 15 U.S.C. § 2087 — CPSIA whistleblower protection
  • 15 U.S.C. § 2056a(d) — mandatory registration cards for durable infant and toddler products
  • 16 C.F.R. Part 1115 — substantial product hazard reports; § 1115.12 (what must be reported); § 1115.13 (initial and full report contents); § 1115.14(d)–(e) (reasonable investigation not to exceed 10 working days; report within 24 hours of obtaining reportable information)

Motor vehicles (NHTSA)

Food, drugs, and devices (FDA/USDA)

Administrative law overlay (currency note)

  • Loper Bright Enterprises v. Raimondo, 603 U.S. 369 (2024) — overruled Chevron U.S.A. Inc. v. NRDC. Courts now interpret statutes de novo and do not defer to an agency's construction merely because the statute is ambiguous; agency views receive only Skidmore-style respect proportional to their persuasiveness. Do not treat Chevron deference, or any authority premised on it, as current law when assessing a CPSC, NHTSA, or FDA statutory interpretation.
  • Administrative Procedure Act, 5 U.S.C. §§ 551 et seq., 701–706 — judicial review of final agency action; arbitrary-and-capricious review
  • Corner Post, Inc. v. Board of Governors of the Federal Reserve System, 603 U.S. 799 (2024) — the six-year APA limitations period runs from when the plaintiff is injured by final agency action, not from promulgation
  • SEC v. Jarkesy, 603 U.S. 109 (2024) — Seventh Amendment jury right where an agency seeks civil penalties for conduct analogous to a common-law claim; relevant to how agency penalty proceedings may be structured

Tort and evidence — STATE LAW; no nationwide rule

Products liability, negligence, the post-sale duty to warn, any duty to recall, punitive damages, and insurance coverage are governed by state law and vary materially among the states. The authorities below state the majority or Restatement framework. Confirm the rule in your forum before relying on any of it.

Secondary sources

  • Restatement (Second) of Torts § 402A (strict liability; still the operative rule in a number of states)
  • Owen, Products Liability Law; Madden & Owen on Products Liability
  • CPSC Recall Handbook (agency guidance on Fast Track and corrective action plans)

Related UpLaw Resources

Related Guides & Articles

Related Checklists

Related Toolkits

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Laws vary by state and change over time; verify current requirements and consult qualified counsel before acting.