False RoHS Compliance: When Supplier Declarations Pass but Fail Laboratory Testing

The certificate said compliant. The lab said lead.

A supplier certificate arrives. It says "RoHS compliant." It's signed, dated, and filed against the component in the BOM. The compliance team marks the part as cleared. The product ships to the EU market with a Declaration of Conformity and a CE mark.

Months later, a market surveillance authority pulls the product for testing. An XRF screening flags elevated lead levels in the solder joints. Wet chemistry analysis confirms: lead concentration at 0.38% w/w in the homogeneous material nearly four times the RoHS threshold of 0.1%. The supplier's declaration was wrong. The product is non-compliant. And the manufacturer, not the supplier carries the regulatory liability.

This is not a fringe scenario. In Q1 2025 alone, 60 products were recalled from the European market for RoHS non-compliance through EU Safety Gate alerts — LED light strips, headphones, wireless chargers, speakers, and more. In Q2 2024, 45 more products were pulled. The pattern is consistent: products enter the market backed by supplier declarations that aren't verified by laboratory testing, and they fail when regulators decide to test.

This article examines why the gap between supplier declarations and laboratory reality persists, what regulators are actually testing for, and how manufacturers can close the gap before enforcement closes it for them.

Why RoHS supplier declarations are structurally unreliable

The declaration is a statement of belief, not a test result

A supplier RoHS declaration is a self-certification. The supplier is stating that, to the best of their knowledge, the component meets the RoHS substance thresholds. There is no requirement that the supplier has actually tested the component — only that they have a reasonable basis for the claim. In practice, this "reasonable basis" is often another supplier's declaration from further up the chain, creating a daisy chain of assertions where nobody has actually measured the restricted substance concentrations.

Declarations don't test at the homogeneous material level

RoHS thresholds apply at the homogeneous material level meaning each individual, mechanically separable, uniform material within a component. A connector, for example, might contain copper alloy housing (with lead for machinability), tin-lead solder on the pins, and a nickel underplate. Each of these materials must independently meet the 0.1% threshold for lead. A supplier declaration that says "this connector is RoHS compliant" doesn't tell you which homogeneous materials were assessed, how many there are, or what the measured concentrations were. It's a blanket claim across an undefined scope.

The phthalate blind spot

When the four phthalates (DEHP, BBP, DBP, DIBP) were added to the RoHS restricted list in 2019, they introduced a substance category that XRF screening cannot detect. Phthalates require solvent extraction followed by gas chromatography-mass spectrometry (GC-MS) — a more expensive, slower, and less widely available test. Many suppliers continued issuing "RoHS compliant" declarations without updating their testing to include phthalates, effectively declaring compliance with the full directive while only verifying the original six substances.

This remains one of the most common false compliance patterns in the market today. A product can pass XRF screening for heavy metals and still fail GC-MS testing for phthalates in cable insulation, plastic enclosures, or molded seals.

Process contamination goes undetected by declarations

Lead or cadmium can enter a product not through its bill of materials but through the manufacturing process — contaminated solder baths, recycled alloy feedstock, plating process carryover, or even shared production lines that switch between leaded and lead-free runs. A supplier who declares material-level compliance may be genuinely unaware that their process is introducing restricted substances above the threshold. Only laboratory testing on the finished component catches this.

What regulators are actually testing for

EU Member States conduct market surveillance under the RoHS Directive with increasing intensity. Based on the Commission's 2025 Safety Gate Report, the EU Safety Gate system indeed recorded 4,671 alerts for dangerous non-food products in 2025, 13% increase over 2024  with chemical risk representing more than half of all alerts. Italy, Germany, France, Sweden, and Czechia are among the most active enforcement markets.

When a product is pulled for RoHS testing, the standard testing methodology follows IEC 62321 (the active harmonised testing standard, covering methods from XRF screening to GC-MS) and IEC 63000:2018 (which replaced EN IEC 63000:2018 as the harmonised standard for RoHS technical documentation)" 

Stage 1: XRF screening. A handheld or benchtop X-ray fluorescence analyser scans homogeneous materials for elemental composition. XRF identifies the presence and approximate concentration of heavy metals (lead, mercury, cadmium, hexavalent chromium) and bromine (as a proxy for PBB/PBDE). Results take seconds. XRF is a screening tool, it identifies materials that need further investigation but cannot distinguish between substance forms (e.g., total chromium vs. hexavalent chromium) or detect phthalates.

Stage 2: Confirmatory wet chemistry. Materials that fail or produce borderline XRF results are subjected to destructive chemical analysis ICP-OES or ICP-MS for metals, UV-Vis spectrophotometry for hexavalent chromium (per IEC 62321-7-2), and GC-MS for phthalates. These are the legally definitive results. An ISO 17025-accredited laboratory performs the analysis, and the measured concentrations are compared against the RoHS maximum concentration values at the homogeneous material level.

Stage 3: Documentation review. Alongside physical testing, regulators may request the manufacturer's Technical Documentation File under RoHS Article 7 and EN IEC 63000:2018 (the harmonised standard for RoHS technical documentation). This file should include the BOM, supplier declarations, test reports, exemption justifications, and a risk assessment. If the file cannot be produced within 10 days of request, or if it contains only generic supplier declarations with no testing evidence, the product faces enforcement action regardless of whether the physical test passes.

The enforcement pattern is clear: regulators don't just test, they audit the documentation trail. A product that passes laboratory testing but lacks a defensible Technical Documentation File is still non-compliant from a procedural standpoint.

The four false compliance patterns

Pattern 1: The inherited declaration

Manufacturer A receives a "RoHS compliant" certificate from Supplier B. Supplier B received the same from their raw material supplier C. Nobody tested anything. The declaration is inherited three levels deep, and the original basis for the claim — if one existed — is untraceable. This is the most common pattern, and it's the one regulators are designed to break.

Pattern 2: The outdated test report

A supplier performed XRF testing on a component in 2019. The declaration references that test report. But the supplier has since changed their alloy feedstock, moved production to a different facility, or switched subcontractors for plating. The test report no longer reflects the current manufacturing reality. The declaration still says "compliant."

Pattern 3: The phthalate gap

The supplier tested for the original six RoHS substances (lead, mercury, cadmium, hexavalent chromium, PBB, PBDE) and issued a compliant declaration. The four phthalates added in 2019 were never tested because the supplier didn't update their screening programme. The declaration says "RoHS compliant" without qualifying which version of the restricted substance list it was assessed against.

Pattern 4: The process residue

The component's bill of materials is genuinely lead-free. But the supplier uses a shared solder reflow oven that previously processed leaded assemblies, or their plating bath contains trace lead from prior production runs. The residue is below the supplier's internal monitoring threshold but above the RoHS 0.1% threshold at the homogeneous material level. The declaration is made in good faith, but the product fails testing.

Building a verification programme that holds up

Closing the gap between declaration and reality requires moving from trust-based compliance to evidence-based compliance. Five practices make the difference:

1. Classify components by risk and test accordingly

Not every component needs laboratory testing. But high-risk materials — alloys containing lead, chrome-plated parts, PVC-insulated cables, recycled plastics, painted or coated surfaces should be tested on a risk-weighted sampling basis. EN IEC 63000:2018 explicitly supports a risk-based approach where test reports are used for high-risk materials and supplier declarations accepted only for low-risk ones.

2. Require substance-level data, not compliance certificates

A useful supplier declaration specifies: the restricted substances assessed, the test method used (XRF, ICP-MS, GC-MS), the measured concentrations per homogeneous material, the laboratory accreditation (ISO 17025), and the date of testing. A certificate that says only "RoHS compliant" without this detail is a compliance risk, not a compliance asset.

3. Verify phthalates separately

Because phthalates cannot be detected by XRF, any RoHS verification programme that relies solely on XRF screening has a structural blind spot. Components with plastic or polymer content — cables, enclosures, seals, grommets — require GC-MS testing to confirm phthalate compliance. This is the single most underinvested area in manufacturer testing programmes.

4. Build a Technical Documentation File per EN IEC 63000:2018

RoHS compliance is not just about substance levels it's about documentation. Under EN IEC 63000:2018, the Technical Documentation File must demonstrate a structured assessment of the product, including material identification, supplier data collection, test data where warranted, and a risk assessment covering the entire BOM. This file must be producible within 10 days of a regulator's request and retained for 10 years.

5. Re-verify when suppliers change process or source

A declaration is a snapshot. When a supplier changes their alloy composition, production facility, subcontractor, or feedstock source, the declaration should be treated as invalid until re-verified. Build change-notification requirements into supplier agreements, and re-test high-risk components when changes are reported.

A self-check for your current RoHS verification programme

Five questions to pressure-test your process:

• Testing coverage: For high-risk materials in my BOM, do I have laboratory test reports (not just supplier declarations) confirming compliance at the homogeneous material level?
• Phthalate verification: Have I tested plastic and polymer components for DEHP, BBP, DBP, and DIBP using GC-MS — or am I relying on declarations that predate the 2019 phthalate addition?
• Documentation readiness: Could I produce a complete EN IEC 63000:2018 Technical Documentation File within 10 days of a market surveillance authority's request?
• Declaration quality: Do my supplier declarations specify the substances tested, the methods used, and the measured concentrations — or do they just say "RoHS compliant"?
• Change management: When was the last time I re-verified a supplier declaration after a reported process or material change?

If any answer exposes a gap, the gap is already an enforcement risk — it's just one market surveillance action away from becoming visible.

Where Regilient fits in

The gap between supplier declarations and laboratory reality doesn't close itself. It closes when manufacturers move from accepting compliance claims to validating compliance evidence — and do it at the scale of a multi-hundred-component BOM. Regilient's agentic sustainability platform handles the parts of RoHS verification that break when done manually:

• AI-driven declaration validation that flags generic "RoHS compliant" certificates missing substance-level detail, test method references, or phthalate coverage
• Risk-weighted BOM analysis that identifies which components need laboratory testing based on material type, supplier risk profile, and regulatory exposure
• Supplier data collection workflows that request and track substance-level declarations with test report references, concentrations, and lab accreditations
• EN IEC 63000:2018 documentation assembly that compiles Technical Documentation Files from BOM data, supplier declarations, test reports, and exemption justifications into an audit-ready package
• Change-trigger monitoring that flags when a supplier reports a process, material, or facility change — and automatically queues re-verification

In Q1 2025, 60 products were pulled from the EU market for RoHS violations. Every one of those products had a supplier declaration on file that said "compliant." The declaration wasn't the problem. The absence of verification was. The manufacturers who close that gap proactively will never see their products on a Safety Gate alert. The ones who don't will discover the gap the same way those 60 did publicly.

Book a Regilient demo to see how agentic RoHS verification validates supplier declarations against substance-level evidence across your entire BOM.

Regilient  provides agentic sustainability software for product compliance, supplier engagement, and regulatory intelligence across REACH, RoHS, PFAS, CMRT, SCIP, and global chemical regulations.