Why RoHS Compliance Is Never 'Done'

Most compliance failures we see don't start with a bad decision. They start with a good decision that nobody revisited.

A product ships. It's fully RoHS compliant — every homogeneous material tested or declared, every supplier statement on file, the technical documentation signed off. Eighteen months later, a market surveillance authority flags the same product for a lead concentration breach. Nothing in the design changed. What changed was upstream: a plating supplier switched a sub-supplier to manage a shortage, and nobody re-checked the new alloy against the same thresholds.

Compliance is a snapshot, not a guarantee

RoHS certification is a statement about a product at a point in time, built on data that was accurate then. It says nothing about what happens after that point — and a lot happens after that point. Suppliers reformulate materials to cut cost. Production moves to a new facility with different plating lines. A component gets end-of-lifed and replaced with a "equivalent" part from a different vendor.

None of that requires anyone to lie. It just requires nobody to ask the question again.

What a continuous program actually looks like

The fix isn't more paperwork at launch — it's a standing process that treats every supplier change as a new compliance event:

• Re-verification on a cycle. Material declarations should have an expiry, not just a filing date. Annual re-verification, at minimum, for anything above your risk threshold.
• Change triggers, not just calendar triggers. A supplier substitution, a new sourcing region, or a bill-of-materials revision should automatically re-open the compliance question for that part.
• Ownership with teeth. Someone needs the authority to hold a product launch or a supplier switch until the paperwork is current — not just the responsibility to notice when it isn't.

The companies that manage this well don't have fewer supplier changes than everyone else. They just never let a change outrun the evidence behind it.