Most consumer brands between $20M and $200M don't have a compliance department. PFAS and packaging rules still land on their desk, usually on the VP of Operations, the head of sourcing, or the product lead. This post is a playbook for compliance without a compliance team.
Key takeaways
- Name one owner. Shared ownership means no ownership.
- Most of the work is supplier follow-up, not legal analysis.
- A weekly 90-minute routine keeps things moving.
- Outsource the chasing; keep the decisions and sign-off in-house.
Who should own it
The best owner has:
- Direct relationships with suppliers (sourcing or ops)
- Access to product data (tech packs, BOMs)
- Enough authority to hold a launch if proof is missing
Usually that's the head of sourcing or operations. Product compliance can sit with product development at smaller brands. Legal or outside counsel advises on interpretation.
What the work actually is
| Task | Share of effort |
|---|---|
| Building component lists | ~15% |
| Sending requests and chasing suppliers | ~45% |
| Reading and checking answers | ~20% |
| Testing decisions and lab coordination | ~10% |
| Reports, filings, buyer questionnaires | ~10% |
Shares are rough, but the pattern holds: chasing and checking documents dominates.
A weekly 90-minute routine
Monday (30 min): Chase
- Send follow-ups to suppliers past their reply date.
- Escalate anything older than three weeks.
Wednesday (30 min): Review
- Read new declarations and test reports.
- Mark gaps and send clarifying questions.
Friday (30 min): Update
- Update the BOM and evidence files.
- Check upcoming deadlines (Minnesota, California, New Mexico, EPR).
The quarterly checklist
- New SKUs have full PFAS status before launch
- High-risk declarations less than 12 months old
- Regulatory map updated for new laws and dates
- Spot tests ordered for a sample of materials
- Leadership update: status, gaps, risks
Upcoming dates to watch (as of October 2026)
- December 14, 2026: Minnesota PFAS report due for extensions. See extension guide.
- January 1, 2027: California textile limit drops to 50 ppm; New Mexico Phase 1 bans and reporting; SB 54 PRO join deadline.
- January 1, 2028: New Mexico, Colorado textile bans; California severe-wet exception ends; Connecticut bans.
- January 1, 2032: Broad bans in Minnesota, Maine and New Mexico.
What to keep in-house vs. outsource
| Keep in-house | Good to outsource |
|---|---|
| Final decisions and sign-off | Sending and chasing supplier requests |
| Supplier commercial escalations | Reading and checking documents |
| Choosing PFAS-free alternatives | Building BOMs and evidence files |
| Retailer relationships | Preparing report data (PRISM, EPR) |
| Legal interpretation (with counsel) | Tracking rule changes |
Your officer should always sign filings. No outside party should sign for you.
Example: how one ops lead handles it
Maya is VP of Operations at a 120-person home goods brand with 400 SKUs and 60 suppliers. No compliance staff.
- Month 1: She builds a BOM from tech packs and ranks materials by risk. 70 high-risk materials across 22 suppliers.
- Month 2: Requests go out to all 60 suppliers. Her team follows up every Monday.
- Month 3: 45 suppliers have answered. She orders TOF tests for 12 high-risk materials with no answer.
- Month 4: Files are built for the top 100 SKUs. Two fabrics are switched. Minnesota report filed.
- Ongoing: 90 minutes a week keeps it current.
It works, but it took a big chunk of her team's time for four months. That's the real cost to weigh.
Getting leadership support
PFAS compliance needs time and some budget. To get buy-in, frame it in business terms:
- Sales risk: products that can't ship to Minnesota, Maine or California, or retailers that delist.
- Deadlines: dated obligations with penalties.
- Claims risk: class actions over PFAS marketing.
- Cost of delay: rushed testing and inventory write-offs cost more than planning.
A one-page summary with dates, exposure and a plan usually gets a yes.
Signs you need help
- A deadline is less than 90 days away and suppliers haven't been asked.
- You have more than 30 suppliers.
- Ops is skipping core work to chase documents.
- A retailer has asked for evidence you can't produce.
- You've made public PFAS-free claims without a full file behind them. See backing up PFAS-free claims.
Options compared
See compliance software vs. consultant vs. done-for-you.
Owner's starter checklist
- One owner named, with time set aside
- Product and supplier list exported
- Deadlines listed for each state you sell in
- Supplier request template ready
- Weekly routine on the calendar
- Decision made on what to outsource
- Leadership briefed
What to do this week
- Name the owner and block 90 minutes a week on their calendar.
- Export your product and supplier lists.
- Write down every deadline that applies to you in the next 15 months.
- Send your first batch of supplier requests to your top ten suppliers.
- Brief leadership with a one-page status.
Key terms
- Compliance owner: The one person accountable for the program.
- Done-for-you service: An outside team that runs outreach, review and file building while you keep decisions.
- Sign-off: The named officer's approval of filings and conclusions.
- Evidence file: The per-product record of proof.
- Regulatory map: Which rules apply where, and your status for each.
Mistakes to avoid
- Splitting ownership across several people with no lead.
- Treating compliance as a one-time project.
- Letting an outside party sign filings for you.
- Waiting until 90 days before a deadline to start supplier outreach.
Still have questions?
"Do we need a lawyer?" For interpretation and high-stakes questions, yes. For day-to-day supplier work, usually not.
"How do we track rule changes?" Subscribe to state agency updates and review them monthly.
"What's the first deliverable to aim for?" A complete evidence file for your best-selling product.
"How do we keep this going after the first big push?" Build it into product development: no new SKU launches without PFAS status filled in.
"What if the owner leaves?" Keep files in a shared system with clear naming so the next person can pick up quickly.
The bottom line
You don't need a compliance department to handle PFAS and packaging rules. You need one owner, a simple process, a weekly routine and help with the chasing when the workload spikes. Keep decisions and sign-off in-house.
How Secuabase helps
We're built for brands without a compliance team. We send the supplier requests, follow up, check every document, and build a filing-ready file, mostly automated with a human check. Your team keeps the decisions and signs off.
For our first partners we run it free on one product line. Book a quick chat.
FAQ
Can a brand handle PFAS compliance without a team?
Yes, with one owner, a simple process and time for follow-up.
How much time does it take?
The first pass can take months part-time; maintenance is lighter.
When to outsource?
When deadlines are close, suppliers are many, or ops can't absorb the work.
General information, not legal advice. Facts checked October 2026.
Sources