Digital Product Passport: what the rules require and who has to comply
The EU registry went live on July 20, 2026. The framework is settled, but obligations arrive one product group at a time. Here is what a passport holds, which sectors are next, and what today's dates mean for you.
Four things that changed this summer
A passport is a data record, not a document
A Digital Product Passport covers product identity, material composition, sustainability and circularity data, and compliance evidence. Identifiers sit at product, batch, or item level and connect to QR codes, NFC, or RFID. Different audiences see different views, so a consumer, a repairer, a recycler, and a regulator each get what applies to them. The exact fields come from each product group's delegated act.
Your deadline is later than you think. Your work starts sooner.
Once a delegated act is adopted, you get a transition period of at least 18 months. That sounds generous until you look at what has to happen inside it.
- Collecting data from suppliers is the long pole, and it does not compress
- A registration ID only confirms that an upload succeeded. Article 13(5) is explicit that it is not proof of compliance
- Enrolling at the organization level costs nothing today, so there is no reason to wait for a registerable product
Four phases, whatever your product group
Most of this data already exists somewhere in your business. The job is connecting it, not collecting it again.
Product Compliance and Digital Product Passport for Dummies
Your practical guide to the next generation of product compliance requirements. Learn how to navigate evolving regulations, improve product transparency, and prepare for the Digital Product Passport.
Frequently Asked Questions (FAQ)
A Digital Product Passport is a structured data record that travels with a product and describes its identity, materials, sustainability characteristics, and compliance evidence. It is reached through a data carrier such as a QR code, NFC tag, or RFID chip. The record itself stays with the manufacturer or a service provider, not in a central EU database.
Obligations arrive one product group at a time. The battery passport applies from February 18, 2027 under the Battery Regulation (EU) 2023/1542, and it is the first mandatory DPP in the EU. Other groups follow once their delegated act under the ESPR is adopted, each with a transition period of at least 18 months.
It covers product identity, material composition, sustainability and circularity data, and compliance evidence. Identifiers can sit at product, batch, or item level. The exact fields are defined by the delegated act for each product group, so two product groups will not carry identical data sets.
In most cases no. The information usually already exists across ERP, PLM, supplier documentation, and sustainability calculations. The work is connecting those sources and checking them against the required fields, rather than starting a new data collection exercise.
Supplier data is requested, received, and then attached to the product record along with its evidence. This is typically the longest part of the programme because it depends on other organisations responding. Starting supplier outreach early is the single biggest lever on your timeline.
No. Access is role based, so a consumer, a repairer, a recycler, and a market surveillance authority each see the view that applies to them. Commercially sensitive information is only exposed to the audiences entitled to it under the relevant delegated act.
The passport points at data you continue to maintain, so updates flow from your own systems rather than from a one-off submission. When a value changes, you publish a new version and the registry pointer continues to resolve. Keeping the record current is an ongoing obligation, not a launch task.
Identifiers can be assigned at product, batch, or item level, and are carried by QR codes, NFC tags, or RFID chips on the product, its packaging, or its documentation. Six core European standards published on May 27, 2026 and cited in the Official Journal on July 15, 2026 set the technical baseline. Your product group's delegated act determines which options apply.
The ESPR grants small and medium-sized enterprises no blanket exemption. Scope is set per product group, so what matters is whether your products fall under an adopted delegated act. Support measures may ease implementation, but they do not remove the obligation.
Yes. Any company that places a covered product on the EU market carries obligations, regardless of where it is based. Importers, authorized representatives, fulfillment providers, and distributors share responsibility for making sure a valid passport exists and is accessible.