- Regulatory Guide
EU DPP Compliance FAQ
Last reviewed: August 2026 · PassoNext Team
The EU Digital Product Passport FAQ covers frequently asked questions about DPP compliance from the perspective of manufacturers. In particular, it covers the DPP’s field of application and scope, compliance responsibilities, the introduction timeline, and possible sanctions for non-compliance. The scope of PassoNext software includes the platform’s operating principles and technical capabilities, such as artificial intelligence data extraction, communication with suppliers or partners, exchange of GS1 Digital Link data, API connection, and blockchain verification. Finally, the document discusses the service’s data security and compliance. This includes information on where the data is hosted, compliance with the GDPR and other standards, data export, account cancellation, and white-label options.
- DPP compliance is mandatory — there is no opt-out for products placed on the EU market.
- The obligation falls on the economic operator placing the product on the market, not necessarily the manufacturer.
- Free plans exist — compliance does not require a six-figure budget.
- Start with batteries (Feb 2027), then textiles and other categories follow.
- The EU Central Registry is a separate requirement that launches July 2026.
Frequently Asked Questions About EU Digital Product Passports
The EU Digital Product Passport represents one of the most comprehensive product compliance mandates introduced in recent years. The answers below explain the underlying regulatory framework, technical specifications, and operational steps required for manufacturer compliance.
What is a Digital Product Passport?
A Digital Product Passport (DPP) is an authenticated digital record attached to an individual product, containing verified data regarding its material components, geographic origin, lifecycle environmental footprint, repair procedures, and end-of-life recycling workflows. Users access the passport using an on-product data carrier, typically a physical QR code. Regulation (EU) 2024/1781 (ESPR) formally defines the DPP as a “product-specific set of data” accessible “electronically through a data carrier.”
Is the DPP mandatory?
Yes. As soon as the European Commission adopts a category-specific delegated act under the ESPR, creating a compliant DPP becomes a mandatory legal condition for selling that product within the EU market. Selling products without a compliant passport is illegal. Independent of the ESPR, the EU Battery Regulation (Regulation (EU) 2023/1542) separately mandates battery passports for specified battery categories.
When does the DPP become mandatory?
Effective dates depend on the product category:
- Batteries: Under Regulation (EU) 2023/1542, battery passports become mandatory on 18 February 2027 for industrial batteries exceeding 2 kWh, electric vehicle (EV) batteries, and light means of transport (LMT) batteries (e.g., e-bikes and e-scooters).
- General Products (ESPR): The European Commission is issuing delegated acts for specific product sectors on a rolling basis, with initial product category obligations taking effect between 2027 and 2028. Each delegated act specifies its own mandatory compliance date.
Which products need a DPP?
The ESPR covers nearly all physical goods sold within the EU market, excluding food, animal feed, and medicinal products (Article 1(2)). However, enforcement begins only after a sector-specific delegated act passes. Priority sectors identified by the Commission include:
- Textiles and Apparel
- Electronics and ICT
- Industrial and EV Batteries
- Furniture
- Construction Products
- Chemical Mixtures
What data must a DPP contain?
Article 7(2) of the ESPR establishes mandatory baseline requirements. Every passport must include Chapter III passport records plus substance-of-concern metrics under Article 7(5) (chemical identity, precise location, concentration levels, safe handling instructions, and disposal guidance). Where relevant to the product category, passports must also provide:
- Performance, durability, and repairability scores
- Carbon footprint and broader environmental metrics
- Installation, user, maintenance, and repair manuals
- End-of-life processing and recycling guidelines
Exact data field requirements are established by individual delegated acts for each product category.
Who is responsible for creating the DPP?
The economic operator who first places the product on the EU market bears ultimate responsibility for creating and maintaining its DPP:
- Article 27: Assigns primary responsibility to manufacturers, including passport creation and technical documentation maintenance.
- Article 28: Permits manufacturers to assign specific compliance tasks to an authorized representative.
- Article 29: Imposes equivalent obligations on importers. For goods produced outside the EU, the importer placing the item on the EU market assumes full DPP liability.
What is the ESPR?
The Ecodesign for Sustainable Products Regulation (ESPR) — Regulation (EU) 2024/1781 — is the EU’s primary framework governing sustainable product design. Replacing the original Ecodesign Directive (2009/125/EC), which applied only to energy-using items, the ESPR expands environmental rules across virtually all physical goods sold in the EU and establishes the Digital Product Passport as a core compliance tool. The regulation entered into force on 18 July 2024.
What is the EU Battery Regulation?
Regulation (EU) 2023/1542 governs the sustainability, safety, and lifecycle management of batteries sold in the EU. It is the first EU law to mandate a Digital Product Passport (“battery passport”) and serves as the operational template for future ESPR passports. Annex XIII outlines the required battery data fields, while Article 77 defines user access rights.
How does the DPP relate to existing regulations like REACH, WEEE, and RoHS?
The DPP does not replace existing environmental laws such as REACH (Regulation (EC) 1907/2006), WEEE (Directive 2012/19/EU), or RoHS (Directive 2011/65/EU). Instead, it aggregates them by embedding their compliance data into one searchable file:
- REACH: SVHC declarations required under Article 33 must be listed in the passport’s substance of concern section.
- WEEE: Mandatory collection and disposal instructions must be included.
- RoHS: Product compliance status can be directly referenced.
What is the EU Central DPP Registry?
Established by virtue of Article 13, the EU Central DPP Registry is the information repository containing all valid product passports hosted by the European Commission. The registry stores unique product identifiers, cross-referenced data location information, and economic operator details about the data owners, but it does not hold any of the data files. The Infrastructure was set up initially by the European Commission to host the registry by the 19 July 2026 deadline and officially opened its doors on 20 July 2026, according to Commission Implementing Regulation (EU) 2026/1778.
What is a GS1 Digital Link QR code?
A GS1 Digital Link encodes a product’s Global Trade Item Number (GTIN) into a web-resolvable URI structure. When printed as a QR code, scanning it with a standard smartphone opens the product’s Digital Product Passport web page directly. Aligning with ISO/IEC standards referenced in the ESPR, GS1 Digital Link links traditional supply chain barcodes with web-accessible product data.
Who can access DPP data?
Access rights are determined on a category-by-category basis. Article 11(b) grants free, accessible data rights to consumers, manufacturers, importers, distributors, repairers, refurbishers, recyclers, market surveillance officers, customs authorities, and civil society groups. However, the exact data fields accessible to each group are defined within individual product delegated acts passed under Article 4. Battery passport access rules are separately detailed in Annex XIII of Regulation (EU) 2023/1542.
How long must DPP data be retained?
Retention rules vary by product type:
- Article 11(e): Requires passports to remain accessible for periods specified in category delegated acts, maintaining availability even if the responsible economic operator faces insolvency or ceases operations.
- Article 27(3) & 27(7): Mandates that manufacturers retain general technical documentation, declarations of conformity, and digital instruction manuals for at least 10 years after placing a product on the market.
What are the penalties for non-compliance?
Article 74 of the ESPR directs individual EU Member States to enact “effective, proportionate and dissuasive” penalties. Specific sanctions are written into national laws across the 27 Member States and include:
- Substantial financial fines
- Mandatory market withdrawal of non-compliant goods
- Import border blockades by national customs agencies
- Criminal liability under specific national legal codes
- Immediate loss of legal access to the EU market
Can I use my existing ERP/PLM data?
Yes, partially. Enterprise ERP and PLM databases usually contain fundamental DPP fields, such as bills of materials (BOM), raw material specs, vendor contacts, compliance records, and SKUs. However, this internal data must be mapped to CEN-CENELEC technical standards and structured according to the relevant delegated act. Companies must also address data gaps, particularly around substance of concern concentrations and end-of-life handling instructions.
Do I need to collect data from my suppliers?
Yes. Manufacturers rarely have all required passport parameters in-house. Under Article 7(2)(b) declarations of detailed chemical composition, component level SVHC values, and recycled content percentages must be gathered from upstream supply chain partners.
What about GDPR and personal data in the DPP?
The product passport contains technical item information, not personal data, nevertheless, its verification for restricted access to Tier 2 (Persons of Legitimate Interest) requires processing personal information such as names, professional qualifications, and system logs. According to Recital 43, such personal data processing must comply with GDPR (Regulation (EU) 2016/679) for national competent authorities and Regulation (EU) 2018/1725 for the European Commission.
How do I get started with DPP compliance?
- Identify Relevant Regulations: Determine if your products fall under priority ESPR sectors or the EU Battery Regulation.
- Audit Internal Data: Map existing ERP/PLM fields against anticipated passport requirements to highlight missing data, especially regarding chemical composition and supplier traceability.
- Engage Upstream Suppliers: Establish standardized data collection procedures with suppliers 12 to 18 months prior to mandatory enforcement dates.
What is PassoNext and how does it help?
PassoNext is a dedicated software platform designed to manage the full lifecycle of ESPR and Battery Regulation compliance. Its core capabilities include:
- Automated supplier data request portals
- GS1 Digital Link QR code creation
- Three-tier role-based access control (Article 10)
- Real-time ECHA SVHC Candidate List chemical tracking
- Direct API integration with the EU Central DPP Registry and enterprise ERP/PLM software
- Real-time regulatory alerts via the Regulatory Radar service
Where can I find the official regulation texts?
Official texts are published in the Official Journal of the European Union and accessible on EUR-Lex:
- ESPR: Regulation (EU) 2024/1781 (CELEX 32024R1781)
- Battery Regulation: Regulation (EU) 2023/1542 (CELEX 32023R1542)
- REACH Regulation: Regulation (EC) 1907/2006 (CELEX 32006R1907)
- Substances of Very High Concern: ECHA Candidate List (echa.europa.eu)
What This Means For Your Business
If you place physical goods on the EU market that fall under the Battery Regulation or upcoming ESPR delegated acts, maintaining a compliant Digital Product Passport is a mandatory legal condition of market entry.
Action Steps
- Verify Applicable Laws: Check whether your goods are governed by the EU Battery Regulation or scheduled ESPR delegated acts.
- Define Economic Role: Confirm whether your organization acts as a manufacturer, importer, or distributor under EU law.
- Establish Timeline: Use the Deadline Calculator to determine your exact regulatory cutoff date.
- Evaluate Data Requirements: Test data collection workflows and identify internal record gaps.
- Track Updates: Monitor ongoing delegated act releases via the Regulatory Radar service.
- What is a DPP?
- EU Battery Regulation
- ESPR 2024/1781
- EU Deforestation (EUDR)
- EU Packaging (PPWR)
- Mandatory Fields
- GS1 Digital Link
- EU Central Registry
- Registry Operator Guide
- Registry Regulation 2026/1778
- GDPR & DPPs
- REACH & SVHC
- Access Rights (PoLI)
- Compliance FAQ
- Deferred Data Points
- Delegated Acts Tracker
Frequently asked questions
The EU Digital Product Passport (DPP) represents a major shift in product compliance. The clear, practical answers below break down what the regulations mean, what technical requirements you need to meet, and how to get your business ready.
What is a Digital Product Passport?
A Digital Product Passport (DPP) is a standardized digital file for a specific item. It holds key details about a product’s materials, supply chain origin, environmental impact, repair options, and end-of-life recycling. Customers and regulators access this record electronically by scanning a data carrier—usually a QR code—on the physical product, as outlined in the Ecodesign for Sustainable Products Regulation (ESPR, Regulation EU 2024/1781).
Is the DPP mandatory?
Yes. Once the EU sets rules for a specific product category through a “delegated act,” a compliant DPP becomes a legal prerequisite for selling that item in the EU market. Products without one cannot be legally sold. Certain batteries face similar mandatory rules under the standalone EU Battery Regulation (EU 2023/1542).
When does the requirement kick in?
Rollout depends on the product type:
- Batteries: Passports become mandatory starting February 18, 2027, for industrial batteries over 2 kWh, electric vehicle (EV) batteries, and light transport batteries (e.g., e-bikes and e-scooters).
- Other Products: The EU Commission is introducing rules on a rolling basis under the ESPR. The initial product groups will likely face mandatory DPP rules starting around 2027–2028, with specific dates defined per category.
Which products need a DPP?
The ESPR framework applies broadly to almost all physical items sold in the EU—excluding food, animal feed, and medicines. However, obligations only trigger once rules for a specific category are finalized. Priority groups targeted first include textiles, electronics, batteries, furniture, construction materials, and chemicals.
What data goes into a DPP?
At a minimum, every passport must list basic product details, full disclosures on any “substances of concern” (chemical identity, location within the item, and concentration), and safe usage/disposal instructions. Depending on the product type, additional requirements may include:
- Carbon or environmental footprint calculations
- Durability, performance, or repairability scores
- Assembly, maintenance, and recycling guidelines
Who is responsible for creating and maintaining the DPP?
The entity introducing the product into the EU market holds final compliance responsibility:
- EU Manufacturers: Directly responsible for creating the DPP, maintaining technical records, and keeping the data active. They may delegate specific administrative tasks to an authorized representative.
- Non-EU Manufacturers: The primary EU importer who places the item on the market assumes full legal responsibility for creating and hosting the DPP.
What is the ESPR?
The Ecodesign for Sustainable Products Regulation (ESPR, Regulation EU 2024/1781) is the EU’s umbrella law for sustainable product design. Replacing the older 2009 Ecodesign Directive (which only covered energy-using items), the ESPR expands sustainability mandates to nearly all physical goods and introduces the DPP as its primary enforcement tool. It officially took effect on July 18, 2024.
What is the EU Battery Regulation?
Regulation (EU) 2023/1542 oversees safety, sustainability, and life-cycle standards for batteries sold in the EU. It established the first legal mandate for a Digital Product Passport (“battery passport”) and serves as the technical model for future ESPR rules.
How does the DPP interact with existing rules like REACH, WEEE, and RoHS?
The DPP does not replace current environmental frameworks; it aggregates them into one accessible place. For example:
- REACH: SVHC (Substances of Very High Concern) disclosures required under Article 33 feed directly into the DPP’s chemical safety section.
- WEEE & RoHS: Waste management, recycling instructions, and RoHS restriction statuses are woven straight into the product’s digital record.
What is the EU Central DPP Registry?
Established under Article 13 of the ESPR, the Central DPP Registry is an official database managed by the European Commission that acts as a central index. It stores unique product IDs and points to where each passport’s data lives, allowing authorities to verify compliance. The registry went live in July 2026 under Regulation (EU) 2026/1778; it does not host your private data directly, functioning instead like a secure directory.
What is a GS1 Digital Link QR code?
A GS1 Digital Link formats a standard product code (like a GTIN barcode) into a web URL. When placed inside a QR code on a product label or packaging, scanning it with any smartphone directs users directly to the online Digital Product Passport. It bridges physical retail barcodes with digital compliance systems.
Who gets to see the DPP data?
Access depends on the user and the product category. The ESPR guarantees free, straightforward access for consumers, repairers, recyclers, importers, and authorities. However, specific granular permissions—such as hiding proprietary manufacturing details from the general public while granting access to certified recyclers or market inspectors—are defined individually in each product category’s rules.
How long must a DPP remain online and accessible?
Retention periods are determined per product category in their respective delegated acts. Even if a business shuts down or undergoes liquidation, the product data must remain publicly available. Additionally, manufacturers must archive core technical records and keep digital operating instructions online for at least 10 years after a product hits the market.
What are the consequences of non-compliance?
Individual EU Member States set and enforce their own penalties, which must be “effective, proportionate, and dissuasive.” Consequences include:
- Heavy financial fines
- Mandatory product recalls or market withdrawals
- Rejection of shipments at EU customs borders
- Criminal liability under specific national laws for severe violations
- Primary risk: Loss of EU market access—non-compliant products cannot be legally imported or sold.
Can existing ERP or PLM systems handle this data?
Yes, as a starting point. Existing Enterprise Resource Planning (ERP) and Product Lifecycle Management (PLM) software already store key data like bills of materials, supplier details, and compliance certifications. However, this internal data must be converted into standardized, machine-readable formats (following CEN-CENELEC standards) to link smoothly with DPP platforms.
Will companies need to request data from upstream suppliers?
Yes. Manufacturers rarely hold all the granular component data required for a DPP—such as exact material breakdowns, trace chemical percentages, or recycled material contents. You will need to build structured data-sharing workflows with your suppliers and update procurement contracts to guarantee timely, accurate material disclosures.
Does the DPP conflict with GDPR privacy laws?
The product passport itself contains hardware and material data, not personal information. However, system access controls for specialized user roles (like verified repair technicians or border agents) collect personal identifiers like names, emails, and login logs. These authentication systems must fully comply with GDPR standards, utilizing data minimization and strict access security.
What are the recommended first steps to prepare for DPP compliance?
- Identify timeline: Check the EU Commission’s work plan to see when your specific product categories face upcoming requirements.
- Audit internal data: Review existing ERP/PLM records to identify missing data, particularly around chemical disclosures, durability specs, and material origins.
- Engage supply chain early: Establish clean communication lines with suppliers now—gathering comprehensive material declarations across complex supply networks often takes 12 to 18 months.
Where are the official regulation texts located?
All legal documents are available on the EU’s EUR-Lex portal:
- ESPR: Regulation (EU) 2024/1781 (CELEX: 32024R1781)
- Battery Regulation: Regulation (EU) 2023/1542 (CELEX: 32023R1542)
- REACH: Regulation (EC) 1907/2006 (CELEX: 32006R1907)
- Chemical Tracking: ECHA Candidate List of SVHCs (available at echa.europa.eu)
Ready to start your product passport?
Start free. No credit card required. Your first 10 passports stay free, even after the trial ends.
