What Is a Digital Product Passport? The Complete Guide for EU Manufacturers

Last reviewed: August 2026 · PassoNext Team

Direct answer

A Digital Product Passport (DPP) serves as a verified digital identity card for tangible goods sold within the European Union. Linked to qualifying products through scannable QR codes, it gathers important lifecycle information such as the origin of materials, carbon footprint data, repair procedures, and recycling options at the end of the product’s life to comply with forthcoming EU circular economy regulations.

Key Takeaways

Universal Reach: Under the ESPR framework, virtually every physical product sold in the EU will eventually require an active passport.
First Hard Deadline: Batteries are the first mandatory category, with strict enforcement beginning February 18, 2027.
Fully Digital Infrastructure: A DPP is a dynamic, machine-readable digital twin accessed via QR code—not a static paper document.
Shared Liability: Compliance obligations extend across the entire market chain, directly impacting manufacturers, importers, and distributors.
Unified Platform: PassoNext provides a single, scalable platform built to manage DPP compliance across every ESPR-regulated category.

The European Union is rolling out its most ambitious product transparency framework to date: the Digital Product Passport. If your business builds, imports, or sells physical goods within the EU, this mandate fundamentally changes how you track, manage, and share product data.

This guide walks through what the Digital Product Passport actually is, the specific laws requiring it, the data it must hold, which industries face early deadlines, and the practical steps you should take now to prepare.

What is Digital Product Passport

A Digital Product Passport (DPP) is a standardized, machine-readable digital record that stays connected to a physical item throughout its life. It brings together verified details covering a product’s origins, material breakdown, environmental footprint, repair options, and end-of-life recycling pathways.

A DPP isn’t a voluntary “green” marketing badge. It is a strict legal mandate under EU law. If a product category requires a DPP, units without one simply cannot be sold on the European market.

Every passport links to a specific item, batch, or product line using a unique identifier. Users open the passport by scanning a physical data carrier—typically a QR code—placed directly on the product, its packaging, or accompanying paperwork. Anyone scanning the code can view public product information, while authorized inspectors and technicians unlock restricted data layers through secure channels.

Decoding The Legal Framework Driving the Mandate

The Digital Product Passport isn’t created by a single rulebook. On the contrary, two primary European legislative pillars establish these requirements across different sectors and timelines.

Ecodesign for Sustainable Products Regulation (ESPR) — Regulation (EU) 2024/1781

The ESPR serves as the broad, overarching framework for product sustainability. Published in the Official Journal on 28 June 2024 and coming into force on 18 July 2024, Articles 9 through 12 establish the foundation for digital product passports across almost all physical items sold in the EU.

Instead of implementing immediate requirements uniformly across all industries – ESPR (European Single Market for Products Regulation) authorizes its European Commission to administer category-specific “delegated acts.” Each of these acts will assign the precise data fields, formatting specifications, and compliance timelines for the specific product group to which it pertains.

EU Battery Regulation — Regulation (EU) 2023/1542

The Battery Regulation is the first sector-specific law to make digital passports mandatory. Article 77 requires a custom battery passport for industrial batteries over 2 kWh, electric vehicle (EV) batteries, and light transport batteries (LMTs, such as e-bikes and e-scooters).

With an enforcement date of 18 February 2027, the battery passport is the first mandatory DPP under EU law, serving as the practical blueprint for all subsequent ESPR regulations.

What Data Must a Passport Contain?

A DPP is a structured dataset rather than a simple digital document. While precise fields vary by product type and will be detailed in individual delegated acts, the overarching ESPR framework sets out core data categories.

Identity and Traceability

Unique product identifier (assigned at the item, batch, or model level)
Global Trade Item Number (GTIN) or equivalent global syntax
Manufacturer details, registered trade names, and contact channels
Production facility locations
Specific model identifiers, serial numbers, or batch codes

Environmental Impact

Lifecycle carbon metrics per unit across defined operational boundaries)
Energy consumption profile during active use
Environmental footprint scores calculated via official Product Environmental Footprint (PEF) methods

Materials and Chemical Transparency

Complete component-level bill of materials
Disclosures of hazardous materials or substances of concern (including chemical names, CAS numbers, concentrations, and physical locations)
Declarations covering REACH restriction lists and candidate substances
Certified recycled content shares broken down by material

Circular Life and Maintenance Information

Disassembly instructions and component recyclability ratings
Spare part availability lists and guaranteed delivery windows
Maintenance protocols and official repair manuals
Safe disposal rules and local take-back logistics

Compliance Certifications

Official EU Declaration of Conformity
CE mark documentation
References to harmonized technical standards
Notified body details and official test certificates

Looking at the battery sector provides a clear picture of this depth: Annex XIII of Regulation (EU) 2023/1542 specifies its passport content, with Commission guidance detailing 71 distinct metrics. Of those, 51 are mandatory for EV batteries by February 2027, 54 for LMT batteries, and 36 for large industrial units. This granular structure shows the level of detail manufacturers should expect as ESPR delegated acts roll out to other industries.

Which Products Are Affected First?

The EU plans to bring virtually every physical product on its market under the DPP umbrella through a phased rollout.

Batteries (First Wave — February 2027)

Under Regulation (EU) 2023/1542, passports become mandatory on 18 February 2027 for industrial batteries over 2 kWh, EV traction batteries, and LMT power packs. This marks the first binding deadline.

ESPR Priority Categories

The European Commission has identified its primary target sectors for the initial wave of ESPR delegated acts:
Textiles and footwear
Furniture
Iron and steel
Aluminum
Tires
Consumer electronics and ICT equipment
Detergents
Paints and varnishes
Lubricants and industrial greases

Delegated acts for these sectors are set to roll out between 2025 and 2028. Because each act typically grants an 18 to 36-month transition period, the first ESPR-based passports will become enforceable between 2028 and 2030.

Broader Product Scope

The ESPR applies across the market – leaving very few exceptions. They are; human and veterinary medicines, food and feed, live plants and animals, human-origin products, and motor vehicles governed under existing type-approval rules. Outside these specific exclusions, almost any physical good could eventually require a passport once its sector-specific delegated act passes.

Regulatory Timeline and Deadlines

Sequencing your compliance work is critical because system integrations require long lead times.

17 August 2023: EU Battery Regulation (2023/1542) comes into force.
18 July 2024: ESPR framework (2024/1781) takes effect.
February 2025: Mandatory carbon footprint declarations take effect for EV and industrial batteries over 2 kWh (Article 7).
August 2026: Carbon footprint performance classes apply to EV and large industrial units.
20 July 2026: The official EU DPP Registry testing portal opens alongside its sandbox environment.
18 February 2027: Battery passports become mandatory for LMT, EV, and industrial batteries over 2 kWh.
2025–2028: Commission adopts ESPR delegated acts for priority product sectors.
2028–2030 (Estimated): First wave of ESPR-based product passports becomes mandatory.

Who Is Responsible for Creating the DPP?

Legal accountability falls on the economic operator who introduces the product to the EU market. While this is usually the primary manufacturer, obligations extend across the supply chain.

Manufacturers

Manufacturers have the primary responsibility. As per the mandate, they must compile accurate datasets, build the passport, affix the scannable data carrier, and register the unit with the central EU registry. They also need to host and preserve passport data for the duration specified in the relevant delegated act. This duration is typically the product’s expected operating life plus ten years.

Importers

For goods produced outside the EU, the importer introducing them to the market must verify that a valid, compliant passport exists. If an overseas factory fails to produce a compliant DPP, the importer cannot legally clear those goods through customs.

Authorized Representatives

Non-EU manufacturers can appoint an authorized representative based within the EU to manage specific DPP obligations. While the representative’s details must appear inside the passport, the underlying legal obligation for data accuracy remains with the manufacturer.

Technical Data Carrier Requirements

Every product needs a physical point of entry to its digital passport placed directly on the unit, its packaging, or accompanying documentation.

The ESPR framework itself does not automatically force everyone to use a QR code. Article 9(2)(b) lets each delegated act select the best carrier for its product group, provided it complies with the standards in Annex III. However, when a regulation specifically prescribes a QR code—as the Battery Regulation does under Article 77(3)—that code must conform to ISO/IEC 18004. Syntax standards like GS1 Digital Link satisfy this rule, allowing a single scanned code to route different users to different destinations based on their access permissions.

Systems can remain compatible across international supply chains, customs checkpoints and market surveillance tools by using interoperable standards such as GS1 Digital Link. So when customs in Portugal check a QR code scanned at a logistics hub in Germany, it has to resolve to the exact same structured data structure.

Physical durability is equally critical. Because data carriers must remain readable for the item’s entire operating life, manufacturers must choose printing, etching, or labeling methods that can withstand abrasion, moisture, chemicals, and heat exposure.

Three-Tier Access Security Model

To protect commercial IP while delivering total transparency, Article 10 of Regulation (EU) 2024/1781 sets up a three-tiered security architecture.

Public Tier

Accessible to anyone with a smartphone. It displays general product identities, environmental performance ratings, user maintenance guides, and local recycling steps. This layer is designed to inform everyday consumers and buyers.

Authorized Tier

For authenticated stakeholders with a legitimate interest, i.e. certified repair shops, refurbishers, recyclers and academic researchers. This tier requires identification verification. Unlocking it will give you access to engineering schematics, precise chemical breakdowns, and component disassembly guides that are required for professional servicing or material recovery.

Regulatory Tier

Only for market surveillance inspectors and customs officers. This layer contains commercially sensitive records such as supplier identities, sub-tier supply chain tracking and raw laboratory test files. Access is directly managed by the authentication infrastructure of the EU Central DPP Registry.

Manufacturers must implement all three tiers properly. Exposing private trade secrets publicly—or locking authorized repairers out of legitimate technical data—violates compliance rules.

The EU Central DPP Registry

Article 13 of the ESPR instructs the European Commission to build and manage a central digital product passport registry to store product unique identifiers. Under Article 13(6), customs officers and national enforcement agencies access this registry to carry out official verification duties. (A separate provision, Article 12, governs operator and facility identifiers.)

The central registry does not directly host the raw product files. Instead, it acts as a central directory that holds unique identifiers and forwards queries to the real passport on a manufacturer’s secure software platform. The central system, upon receiving a product code, checks its validity, determines the corresponding passport endpoint, and regulates authenticated access to restricted data layers.

While the Commission continues developing this infrastructure, businesses should build their internal data systems to be registry-compatible from day one, avoiding expensive system retrofits down the road.

Action Plan for Business Readiness

Preparing for DPP compliance requires extensive data collection, system integration, and vendor coordination—a process that typically takes 12 to 24 months.

Map Your Regulatory Exposure: Review your product catalog against the Battery Regulation and ESPR priority lists to identify which product lines face early deadlines, then track incoming delegated acts for your sector.
Data Gap Analysis: Compare your existing product information with the required legal data elements. Most companies find significant gaps in lifecycle carbon calculations, chemical declarations and sub-tier supplier origins.
Formalize Supply Chain Contracts: Much of your passport data is flowing upstream. Update vendor contracts and procurement policies today to require structured disclosures of raw material origins, chemical ingredients and sub-assembly carbon footprints.
Deploy Dedicated DPP Platform Tools: Passports are active software endpoints, not static documents. Adopt a platform that can generate, host, and update passports across your catalog while supporting GS1 Digital Link syntax, role-based access security, and API connections to the EU Central Registry. PassoNext delivers this exact compliance infrastructure out of the box.
Run a Pilot Rollout: Pick a single product line to build test passports, generate physical QR codes, test scanning workflows, and verify data completeness before scaling across your full catalog.

Penalties for Non-Compliance

Failing to meet DPP rules carries immediate legal, financial, and operational risks.
Under the ESPR, national market surveillance authorities have the power to pull non-compliant items from store shelves, halt imports, and levy financial penalties. Article 74 requires Member States to set up penalties that are effective, proportionate, and dissuasive, explicitly mandating administrative fines and temporary bans from public procurement tenders under Article 74(3).

The Battery Regulation enforces similar rules under Article 76, empowering inspectors to take corrective action against non-compliant battery lines.

Beyond administrative fines, non-compliance creates serious logistics bottlenecks. Because EU customs agencies will connect directly to the central registry, shipments arriving without valid, registered passports can be detained at border entry points. For global supply chains, a single customs hold can halt distribution across the entire European market.

Missing passports also carry reputational risks. Because public passport layers are open to consumers, competitors, and advocacy groups, an incomplete or broken passport signals that a brand is failing its regulatory obligations.

The Strategic Opportunity

Treating the Digital Product Passport as a strategic asset rather than a regulatory burden unlocks significant operational advantages.

A well-engineered DPP gives you complete visibility across your product lifecycle. It drives smarter decisions around material selection, vendor management, and circular design. It equips your sales and marketing teams with verified, auditable sustainability credentials, positioning your brand as an industry leader in transparency.

Companies that invest in robust DPP infrastructure now will transition smoothly as new delegated acts pass, while those that wait face compressed timelines, spiraling integration costs, and severe supply chain disruptions.

Frequently Asked Questions

Is a Digital Product Passport the same as an EPD?

No. An Environmental Product Declaration (EPD) is a voluntary disclosure standard governed by ISO 14025. A DPP is a mandatory legal requirement with explicit data structures, access control layers, and statutory enforcement mechanisms. While a DPP can incorporate EPD data, they remain separate tools.

Does the DPP apply to products sold outside the EU?

The mandate applies strictly to goods placed on the EU market. Products built exclusively for non-EU regions do not require a passport. However, if a product model is sold both within and outside Europe, units destined for EU markets must carry a compliant DPP.

Can we use our existing PLM or ERP system as a DPP?

Internal PLM and ERP databases hold much of the raw data a passport requires, but they aren’t designed to operate as publicly accessible, standards-compliant web endpoints. You need a dedicated DPP platform to ingest internal records, format them to meet regulatory standards, manage tiered access security, and interface with the EU Central Registry. PassoNext connects directly with existing enterprise ERP and PLM systems to bridge this gap.

How long must a passport remain online?

The ESPR states that passports must stay active and accessible for a product’s expected operating life plus an additional period defined in its delegated act. For long-life goods like heavy equipment or building materials, this means maintaining hosted data infrastructure for decades.

Summary Impact on Your Operations

If you build, import, or distribute physical products in the EU, the Digital Product Passport will directly change your day-to-day operations. Starting with batteries in February 2027 and expanding across textiles, electronics, tires, and beyond, every covered product line will need a scannable digital passport before legally entering the European market.

The time to prepare is now. Organizations that start auditing product records, engaging upstream suppliers, and deploying passport infrastructure today will hold a clear competitive advantage over those scrambling at the deadline.

Immediate Next Steps

Identify which product lines fall under EU Battery Regulation 2023/1542 or ESPR 2024/1781.
Audit existing technical files—including test certificates, safety sheets, bills of materials, and vendor records.
Create a PassoNext account and build your first test product to understand data formatting needs.
Map your supply chain to locate key suppliers holding critical data on material origins, carbon intensity, and chemical components.
Subscribe to Regulatory Radar on PassoNext.digital for real-time updates on delegated acts and compliance deadlines.

EU DPP Regulatory Hub

Battery Passport

Days

Feb 18, 2027

Frequently asked questions

What is a Digital Product Passport (DPP)? What is the purpose of a Digital Product Passport?

A Digital Product Passport is a structured data record for a single product that digitally tracks its lifecycle, and under EU regulations the Ecodesign for Sustainable Products Regulation ESPR 2024/1781 and the Battery Regulation EU 2023/1542 require that a certain set of the product’s information be stored in a machine-readable format in a data carrier such as a QR code. The passport contains information required by the regulation, including materials, environmentally relevant product characteristics and supply chain data, compliance, end-of-life processing, and any other data specific to the product category.

Who needs a Digital Product Passport in the EU?

Any economic operator that places an in-scope product on the EU market must assign a data carrier with a digital product passport to the product. Each regulation covers specific product categories, as defined in the corresponding delegated acts. The first sectors to be included are EV and industrial batteries (18 February 2027) followed by clothing and home textiles, tyres, iron and steel, and consumer electronics.

When does the Digital Product Passport become mandatory?

Under the Battery Regulation, the first legal deadline for any entity placing batteries on the EU market is 18 February 2027 for electric vehicle and large motive transport batteries and industrial batteries with a capacity above 2 kWh. In relation to ESPR, the inclusion of each of the eight product categories identified in its delegated act is to take place on a rolling basis: expected dates for inclusion are 2027-2028 for textiles, 2027 for iron and steel, 2027-2028 for tyres, and 2028-2030 for consumer electronics and small electrical household appliances. The EU Commission’s 2025-2030 strategic plan indicates sectors prioritised for inclusion in the regulation’s scope.

What information must a Digital Product Passport contain?

The information included in a digital product passport depends upon the product category and is specified in the corresponding delegated act, but all DPPs must include information relating to four main areas: (1) product identification and responsible economic operators including a unique product identifier (UPI), economic operator identifier and, where relevant, the facility identifier (FACID); (2) materials and substances; (3) environmentally relevant product characteristics and supply chain data, including carbon footprint, repairability, reusability and recyclability where relevant; and (4) compliance evidence including conformity declarations, test reports and certification.

How is a DPP different from a QR code?

A QR code is the physical data carrier printed on the product, its packaging or a label. The passport is the digital record that the QR code links to — article 77.3 of the Battery regulation stipulates that the QR code and unique product identifier must be compatible with the ISO/IEC 15459 series of standards, meaning that the information should be accessible to any consumer or regulator with a QR code reader, not just a specific proprietary application. GS1 Digital Link is a technology which enables this type of linking and is used by many companies because the GS1 organisation is an authorised issuer under ISO/IEC 15459, but neither of the two regulations specifically names GS1. A QR is a doorway. The DPP is the other side of the door.

Who is responsible for creating the DPP — the manufacturer, importer, or distributor?

The entity responsible for creating a QR code or other type of product identifier is the manufacturer of products placed on the EU market or the importer or their authorised representative if the product was not manufactured within the EU. Distributors and online marketplaces must ensure that a digital product passport exists before making products available on their platform and can be held liable if they knowingly distribute products without one. Responsibility is joint and several across the supply chain under ESPR Article 27.

How long must DPP data be kept available?

Under ESPR Article 11, the information in a digital product passport must be publicly accessible for the lifetime of the product plus 10 years after it was placed on the market and must remain available across changes of ownership in the supply chain. If a DPP service provider ceases activity, it must transfer this information to another service provider or to the EU Central Registry without interrupting access. Erasing this information before the end of its retention window violates the regulation.

Is a Digital Product Passport required outside the EU?

While EU law mandates DPPs only for products placed on the EU market, all products available on the EU market, regardless of their country of origin, must have a DPP. This means that non-EU manufacturers must appoint an EU-based authorised representative or work with an EU-based importer who would be responsible for the DPP. Some countries and jurisdictions, including the UK, Switzerland and several US states, are currently considering similar regulations, but as of 2026 only the EU has passed a comprehensive multi-category law.

Ready to start your product passport?

Start free. No credit card required. Your first 10 passports stay free, even after the trial ends.