Digital Product Passport (DPP)

## Digital Product Passport (DPP) A Digital Product Passport is a structured digital record linked to a physical product and accessed by scanning a QR code, carrying key sustainability, composition and compliance information across the product's life cycle. The EU is making DPPs mandatory, first for batteries from 18 February 2027, then across product groups under the Ecodesign for Sustainable Products Regulation. ### Key facts - A DPP links a unique product identifier to a standardised dataset covering materials, carbon footprint, reparability, durability, recycled content and compliance documents. - The battery passport, required from 18 February 2027 under Regulation (EU) 2023/1542, is the first mandatory DPP and the template for later product groups. - Under the Ecodesign for Sustainable Products Regulation (EU) 2024/1781, the Commission will require DPPs product group by product group through delegated acts. - Data carriers are typically QR codes on the product, packaging or documentation; the regulation specifies what must be machine-readable and accessible without proprietary software. - Access is tiered: consumers see sustainability and use information, while repairers, recyclers and authorities access deeper technical data, with trade secrets protected. - The passport must remain available for the product's expected lifetime, creating long-term data hosting and maintenance obligations. - DPP data must be based on open standards and interoperable formats so that any authorised party can read any compliant passport. ### What a Digital Product Passport is The Digital Product Passport turns the product itself into the entry point for its data. Instead of sustainability information living in PDFs on a manufacturer's website, it lives at a persistent digital address bound to the product instance by a data carrier, usually a QR code, and structured to a common schema. Scanning the code resolves to the passport: a machine-readable record with defined data fields, access rules and a lifetime that outlasts the commercial relationship with the buyer. The concept has three layers. The identifier layer gives each product or batch a unique identity, building on existing systems such as GS1 identifiers. The data layer holds the regulated information: what the product contains, its carbon footprint, how to repair it, how to recycle it, and the compliance documentation behind it. The access layer controls who sees what: a consumer checking reparability, a repair shop needing disassembly instructions, a recycler needing material composition, and a market surveillance authority verifying the carbon declaration each get appropriate views. The regulatory insight behind the DPP is that information asymmetry blocks the circular economy. Consumers cannot choose durable, repairable products without reliable data; recyclers cannot recover materials they cannot identify; authorities cannot verify sustainability claims they cannot audit. The passport makes the data travel with the product so that every actor in the life cycle can act on it. ### Why it matters for market access The DPP converts sustainability from a marketing narrative into a market access condition. From the applicable date, a battery without a compliant passport cannot be placed on the EU market, just as a product without CE marking cannot. The passport is checked as part of conformity: the data carrier must be present, the data must be in the prescribed format, and the underlying declarations, such as the carbon footprint, must be valid. A beautiful product with no passport is a non-compliant product. The passport also makes supply chain data a deliverable. The manufacturer cannot populate the passport without structured data from suppliers: material compositions, recycled content evidence, carbon data, and substances of concern. Suppliers that cannot provide machine-readable data in the required format become bottlenecks, and procurement contracts must now specify data deliverables alongside physical ones. This is a profound change for industries where supplier data historically arrived as PDFs, emails or nothing at all. For brands, the passport is a transparency surface that competitors, NGOs and regulators can all read. Claims about recycled content, carbon footprint and durability become verifiable against the passport data, which raises the cost of greenwashing and rewards genuine performance. Companies with strong sustainability data gain a visible, regulator-backed channel to communicate it; companies with weak data lose the ability to hide behind vague claims. ### Who it applies to The DPP rollout is phased by product group: - Battery manufacturers and importers, first in line: the battery passport is mandatory from 18 February 2027 for the regulated battery categories, with the data requirements set in the Batteries Regulation and its delegated acts. - Manufacturers of products covered by future [ESPR](/glossary/espr) delegated acts, with priority groups identified in the Commission's working plan, expected to include textiles, electronics, iron and steel, and other high-impact categories. - Importers and authorised representatives, who must ensure the passport exists and is accessible before placing products on the EU market. - Suppliers of materials and components, who must provide the structured data their customers need to populate passports. - Data service providers, a new market of passport registries, data carriers and software platforms that must meet the regulation's interoperability and availability requirements. The obligations attach to placing products on the EU market, so non-EU manufacturers selling into the EU are fully within scope and must arrange passport provision through their EU operations, importers or service providers. ### Requirements and implementation process Building DPP capability involves six workstreams. 1. Regulatory scoping. Identify whether the product group is covered by a mandatory passport requirement and from which date. Batteries have a fixed date; other groups follow the ESPR delegated act timetable. Products outside mandatory scope may still face customer or procurement demands for passport-like data. 2. Data modelling. Map the required data fields for the product group: identifiers, materials and substances, carbon footprint, recycled content, durability and reparability parameters, and compliance documents. Define which fields are per product instance, per batch or per model, and which suppliers provide each field. 3. Supply chain data collection. Build the inbound data pipeline: supplier questionnaires in structured formats, evidence requirements for recycled content and carbon data, and contractual data deliverables. This is typically the longest workstream, because it requires changing how suppliers report. 4. Passport system selection. Choose or build the passport solution: data carrier generation, hosting with the required availability lifetime, access control for tiered data, and interoperability with the EU's developing passport infrastructure. Avoid proprietary lock-in that could strand data. 5. Data carrier application. Integrate the QR code or other carrier into product labelling, packaging artwork and production processes. The carrier must survive the product's expected lifetime and remain scannable, which constrains materials and placement. 6. Verification and maintenance. Validate that passport data matches the underlying declarations and test evidence, establish update procedures for data changes, and ensure the passport remains available for the required period after the product is placed on the market. | Passport element | Content | Audience | |---|---|---| | Product identifier | Unique ID linking physical product to record | All | | Composition data | Materials, substances of concern | Recyclers, authorities | | Carbon footprint | Declared life-cycle emissions | Consumers, procurers, authorities | | Reparability | Scores, spare parts, manuals | Consumers, repairers | | Compliance documents | Declarations, certificates | Authorities | | End-of-life | Dismantling and recycling information | Recyclers | ### Market access relevance DPP readiness should be treated as a product launch gate alongside conformity assessment. The passport requires data that can only be collected during design and sourcing, so retrofitting it after production starts is expensive. Product lifecycle management systems should carry passport fields as native data, not as an afterthought export. Supplier strategy must evolve. Preferred suppliers will increasingly be those that deliver structured sustainability data reliably; supplier scorecards should add data quality metrics, and contracts should specify formats, timelines and evidence standards. For complex products with deep supply chains, the data collection programme may take longer than the product development cycle, so it should start first. The passport also creates commercial opportunities. A well-populated passport supports premium positioning on durability and sustainability, satisfies green public procurement criteria that reference passport data, and simplifies compliance with overlapping disclosure regimes. Companies that build the data infrastructure early can reuse it for customer reporting, investor ESG disclosures and other market requirements, turning a compliance cost into a data asset. ### Common misconceptions | Misconception | Reality | |---|---| | "A QR code linking to our website is a DPP." | The passport must use the regulated data model, open standards and access rules. A marketing landing page is not a passport. | | "Only the finished product manufacturer is affected." | Suppliers must provide the structured data the passport requires. The obligation cascades through the supply chain. | | "Passports are only for batteries." | Batteries are first. The ESPR extends passports across product groups through delegated acts. | | "All passport data is public." | Access is tiered. Commercially sensitive data is restricted to authorised parties such as authorities and recyclers. | | "We can build the passport after launch." | The passport must be available when the product is placed on the market, and its data depends on design and sourcing decisions. | | "One passport format works globally." | The EU regime sets specific requirements. Other jurisdictions may develop their own, requiring multi-format capability. | ### Frequently asked questions When does the battery passport become mandatory? From 18 February 2027 for the battery categories covered by Regulation (EU) 2023/1542. The detailed data requirements are set in delegated acts. What data carrier must we use? The regulation provides for QR codes and equivalent machine-readable carriers on the product, with the passport accessible without proprietary software. Implementation details are in the delegated acts. How long must the passport remain available? For the product's expected lifetime, which creates long-term hosting obligations that outlast typical IT planning horizons. Provider selection should weigh longevity and data portability. Who can see our cost and supplier data? Tiered access protects commercially sensitive information. Public views cover consumer-relevant sustainability data; deeper technical and supply chain data is restricted to authorised actors. Do we need a passport for products sold before the mandatory date? The obligation applies to products placed on the market from the applicable date. Stock already placed on the market is generally not retroactively covered, but verify the transitional provisions of the specific delegated act. Can a service provider handle the whole passport for us? Providers can supply the platform, carriers and hosting, but the manufacturer remains responsible for the accuracy of the data. Data governance cannot be outsourced. ### Sources - Regulation (EU) 2023/1542 on batteries and waste batteries (EUR-Lex): https://eur-lex.europa.eu/eli/reg/2023/1542/oj/eng - European Commission, batteries policy page: https://environment.ec.europa.eu/topics/waste-and-recycling/batteries_en - Regulation (EU) 2024/1781, Ecodesign for Sustainable Products (EUR-Lex): https://eur-lex.europa.eu/eli/reg/2024/1781/oj/eng