Digital Product Passport: The Complete Guide (2026)
TL;DR: The Digital Product Passport (DPP) is a digital record of a product's composition, sustainability and repair data, accessible through a QR code on the product. It becomes mandatory in the EU category by category: batteries first (18 February 2027), then textiles, furniture and more. Nothing is mandatory for most products yet - but the brands that prepare their data early will spend a fraction of what the laggards will.
What is a Digital Product Passport?
A Digital Product Passport is a structured set of data about a specific product - what it is made of, where it comes from, how durable and repairable it is, what substances it contains and how to recycle it. The data lives online and is reachable through a data carrier on the product itself: in practice, almost always a QR code printed on a label, engraved on a part or sewn into a garment.
The legal basis is the Ecodesign for Sustainable Products Regulation (ESPR, Regulation (EU) 2024/1781), which entered into force on 18 July 2024. ESPR is a framework: it does not itself require a passport for any product. The actual obligations arrive through delegated acts, adopted per product category, each with its own data requirements and its own deadline.
Which products, and when?
Three dates matter more than all the others:
- 18 February 2027 - batteries. Under the separate Battery Regulation (EU) 2023/1542, every EV, light means of transport (e.g. e-bike) and industrial battery above 2 kWh placed on the EU market needs a battery passport. This is the first mandatory DPP and the template everyone else will learn from.
- 2027 - the first ESPR delegated acts. The Commission's Working Plan 2025-2030 (adopted April 2025) puts iron and steel first (act expected from late 2026), with textiles, aluminium and tyres following in 2027.
- Your category's act + 18 months. Every delegated act comes with a transition period of at least 18 months before enforcement. For apparel this means: act expected around late 2027, real obligations most likely 2028-2029.
For the full sector-by-sector table, see our DPP deadlines by industry.
What data goes into a passport?
The exact list is set per category, but ESPR (Article 9 and Annex III) defines the menu: durability and reparability, recycled content, substances of concern (with name, location and concentration), carbon and environmental footprint, disassembly and care instructions, and identifiers - a unique product ID, plus IDs for the operator and facilities.
For clothing we already have a strong preview. The Commission's research centre (JRC) published its study on textile DPP content in May 2026, recommending 49 data points in four groups: product identification (GTIN, model and batch IDs, customs codes), manufacturer identification, product information (fibre composition, durability and recyclability scoring, recycled content, substances of concern, footprint, care, warranty). Two details matter enormously for small brands:
- Granularity: batch, not item. The recommended minimum is one passport per production batch. Serialising every single garment stays voluntary.
- Scope: textiles at 80%+ fibre content. Apparel including workwear and sportswear is in; footwear is excluded for now (a separate study runs to the end of 2027).
Who is responsible?
The "responsible economic operator" placing the product on the EU market: the manufacturer, the importer or the authorised representative. Three things surprise people:
- There is no SME exemption. Small brands get support measures, not a free pass. If your product needs a passport, it needs one regardless of your size.
- Non-EU brands are covered. If you sell into the EU, someone in the chain must provide the passport - and if you sell direct to consumers, that someone is effectively you. Read more in Who does the DPP apply to?
- Customs will check. Since the central registry went live (July 2026), the architecture is in place for customs to verify a product's registration identifier electronically at the border once obligations kick in.
How the infrastructure works
Three layers, and it is worth keeping them apart:
- Your passport data is hosted by you (or a service provider you choose) - not by the European Commission. Decentralised by design.
- The EU DPP Registry, live since 20 July 2026, is an index: it stores unique identifiers and pointers to where each passport lives, for authorities and customs. It does not store your product data.
- Standards make it interoperable: the CEN/CENELEC EN 182xx series (published mid-2026) covers identifiers (EN 18219), data carriers (EN 18220 - QR codes per ISO/IEC 18004) and the registry API (EN 18222). Identification in practice follows GS1 Digital Link, which means one QR can work at the checkout and open the passport.
What should a small brand do in 2026?
- Locate your deadline. Find your category in the deadline calendar and note both dates: the delegated act and act + 18 months.
- Start collecting data now. The pilot projects run for the Commission found that mapping products to passport schemas is the single biggest bottleneck - with error rates above 25% when data is stitched together from spreadsheets at the last minute. Material composition, supplier identities and certificates take months to gather cleanly.
- Do not buy enterprise software yet. The final data requirements for most categories are not law yet. Collect data in a structured way, and choose tooling when your delegated act is adopted. (Our cost guide shows why patience saves real money.)
- Treat the QR as an asset, not a burden. The same code that carries compliance data is a direct channel to whoever holds your product: care instructions, story, re-orders, registration. Compliance pays the entry fee; marketing collects the return.
FAQ
Is the DPP mandatory in 2026? For almost all products - no. The registry is live and the standards are published, but product-level obligations start with batteries in February 2027 and other categories from around 2028.
Is a QR code on my product already a DPP? No. A DPP is a defined set of structured data with a registered unique identifier. A QR code is just the door.
Does the DPP apply to products sold online from outside the EU? Yes - the obligation follows the product into the EU market, not the seller's address.
Will consumers actually see it? Part of the passport is public (scan the QR), part is restricted to authorities, recyclers and repairers.