What Is a
Digital Product Passport?
A Digital Product Passport (DPP) is a machine-readable record that travels with a physical product throughout its lifecycle — containing verified data about its materials, origins, carbon footprint, repairability, and end-of-life options. The EU is making DPPs mandatory across dozens of product categories from 2026 onwards.
How a Digital Product Passport works
A DPP is built on three components working together: a unique identifier on the product, a data record stored in a registry, and a verification mechanism that proves the data has not been altered.
1. Unique identifier on the product
A QR code, data matrix, or RFID tag on the product or its packaging encodes a unique identifier — typically a GS1 Digital Link (GTIN + serial) or a UUID. This links the physical object to its digital record.
2. Data record in a registry
Scanning the QR code resolves to a structured data record — the passport. This record contains all the product's sustainability, compliance, and lifecycle data in machine-readable format, accessible to any scanner or software.
3. Cryptographic verification
The data record is signed with a cryptographic key (Ed25519) and issued as a W3C Verifiable Credential. Any party — a regulator, a recycler, a customs authority — can independently verify that the data is authentic and has not been tampered with.
What a Digital Product Passport contains
The exact data required varies by product category and regulation, but every ESPR-compliant DPP includes at minimum:
Product identity
Unique identifier (GTIN, serial number, UUID), brand, model, and a unique code per product unit where required.
All categoriesMaterial composition
Materials and substances used, recycled content percentages, and hazardous substances present above threshold concentrations.
All categoriesManufacturer & supply chain
Manufacturer name and address, country of origin, EU Economic Operator identifier (EORI), and supply chain actor information relevant to the product category.
All categoriesEnvironmental performance
Carbon footprint (scope varies by category), energy consumption, durability rating, and other ecodesign metrics specified in the relevant delegated act.
Category-specificCompliance & conformity
Applicable EU regulations and standards met, conformity certificates issued by notified bodies, and declaration of conformity references.
Category-specificEnd-of-life information
Disassembly instructions, recyclability data, separate collection requirements, and information for waste treatment operators and recyclers.
All categoriesWho needs a Digital Product Passport?
Under ESPR, the obligation to provide a DPP falls on the economic operator placing the product on the EU market. Depending on the supply chain, that means:
- Manufacturers (EU-based): responsible for creating and maintaining the DPP for products they manufacture.
- Importers (non-EU manufacturer): when the manufacturer is outside the EU, the EU importer takes on responsibility for DPP compliance.
- Authorised Representatives: a manufacturer outside the EU can appoint an EU-based authorised representative to handle DPP obligations.
- Distributors and retailers: cannot place a product on the market without a valid DPP, even if they did not create it.
In practice, most DPP creation work falls on product manufacturers and brand owners, who control the product specification data that a DPP must contain.
A DPP is required for each product model (or in some categories, each individual unit with a serial number). Selling 10,000 units of the same model requires one DPP — but that DPP must be accessible from a QR code on every unit.
Why the EU is mandating product passports
The Digital Product Passport is one instrument within the EU's Circular Economy Action Plan — a strategy to reduce waste, extend product lifetimes, and make sustainability data visible to consumers, repairers, and recyclers who currently cannot access it.
The core problem DPPs solve: information asymmetry. A consumer buying a jacket has no way to know its actual cotton content, the country where it was dyed, or whether spare buttons are available. A recycler dismantling a battery pack has no way to know its chemistry or disassembly sequence without the manufacturer's cooperation. DPPs make this data mandatory, public, and machine-readable.
For regulators, DPPs enable automated market surveillance at scale — authorities can scan a QR code and instantly verify whether a product's declared properties match its DPP data, without needing the manufacturer's cooperation or manual document retrieval.
The ESPR framework regulation entered into force on 18 July 2024. It empowers the Commission to mandate DPPs for specific product categories via delegated acts. The first mandatory dates begin in 2026 for batteries and iron & steel.
See the complete timeline of ESPR DPP enforcement deadlines →
Digital Product Passport vs. existing compliance documents
| Document | Machine-readable | QR-accessible | Updatable | Verifiable | Consumer-facing |
|---|---|---|---|---|---|
| Digital Product Passport (DPP) | ✓ | ✓ | ✓ | ✓ | ✓ |
| CE Declaration of Conformity | ✗ | ✗ | ✗ | ✗ | ✗ |
| EU Energy Label | Partial | ✗ | ✗ | ✗ | ✓ |
| Mill Test Certificate (EN 10204) | ✗ | ✗ | ✗ | ✗ | ✗ |
| REACH SVHC Notification | ✗ | ✗ | Partial | ✗ | ✗ |
| Safety Data Sheet (SDS) | ✗ | ✗ | Partial | ✗ | ✗ |
Digital Product Passport — FAQ
Is a Digital Product Passport the same as a QR code on a product?
No — the QR code is just the access mechanism. The Digital Product Passport is the structured data record that the QR code links to. The QR code encodes a unique product identifier; scanning it resolves to the passport hosted in a registry. ESPR requires both: a QR code (or equivalent) on the physical product AND a machine-readable data record accessible via that code.
How long does a DPP have to remain accessible?
Under ESPR, the DPP must remain accessible throughout the useful life of the product and for a minimum period after the product is placed on the market (the exact duration varies by delegated act, typically 10–15 years). For batteries, the DPP must be accessible throughout the battery's entire lifecycle, including after resale.
Can a DPP be updated after the product is sold?
Yes, and for many categories it must be. Battery DPPs must be updatable with state of health and remaining capacity data. Electronics DPPs must reflect current software support commitments if they change. ESPR envisions the DPP as a living record — PassportLab maintains an immutable audit trail of every change, so the history is preserved even as the current data is updated.
What is the difference between ESPR and a specific regulation like the Battery Regulation?
ESPR (EU) 2024/1781 is the framework regulation that establishes DPPs as a concept and empowers the Commission to mandate them for specific products. Sector-specific regulations like the Battery Regulation (EU) 2023/1542 are separate, standalone laws that also happen to require DPPs — they predate ESPR and have their own data requirements and timelines. ESPR and sector regulations can overlap for the same product (e.g., an EV containing batteries must comply with both).
What is a GS1 Digital Link and why is it used in DPPs?
A GS1 Digital Link is an ISO/IEC standardised URL format that encodes a product's GTIN (barcode) and optional serial number in a web-resolvable URL. It allows the same QR code to work with existing EAN/UPC barcode infrastructure at point of sale AND as a DPP access mechanism at product end-of-life. PassportLab generates GS1 Digital Link-compliant QR codes for every DPP.
Does a DPP replace existing product documentation like declarations of conformity?
No. A DPP complements but does not replace existing compliance documentation. CE declarations of conformity, safety data sheets, mill test certificates, and energy labels remain required under their respective regulations. The DPP provides an additional, dynamic, consumer-accessible data layer on top of existing documents — and can link to those documents as evidence.
See a live Digital Product Passport
Generate a real DPP for your product in 2 minutes — no account, no credit card. See exactly what your customers and regulators will see.