ESPR Digital Product Passport (DPP) Data Carrier Specifications, Access-Rights Hierarchy, and Product Registration Registry
ENFORCEMENT TIMELINE
In force since July 18, 2024 (specific DPP obligations apply in stages via product-category-specific delegated acts)
Overview
This card focuses on the specific operational practice for the "Digital Product Passport (DPP)" system established under Articles 9–12 and other provisions of the ESPR, covering the technical specifications of the data carrier (such as a QR code), the tiered design of data access rights, and the operation of the product registration registry.
The DPP assigns each covered product a unique identifier, and makes information such as material composition, environmental performance, reparability information, and regulatory compliance status accessible in machine-readable form through a data carrier — a QR code, data matrix, RFID tag, or similar — displayed on the product itself or its packaging. Exactly which information items must be included in the DPP, and from which product category obligations begin, is determined not by the ESPR itself but individually through the delegated act for each product category. The DPP is designed around a tiered access-rights model in which the scope of disclosure differs depending on the type of user — consumers, businesses, market surveillance authorities, recyclers, and so on.
Enforcement Timeline
July 18, 2024: The ESPR (Regulation (EU) 2024/1781) enters into force, establishing the legal basis for the DPP system.
April 16, 2025: The European Commission adopts the 2025–2030 Ecodesign and Energy Labelling Working Plan, presenting the priority product categories for DPP mandates (textiles, furniture, iron and steel, aluminium, tyres, and others).
Going forward: As delegated acts are adopted and applied for each priority product category, the specific DPP data items, data carrier specifications, and access-rights design are expected to be confirmed and applied category by category.
Business Impact
Companies subject to DPP mandates will need to build internal systems that structure and retain data across the full product lifecycle, from raw material sourcing through manufacturing, distribution, use, and disposal. In particular, they will need to establish a data governance structure that distinguishes and manages multiple tiers of access rights — basic information for general consumers, detailed compliance data for regulators, and disassembly/dismantling information for recyclers, among others.
For products with supply chains spanning multiple countries and operators, companies will need to consider contractual frameworks for collecting the data required for the DPP from upstream suppliers, as well as how to interface with the EU's central data registry. Because the content of delegated acts differs by product category, continuously tracking which priority implementation phase applies to one's own products and judging the right timing to invest in data collection infrastructure is a key practical challenge.