Digital Product Passport (DPP)
A Digital Product Passport is a standardized, machine-readable dataset that accompanies a physical product throughout its lifecycle — from manufacturing to end-of-life recycling. Introduced by the EU Ecodesign for Sustainable Products Regulation (ESPR) and made mandatory per product group by delegated acts, the DPP aims to create complete transparency about a product’s materials, origin, environmental impact, repairability, and recycled content.
Key Facts
| Detail | Information |
|---|---|
| Legal basis | Regulation (EU) 2024/1781 — Ecodesign for Sustainable Products Regulation (ESPR): framework, with obligations per product group set by delegated act. Batteries: Regulation (EU) 2023/1542 |
| First product categories | Batteries — LMT, industrial >2 kWh and EV — from 18 February 2027 (Batteries Regulation (EU) 2023/1542); ESPR product groups follow by delegated act |
| Electronics DPP | No product-specific act yet; the Working Plan 2025–2030 covers ICT through horizontal measures (repairability — adoption planned 2027; recycled content and recyclability of electrical equipment — 2029) |
| Data carrier | Barcode, 2D symbol (e.g. QR code) or other machine-readable carrier, specified per product group; linked to a persistent unique product identifier |
| Data location | Decentralized — stored by the economic operator or a DPP service provider (with back-up copy); unique identifiers are recorded in the Commission’s DPP registry |
| Access levels | Set per product group in the delegated act (e.g. public, authorities, parties with a legitimate interest) |
What Information Does a DPP Contain?
For Electronics / Hardware Products
| Data Category | Examples |
|---|---|
| Product identity | Unique serial number, manufacturer, model, manufacturing date/location |
| Material composition | Bill of materials, substances of concern (SCIP database link), conflict minerals |
| Environmental footprint | Carbon footprint per unit, energy consumption during use, lifecycle assessment |
| Repairability | Repair score, spare parts availability, disassembly instructions, expected lifetime |
| Software components | SBOM reference — cross-link to CRA-mandated Software Bill of Materials |
| Recycled content | Percentage of recycled materials per component category |
| End-of-life | Recycling instructions, hazardous waste classification, take-back program |
| Supply chain | EU/non-EU manufacturing origin, due diligence declarations |
| Compliance | CE marking status, applicable directives, conformity certificates |
DPP vs. SBOM
The DPP and SBOM are complementary but distinct:
| Aspect | Digital Product Passport | SBOM (Software Bill of Materials) |
|---|---|---|
| Regulation | ESPR (Ecodesign) | CRA (Cybersecurity) |
| Scope | Entire product (physical + digital) | Software/firmware components only |
| Purpose | Sustainability, circularity, transparency | Cybersecurity, vulnerability management |
| Content | Materials, carbon footprint, repairability, recycled content | Package names, versions, licenses, vulnerabilities |
| Target audience | Consumers, recyclers, market surveillance | Security teams, DevOps, regulatory authorities |
| Overlap | References SBOM for software components | Part of the DPP’s digital component inventory |
For hardware manufacturers: You will need both. The CRA requires an SBOM for cybersecurity; the ESPR introduces the DPP for sustainability, mandatory once a delegated act covers your product group. The SBOM becomes a component within the broader DPP.
Technical Architecture
+--------------------------------------------------+
| PHYSICAL PRODUCT |
| +--------------+ |
| | Data carrier | -> unique product identifier |
| +--------------+ |
+---------+----------------------------------------+
| Scan / read
↓
+--------------------------------------------------+
| DIGITAL PRODUCT PASSPORT |
| Stored by the economic operator or a DPP |
| service provider (with back-up copy) |
| - Public data: materials, repair, carbon |
| - Restricted data: detailed BOM (authorities) |
| - Confidential data: trade secrets |
| - SBOM cross-reference (CRA compliance) |
+--------------------------------------------------+
+--------------------------------------------------+
| EU DPP REGISTRY (European Commission) |
| Records the unique identifiers for |
| authorities and customs; not a public lookup |
+--------------------------------------------------+Timeline for Electronics
| Phase | Timeline | What Happens |
|---|---|---|
| Batteries | 18 February 2027 | Battery passport under Regulation (EU) 2023/1542 — LMT, industrial >2 kWh and EV batteries |
| Textiles (apparel) | Delegated act planned for 2027; applies at least 18 months later | Apparel; footwear not in the first working plan |
| Electronics | Horizontal acts planned for 2027 and 2029 | Scope to be defined; may include consumer electronics and small household appliances |
| Working plan horizon | 2025–2030 | Delegated acts for the prioritised groups; review in 2028 |
Relevance for EU Hardware Supply Chain
For manufacturers with a 100% EU supply chain, DPP compliance is simpler:
- Origin transparency — EU-sourced components have traceable supply chains.
- Environmental data — EU suppliers are subject to consistent environmental reporting (CSRD).
- Conflict minerals — EU sourcing eliminates due diligence complexity for conflict minerals.
- Recycled content — EU recycling infrastructure provides verifiable recycled material certification.
Related Terms
- SBOM — The software-specific component of a DPP, covering firmware and software dependencies.
- CE Marking — DPP compliance status is linked to the product’s conformity declaration.
- CRA — The cybersecurity regulation that mandates the SBOM component referenced by the DPP.
Official References
- Regulation (EU) 2024/1781 (ESPR) — Ecodesign for Sustainable Products Regulation — EUR-Lex (legal basis for the Digital Product Passport)