What is the EU Digital Product Passport?

A structured set of data about a physical product, reachable from the product itself through a data carrier such as a QR code or an NFC tag. It was introduced by the Ecodesign for Sustainable Products Regulation, Regulation (EU) 2024/1781, which was published in June 2024 and entered into force in July 2024.

Is the Digital Product Passport mandatory now?

No. ESPR is a framework. A DPP only becomes binding for a product group once the European Commission adopts a delegated act for that group, and each act sets its own data requirements and dates. Anyone telling you every product needs a passport today is selling something.

When does DPP apply to textiles and apparel?

Textiles are among the first priority groups. The delegated act is expected around 2027, with mandatory compliance following in 2028. Dates have moved before and may move again, so treat them as planning assumptions rather than fixed deadlines.

Does DPP apply to luxury goods and leather?

Not yet as a category of their own. Luxury apparel is largely caught by the textiles act when it lands. Leather goods need a dedicated delegated act before any binding DPP obligation applies to them, and that act does not exist yet.

Can a QR code satisfy DPP?

Yes. ESPR requires a data carrier, and a printed QR code qualifies. The regulation is about disclosure, not anti-counterfeiting. A QR code cannot tell a genuine item from a copied label, so brands with a counterfeit problem tend to want more than the minimum.

Where does a cryptographic NFC tag add something?

Two places the regulation does not reach. First, authenticity: an NTAG 424 DNA tag signs each tap, so a cloned tag fails the check while a photographed QR code is indistinguishable from the original. Second, custody: a tap is a record that someone was physically at the item, which is what ownership transfer and resale provenance need.

EU regulation

The EU Digital Product Passport, without the deadline panic

Most pages about DPP open by telling you a deadline is coming and you are behind. The accurate position is more useful: the framework is law, almost none of it binds yet, and the dates depend entirely on which product you make.

What the regulation actually says

The Digital Product Passport comes from the Ecodesign for Sustainable Products Regulation, Regulation (EU) 2024/1781, published in June 2024 and in force since July 2024. It requires that a product carry structured information about itself, reachable from the product through a data carrier.

ESPR is a framework regulation. It does not impose the same requirements on everything at once. For any given product group, the obligation only exists once the European Commission adopts a delegated act for that group, and that act defines both the data and the date.

Who is affected, and when

Product group	Position
Textiles and apparel	Priority group. Delegated act expected around 2027, compliance around 2028.
Batteries	Covered by its own battery regulation, on an earlier track than ESPR.
Leather goods	No dedicated delegated act yet. No binding DPP obligation today.
Luxury goods generally	Not a category in the regulation. Luxury apparel is largely caught by textiles.
Everything else	Waiting on the Commission working plan.

These dates have shifted before. Treat them as planning assumptions, not commitments, and check the current working plan before you build a compliance programme around a year.

What a passport has to contain

The exact list comes from each delegated act. For textiles the expected categories are material composition, manufacturing information, environmental indicators, chemical compliance references, supply chain traceability to at least tier 2, and durability and recyclability information.

Note what is missing from that list: nothing in it proves the item in your hand is the item the passport describes. ESPR is a disclosure regime. It was written to make products repairable and recyclable, not to defeat counterfeiters.

QR code or NFC

ESPR requires a data carrier and a printed QR code satisfies it. If your only goal is to comply at lowest cost, print a QR code.

Two things a QR code cannot do, which is where tags earn their cost:

Tell a genuine item from a copied label

A QR code is an image. Photograph it and the copy is perfect. An NTAG 424 DNA tag signs every tap with an AES-128 key that never leaves the chip, and NFCFind verifies that signature server side, so a cloned tag fails the check.

Record that someone was physically at the item

NFC reads at a few centimetres. A verified tap is evidence of presence at the object, which is what handover, resale provenance and chain of custody actually turn on. A QR code can be scanned from a photograph on a screen.

If your product gets counterfeited, resold, or handed between owners, the passport is worth more when the carrier can prove it belongs to that item.

Where NFCFind fits

NFCFind gives a physical object a cryptographic identity and a record of who holds it. Tags are NTAG 424 DNA, locked at registration with an AES-128 key only the owner’s account holds, and every tap carries a fresh signature the server checks. A finder needs no app. Patent pending in the United States.

Being straight about scope: NFCFind is the identity and custody layer, not a compliance product. It does not file your passport, generate your ESPR data model or certify you against a delegated act that has not been published. If a vendor offers you certified DPP compliance for leather goods today, ask them which delegated act they are certifying against.

Questions people actually ask

What is the EU Digital Product Passport?: A structured set of data about a physical product, reachable from the product itself through a data carrier such as a QR code or an NFC tag. It was introduced by the Ecodesign for Sustainable Products Regulation, Regulation (EU) 2024/1781, which was published in June 2024 and entered into force in July 2024.
Is the Digital Product Passport mandatory now?: No. ESPR is a framework. A DPP only becomes binding for a product group once the European Commission adopts a delegated act for that group, and each act sets its own data requirements and dates. Anyone telling you every product needs a passport today is selling something.
When does DPP apply to textiles and apparel?: Textiles are among the first priority groups. The delegated act is expected around 2027, with mandatory compliance following in 2028. Dates have moved before and may move again, so treat them as planning assumptions rather than fixed deadlines.
Does DPP apply to luxury goods and leather?: Not yet as a category of their own. Luxury apparel is largely caught by the textiles act when it lands. Leather goods need a dedicated delegated act before any binding DPP obligation applies to them, and that act does not exist yet.
What data does a Digital Product Passport have to carry?: It depends on the delegated act. For textiles the expected categories are material composition, manufacturing information, environmental indicators, chemical compliance references, supply chain traceability to at least tier 2, and durability and recyclability information.
Can a QR code satisfy DPP?: Yes. ESPR requires a data carrier, and a printed QR code qualifies. The regulation is about disclosure, not anti-counterfeiting. A QR code cannot tell a genuine item from a copied label, so brands with a counterfeit problem tend to want more than the minimum.
Where does a cryptographic NFC tag add something?: Two places the regulation does not reach. First, authenticity: an NTAG 424 DNA tag signs each tap, so a cloned tag fails the check while a photographed QR code is indistinguishable from the original. Second, custody: a tap is a record that someone was physically at the item, which is what ownership transfer and resale provenance need.

The tag underneath all this

If you want the detail on how the cryptography works, what it stops and what it does not, that is the next page.

NTAG 424 DNA, and what it actually secures