EU Digital Product Passport penalties and enforcement

Article 74 of ESPR requires Member States to lay down and implement penalties for infringements of the Regulation. Those penalties must be effective, proportionate and dissuasive. Member States must at least be able to impose fines and time-limited exclusion from public procurement procedures; the article does not require both penalties in every case.

When setting penalties, a Member State must give due regard, as applicable, to the infringement's nature, gravity, and duration; intent or negligence; the responsible person's financial situation and determinable economic benefit; environmental damage; remedial action; whether the conduct is repeated; and other aggravating or mitigating factors. ESPR itself gives no euro amount, turnover cap, or fixed range for a missing, inaccurate, inaccessible, or outdated passport.

Battery passports are required by Regulation (EU) 2023/1542, not by an ESPR Article 4 delegated act. From 18 February 2027, each LMT battery, each industrial battery above 2 kWh, and each electric vehicle battery placed on the market or put into service must have an electronic battery passport.

Article 93 of the Batteries Regulation required Member States to establish effective, proportionate and dissuasive penalties by 18 August 2025. Unlike ESPR Article 74, it does not specify fines or public-procurement exclusion as minimum penalty types. A battery case therefore needs the relevant national battery-penalty rule; an ESPR penalty provision or amount cannot be substituted.

For an ESPR product, a passport breach requires an applicable Article 4 delegated act. Article 9 says the act's information requirements must provide that the product can be placed on the market or put into service only if a passport is available under that act and Articles 10 and 11.

The delegated act defines the covered product group, application date, passport data, data carrier, model/batch/item level, access and update rights, and availability period. It may also exempt a product group where DPP technical specifications are unavailable or another EU digital-information system achieves the statutory access and compliance objectives. Without the applicable act and product facts, neither the breach nor a product-specific fine trigger can be established.

A fine is only one possible consequence. When an authority has sufficient reason to believe that a product covered by an Article 4 act presents a risk, Article 69 requires an evaluation and, if the product is non-compliant, appropriate and proportionate corrective action within a reasonable period set by the authority.

If the operator does not act in time or non-compliance persists, the authority must take appropriate provisional measures to prohibit or restrict availability, withdraw the product, or recall it. Article 71 separately covers formal non-compliance with administrative requirements in the delegated act: the authority first requires the operator to end it, then restricts, prohibits, recalls, or withdraws the product if it persists.

The DPP Registry became operational on 20 July 2026. For an imported product covered by an applicable ESPR delegated act, Article 15(1) now requires the person seeking release for free circulation to provide or make available the unique registration identifier generated after registry upload.

The separate automated customs match applies only when the registry is interconnected with EU customs systems. Article 15 gives the Commission four years from the registry implementing act's entry into force to make that interconnection operational. Once it operates, customs may release the product only after the identifier and commodity code match registry data. Release still is not proof of compliance with ESPR or other EU law.

Do not publish national fine amounts without the current Member State legislation and enforcement context. The EU regulations establish national penalty duties, not country-by-country monetary caps.

Do not imply that every product has the same trigger. An ESPR assessment must name the product group, applicable delegated act and date, breached requirement, operator role, Member State rule, and enforcement route. A battery assessment must instead apply the Batteries Regulation and the relevant national battery-penalty rule.