ESPRDPP workflowEU

ESPR digital product passport information mapping workflow

Turn product-group DPP requirements into a traceable inventory of data elements, source systems, access levels, identifiers, carrier choices, and evidence records.

Use this workflow before selecting a DPP provider, changing labels, or asking suppliers for data, so implementation stays tied to an adopted delegated act or a validated use case.

Author
Sorena AI
Published
May 9, 2026
Updated
Oct 15, 2026
Overview

Start an ESPR mapping workflow with the applicable delegated act, not a generic passport template. Article 9 requires product-group rules to specify DPP data, carrier, layout, granularity, pre-contract access, access actors, update actors, update arrangements, and availability period. Articles 10 and 11 add the persistent product identifier, standards-based carrier and identifier rules, open interoperable data, controlled access, a service-provider back-up copy, security, privacy, and continuity. Keep unresolved fields open until binding product-group rules settle them.

Section 1

Start with the delegated act and build the DPP requirement inventory

Create one inventory row for each DPP requirement in the applicable delegated act. Do not begin by copying a battery, textile, electronics, or pilot-project field list into another product group unless the legal source or a documented use case supports that field.

For each row, capture the delegated-act clause, the data element name in business language, whether the field is mandatory or optional, whether it is tied to an ecodesign information requirement or another Union-law data item, and whether the delegated act places the DPP at model, batch, or item level.

  • Record the source delegated act, article or annex reference, short source quote, and whether the text is binding law, standardization guidance, or project guidance.
  • Classify the field as product identity, operator identity, facility identity, commodity code, conformity evidence, user information, warning or safety information, service-provider reference, ecodesign information, or voluntary-label information only when the source supports that classification.
  • Mark unresolved rows as pending delegated-act detail when the source does not yet define the product-group field, granularity, actor, timing, or access level.
  • Keep separate columns for public consumer-facing data, authority verification data, circular-economy operator data, and supplier-only evidence so access questions are visible early.
Section 2

Map each DPP field to source systems and supplier evidence

After the legal inventory exists, map each field to the system or actor that can produce and maintain the value. Separate system-of-record data from evidence: enterprise resource planning (ERP), product information management (PIM), product lifecycle management (PLM) systems, a quality system, lab report, supplier declaration, conformity file, or service-provider back-up reference may each support different fields.

CIRPASS use-case work connects DPP value to real data gaps in repair, reuse, refurbishment, resale, sorting, and recycling. Each mapped field should state the operational use case it serves and the evidence needed to validate it; an unsupported sustainability claim does neither.

  • Assign one accountable source owner for each data element and one evidence owner for the record that proves the value is current.
  • Capture supplier input requirements separately from internal values, including who can update the DPP and which update path the delegated act or architecture allows.
  • Tag values that require laboratory, conformity, lifecycle, chain-of-custody, repairability, or recycling evidence before publication.
  • Use a blocked status when the data source exists but the field has no validated method, no supplier commitment, or no cited basis for publication.
Recommended next step

Build a DPP data map before implementation

This workflow helps connect delegated-act requirements, source systems, supplier evidence, access rules, identifiers, and carrier decisions before selecting tooling or publishing DPP data.

Section 3

Decide access levels before publishing the passport

Access mapping should happen before implementation. ESPR requires delegated acts to identify which actors have access to which DPP data and who may create or update it; CIRPASS architecture guidance describes a resolver as a web service that redirects an identifier request to the relevant data. It shows how resolvers, typed links, credentials, and role-based or usage-control mechanisms can support differentiated access.

For each field, classify the intended audience and the source for access. Do not assume every consumer receives every field. The delegated act decides which actors can access which data; market surveillance and customs authorities need their specified verification paths, while repairers, refurbishers, remanufacturers, recyclers, suppliers, and DPP service providers may receive different access or update rights.

  • Do not expose commercially sensitive supplier, facility, or process evidence unless the delegated act, access rule, or validated use case requires it.
  • Record whether the field is public HTML content, machine-readable data, restricted API data, authority-accessible data, or non-public evidence behind a published value.
  • Document identity and credential assumptions for restricted access instead of relying on an informal password or provider-specific portal role.
  • Check GDPR impact before storing any customer personal data, because ESPR Article 10 excludes customer personal data from the DPP without explicit consent under GDPR.
Section 4

Resolve identifier, carrier, and resolver choices with the data model

The identifier and carrier decision is part of information mapping because it controls which product instance the data describes. ESPR requires the DPP to connect through a to a persistent unique product identifier, while Annex III lists possible identity and compliance elements such as product, operator, facility, commodity, conformity, importer, responsible-economic-operator, and service-provider references.

CEN-CENELEC workshop guidance recommends settling model, batch, or item granularity before selecting identifiers and carriers. That guidance is not a binding product rule. CIRPASS describes web-address-based identifiers (HTTP URIs) and decentralized identifiers (DIDs) that can connect a tangible product to DPP data, but the applicable delegated act and adopted technical rules control the legal implementation.

  • Choose model, batch, or item granularity from the delegated act and product-use case before deciding the identifier format.
  • Record whether the carrier is on the product, packaging, or accompanying documentation as specified by the delegated act.
  • Compare QR code, DataMatrix, contactless NFC tags, RAIN RFID radio tags, or other technical options against reading context, distance, lifespan, data capacity, label space, durability, and consumer-device accessibility; select only an option permitted by the applicable rule.
  • Map resolver behavior for default public access, restricted actor access, backup or service-provider access, and failure paths when the first resolver is unavailable.
Section 5

Validate values and keep evidence with the published DPP map

Set validation rules for every mapped field. A source-system value is not ready for publication until the organization defines its freshness, completeness, source quality, evidence file, update trigger, and withdrawal or correction rule.

Maintain a DPP mapping register showing each field, source, owner, access level, identifier relationship, carrier or resolver dependency, evidence record, validation status, unresolved legal or standards dependency, and next review trigger.

Implementing Regulation (EU) 2026/1778 applies from 6 August 2026 to registry operations for products whose Union rule requires a DPP and registration. The responsible verified economic operator registers the passport at the required model, batch, or item level. Keep the unique registration identifier, submitted identifiers and commodity code where applicable, version timestamps, and generated proof of registration with the map. Automated semantic, identifier, and completeness checks do not prove substantive product compliance.

  • Validate that each published value is accurate, complete, up to date, and linked to the product model, batch, or item specified by the delegated act.
  • Retain evidence for supplier inputs, conformity documentation, technical documentation, user information, safety information, ecodesign data, voluntary-label claims, and the service-provider back-up copy required by Article 10(4) when the product has a DPP.
  • Retain registry evidence separately from the public passport content; a generated proof of registration remains available for 90 calendar days and can be regenerated.
  • Retest the map when a delegated act changes, a supplier changes a source value, a carrier or resolver changes, a product is updated, or an authority/customer-facing view changes.
  • Block publication of dates, product-group duties, penalties, or final field sets when the source does not define them.
Primary sources

References and citations

data.europa.eu5 citations
Referenced sections
  • Binding source for DPP requirements in Articles 9 and 10 and for possible DPP data categories in Annex III.
  • Article 9 grounds the inventory columns because delegated acts must specify DPP data, carriers, layout, model-batch-item level, access actors, update actors, update arrangements, and availability period.
  • Article 10 grounds access-level mapping by requiring product-group access rights and prohibiting customer personal data in the DPP without explicit consent under GDPR.
Show 2 more
  • Article 10 and Annex III ground the mapping of persistent product identifiers, data carriers, operator and facility identifiers, commodity codes, conformity documentation, and backup-service-provider references.
  • ESPR grounds the validation standard because Article 9 requires DPP data to be accurate, complete, and up to date and Annex III identifies evidence-like information that delegated acts may require.
"data in the digital product passport shall be accurate, complete and up to date"
More quoted passages
"access to data included in the digital product passport shall be regulated"
"connected through a data carrier to a persistent unique product identifier"
"accurate, complete and up to date"
doi.org4 citations
Referenced sections
  • Architecture source for product-identifier-centered DPP design, HTTP URI and DID options, resolvers, access control, data repositories, and legacy-system integration.
  • The architecture report supports mapping DPP data from ERP, PIM, PLM, repositories, APIs, and graph-based transformations into an interoperable passport layer.
  • CIRPASS architecture guidance supports resolver-based routing, role-sensitive responses, and usage-control metadata for restricted DPP information.
Show 1 more
  • CIRPASS architecture guidance grounds the HTTP URI, DID, resolver, typed-link, fallback, and interoperability considerations for connecting identifiers to DPP data.
"centred around the product identifier"
More quoted passages
"substantial part of the DPP data will be extracted from Enterprise Resource Planning"
"the resolver is a key node"
"two parallel, yet interoperable architectures"
cencenelec.eu3 citations
Referenced sections
  • Guidance source for DPP designer decisions on model, batch, and item level, identifiers, data carriers, and practical implementation tradeoffs.
  • CEN-CENELEC guidance supports using product-group delegated acts as the starting point and distinguishing model, batch, and item passports when mapping fields.
  • CEN-CENELEC guidance grounds the practical comparison of model, batch, and item DPPs and of carrier options including QR codes, DataMatrix, NFC, RAIN RFID, and BLE.
"options available in configuring a DPP"
More quoted passages
"legally required DPP content requirements under ESPR may vary depending on the product group"
"first decision that should be made is if the Digital Product Passport is implemented"
doi.org3 citations
Referenced sections
  • Use-case source for connecting DPP data mapping to practical circular-economy data gaps and stakeholder needs.
  • CIRPASS D2.2 grounds the need to map DPP data to concrete circular-economy use cases and observed data gaps rather than treating the passport as a generic data dump.
  • CIRPASS use-case analysis supports retaining validation evidence for fields that claim to unlock repair, reuse, resale, sorting, recycling, or compliance benefits.
"DPP use cases linked to specific circular economy actions"
More quoted passages
"reduce information asymmetry and foster trust"
"current data gaps occur"
data.europa.eu2 citations
Referenced sections
  • Binding source for registry verification, registration, evidence, versioning, and the limit of automated checks.
  • Binding source for operator verification, model-batch-item registration, identifiers, proof of registration, versioning, and the limit of automated registry checks.
Show all related guides (36)

ESPR delegated act intake by product group

A product-group intake checklist for ESPR delegated acts, covering product identification, DPP data, ecodesign requirements, conformity evidence, transition dates, and source limits.

ESPR delegated act intake workflow

A source-based intake workflow for ESPR delegated acts: trigger checks, product-group scope, requirement extraction, DPP impacts, release gates, owners, and evidence outputs.

ESPR delegated acts watchlist for product and DPP teams

Track the adopted ESPR 2025-2030 working plan, indicative delegated-act years, product scope, DPP dependencies, evidence owners, and unresolved legal details.

ESPR destruction of unsold goods: disclosure, ban scope, and records

Cited ESPR guide to unsold consumer product disclosure, destruction-ban scope, records, derogations, and national enforcement limits.

ESPR durability, repairability, and recyclability evidence

Build ESPR evidence for durability, repairability, and recyclability without inventing product-group tests before the applicable delegated act is known.

ESPR Ecodesign Evidence Checklist

Checklist for collecting ESPR ecodesign evidence from delegated acts, technical documentation, supplier substantiation, DPP mapping, standards, and market surveillance records.

ESPR ecodesign requirement types: performance, information, and DPP links

Source-cited guide to ESPR ecodesign requirement types, product parameters, delegated-act dependency, DPP links, and evidence implications.

ESPR FAQ: scope, delegated acts, DPP, unsold goods

Standalone ESPR FAQ answers on product scope, delegated acts, Digital Product Passports, unsold goods, product priorities, standards, surveillance, and source limits.

ESPR harmonised standards and common specifications

How ESPR uses harmonised standards, common specifications, and the six DPP standards cited in Decision (EU) 2026/1736.

ESPR Information Requirements to DPP Mapping

Map ESPR information requirements into Digital Product Passport data classes, source systems, access rules, carrier choices, validation checks, and evidence records.

ESPR Information Requirements, Labels, and Disclosure

Source-cited ESPR guide to delegated-act information requirements, product labels, digital product passport access, data carriers, and unsold-goods disclosure.

ESPR market surveillance technical documentation checklist

Source-cited ESPR checklist for technical documentation, conformity evidence, DPP records, and responses to market surveillance authority requests.

ESPR penalties and fines: Member State rules and evidence

ESPR penalties guide explaining Article 74, why fine amounts depend on Member State law, and which conformity and market-surveillance records matter.

ESPR Product Priorities and Delegated Acts Tracker

Track the ESPR 2025-2030 product priorities, indicative adoption years, delegated-act status, DPP dependencies, owners, and evidence.

ESPR requirements: delegated acts, ecodesign, DPP, and evidence

ESPR requirements explained as a framework for delegated acts, ecodesign performance and information rules, Digital Product Passports, unsold goods, technical documentation, and market surveillance.

ESPR Timeline: Fixed Dates and Delegated-Act Phasing

A cited ESPR timeline separating fixed framework milestones from product-specific application dates, DPP readiness, unsold-goods duties, surveillance, and evaluation.

ESPR unsold goods disclosure tracker

Track ESPR unsold-product disclosures under Regulation (EU) 2026/2 and destruction-ban derogations under Regulation (EU) 2026/296.

ESPR vs Batteries Regulation Comparison

Compare ESPR delegated-act planning with the Batteries Regulation product-specific regime, including DPP overlap, battery passport evidence, timing limits, and source boundaries.

ESPR vs Ecodesign Directive

Compare ESPR with the earlier Ecodesign Directive across scope, legal form, delegated acts, DPP requirements, unsold goods, transition rules, and evidence.

ESPR vs GPSR: Sustainability vs Product Safety

A scope-bounded comparison of ESPR sustainability and product-information requirements against GPSR product-safety context, with evidence and DPP reuse limits.

ESPR vs PPWR Comparison

Compare ESPR product ecodesign and Digital Product Passport duties with PPWR packaging design, labelling, conformity, producer-responsibility, and waste obligations.

ESPR vs REACH and RoHS Comparison

Compare ESPR ecodesign, sustainability, information, and digital product passport requirements with separately sourced REACH and RoHS substance-control context.

What ESPR is and why it matters

A source-cited explainer of the EU Ecodesign for Sustainable Products Regulation, including scope, delegated acts, DPPs, unsold goods, and enforcement limits.

ESPR delegated acts FAQ: product rules, DPP impact, and monitoring

Standalone FAQ on ESPR delegated acts, why product-group duties depend on them, what teams should monitor, and how they shape Digital Product Passport information.

ESPR destruction ban and unsold goods FAQ

What ESPR says about preventing destruction of unsold consumer products, annual disclosure, the Annex VII apparel and footwear ban, and cited derogation evidence.

ESPR market surveillance FAQ: evidence, DPP data, and authority requests

Standalone FAQ on ESPR market surveillance: technical documentation, conformity evidence, DPP data, authority response, delegated-act limits, and national penalties.

ESPR product priorities FAQ: working plan and delegated acts

Standalone FAQ on ESPR product priorities, the Commission working plan, delegated-act dependency, monitoring points, and limits of preliminary source material.

ESPR unsold goods disclosure FAQ

Standalone FAQ on the ESPR Article 24 duty to disclose discarded unsold consumer products, its relationship to the destruction ban, records, and source limits.

EU ESPR DPP obligations FAQ

Standalone FAQ on Digital Product Passport obligations under ESPR, covering delegated acts, identifiers, carriers, access rights, data governance, and supplier evidence limits.

Which products are in scope of the EU ESPR?

Standalone FAQ on ESPR product scope, excluded products, delegated-act dependency, working-plan monitoring, and the digital product passport link.