Do I need a DPP if I'm a US or UK brand selling into the EU?

Yes — if you place in-scope products on the EU market (including through e-commerce), the ESPR applies to you regardless of where your business is registered. The regulation covers any product sold to EU consumers, so US and UK Shopify merchants exporting to the EU are directly affected once delegated acts for their product category come into force.

When does the DPP requirement actually apply to me?

It depends on your product category. The first mandatory DPP is for EV, light-means-of-transport, and industrial batteries (over 2 kWh), which becomes enforceable on 18 February 2027. For textiles, the delegated act is expected to be adopted around 2027 with enforcement realistically starting late 2028 to mid-2029. Check the timeline section for the full schedule by category.

Is textiles the first product category to require a DPP?

No. Batteries are first. The battery DPP (for EV, light-means-of-transport, and industrial batteries over 2 kWh) becomes mandatory on 18 February 2027, ahead of textiles and all other ESPR categories. Textiles are a priority group but follow later — enforcement is expected late 2028 to mid-2029.

What is the EU DPP registry and who hosts the passport data?

The EU DPP registry (due 19 July 2026) is a pointer directory — it stores product identifiers and resolves them to the URL where the passport lives. It does not host the passport data itself. Your DPP data must be hosted by a compliant service (such as PassportBox), and the registry simply points there. Think of it like a DNS system: the registry resolves an ID to an address, and the address serves the actual information.

What data carrier technology is required?

ESPR Article 10 and Annex III mandate a QR code (ISO/IEC 18004) plus a unique product identifier (ISO/IEC 15459). The format must be interoperable and machine-readable. GS1 Digital Link is the industry-consensus implementation that satisfies these requirements, though the regulation is technology-neutral — you are not limited to GS1 as long as you meet the ISO standards.

What is ESPR and when did it come into force?

ESPR stands for the Ecodesign for Sustainable Products Regulation (EU 2024/1781). It is the EU umbrella regulation that replaces the old Ecodesign Directive and introduces Digital Product Passports across multiple product groups. It came into force on 18 July 2024. Specific DPP requirements for each product group are then set out in delegated acts adopted under ESPR.

Digital Product Passports & ESPR: the complete guide

What is a Digital Product Passport?

A Digital Product Passport (DPP) is a structured, machine-readable record that captures key sustainability, composition, and compliance information about a physical product. It travels with the product throughout its lifecycle — from manufacturing through sale, repair, and end-of-life — and is accessible to consumers, regulators, and supply-chain partners via a data carrier (typically a QR code) printed on the product or label.

The DPP is not a document or a PDF. It is a digital record hosted at a URL that the data carrier resolves to, structured to meet machine-readability requirements set out in EU regulation. When a consumer scans a QR on your product, they are reading data served from a DPP host — not from the QR itself.

DPPs are designed to give buyers and authorities a single, trusted source of truth for product sustainability claims: recycled content, repairability, materials, supplier certifications, and more. For brands, a well-maintained DPP reduces compliance burden and can become a differentiation tool.

What is ESPR?

ESPR stands for the Ecodesign for Sustainable Products Regulation (EU 2024/1781). It came into force on 18 July 2024 and replaces the older Ecodesign Directive, which had focused narrowly on energy efficiency. ESPR is substantially broader: it sets out sustainability performance requirements — durability, repairability, recyclability, carbon footprint, chemical safety — and introduces the Digital Product Passport as the primary mechanism for communicating that information.

ESPR itself is a framework regulation. Specific DPP requirements for each product category are established through delegated acts — secondary legislation that the European Commission adopts after consultation with industry and technical bodies. This means the DPP timeline is staggered: batteries come first, then other groups follow according to the ESPR Working Plan 2025–2030 (adopted 16 April 2025).

ESPR applies to most physical products sold on the EU market, with some exceptions (food, feed, medicinal products, living plants, and a handful of others). If you sell physical goods into the EU, ESPR almost certainly covers at least part of your range.

Who is affected?

ESPR applies to any economic operator placing in-scope products on the EU market. This includes manufacturers, importers, and authorised representatives — regardless of where the business is based. A Shopify brand headquartered in New York or London that ships to EU customers is directly in scope once a delegated act covers their product category.

Concretely, if you:

Sell physical products (apparel, accessories, electronics, furniture, etc.) to EU buyers
Ship directly to EU consumers via your Shopify store or a marketplace
Use third-party logistics partners who deliver into the EU
Sell wholesale to EU distributors or retailers

… then at minimum you will need to monitor the delegated acts for your product categories and plan for DPP compliance before the relevant enforcement date. US and UK merchants cannot rely on geographic distance from Brussels — the obligation attaches to the act of placing a product on the EU market.

SMBs are not exempt. ESPR does not include a general SMB carve-out, though the Commission has stated it will consider proportionality in specific delegated acts. Planning early is far lower risk than waiting for final rules.

Compliance timeline

Key dates, ordered chronologically. The battery DPP is the first mandatory DPP to come into force — textiles and other categories follow later.

18 Jul 2024ESPR in force (EU 2024/1781). The framework regulation takes effect; product-specific delegated acts begin drafting.
16 Apr 2025ESPR Working Plan 2025–2030 adopted. Sets indicative delegated-act adoption years for six priority groups (see below).
1 Jan 2026CBAM definitive period begins. Carbon border adjustment mechanism financial obligations start; carbon-intensive imports must track embedded emissions. Certificate purchase opens February 2027.
19 Jul 2026EU DPP registry due. The Commission must launch the central registry — a pointer/directory that resolves a product identifier to the URL where the passport data is hosted. Passport data lives with a compliant DPP host (not in the registry itself).
18 Feb 2027Battery DPP mandatory — the first mandatory DPP. Applies to EV batteries, light-means-of-transport batteries, and industrial batteries over 2 kWh. Portable batteries are excluded at this stage.
2026–2029
ESPR Working Plan — indicative delegated-act adoption years:
- Iron & steel — 2026
- Textiles — 2027 (enforcement realistically late 2028–mid 2029; follows batteries)
- Tyres — 2027
- Aluminium — 2027
- Furniture — 2028
- Mattresses — 2029

Note: delegated-act adoption years are indicative. Enforcement begins after adoption, plus transition periods set in each act. Textiles brands should plan for enforcement no earlier than late 2028 but should not wait until then to prepare.

Required data and data carrier

The specific data fields required in a DPP vary by product category (set out in each delegated act), but ESPR establishes common principles. Typical data points include:

Product identity: name, model, SKU, GTIN or equivalent unique identifier
Material composition and recycled-content percentages
Supplier and manufacturer information
Repairability and spare-parts availability
Carbon footprint and lifecycle data where required
Sustainability certifications and declarations of conformity
End-of-life instructions (disassembly, recycling)
Hazardous substance content (where applicable)

Data carrier requirements (ESPR Art. 10, Annex III): every DPP must be accessible via a QR code conforming to ISO/IEC 18004 alongside a unique product identifier conforming to ISO/IEC 15459. The regulation is technology-neutral — the QR can be supplemented by NFC, RFID, or other carriers — but the QR + unique ID combination is mandatory.

GS1 Digital Link is the industry-consensus implementation. It embeds a URL in the QR that carries the GTIN and batch/serial qualifiers, and resolves to the DPP endpoint. GS1 Digital Link satisfies both the ISO/IEC 18004 and ISO/IEC 15459 requirements. It is not the only compliant approach, but it is the standard most supply chains and retailers are converging on.

In practice: you will print a QR on your product or its label. When scanned, the QR resolves to a URL served by a DPP host. The page at that URL must return structured, machine-readable data in a format accepted by the EU registry.

How PassportBox helps

PassportBox is a DPP-hosting and management platform built for Shopify brands. Here is what it does in the context of ESPR compliance:

Hosts your passport data — PassportBox serves the structured product data that the EU DPP registry will point to. You do not need to build or maintain a custom data endpoint.
Shopify-native import — Pull product data directly from your Shopify catalogue to pre-populate passport drafts, reducing manual data entry.
QR label generation — Generate print-ready QR labels that link to your hosted passports, ready to apply to products or packaging.
Compliance tracking — Monitor completion status and flag missing data fields before your relevant delegated act comes into force.
SMB pricing — Tiered plans designed for small and mid-sized brands, not just enterprise manufacturers.

PassportBox does not provide legal advice or guarantee regulatory compliance — you remain responsible for ensuring your data meets the requirements of the specific delegated act that applies to your product category. But it removes the infrastructure burden so you can focus on the data itself.

Frequently asked questions

Do I need a DPP if I'm a US or UK brand selling into the EU?: Yes — if you place in-scope products on the EU market (including through e-commerce), the ESPR applies to you regardless of where your business is registered. The regulation covers any product sold to EU consumers, so US and UK Shopify merchants exporting to the EU are directly affected once delegated acts for their product category come into force.
When does the DPP requirement actually apply to me?: It depends on your product category. The first mandatory DPP is for EV, light-means-of-transport, and industrial batteries (over 2 kWh), which becomes enforceable on 18 February 2027. For textiles, the delegated act is expected to be adopted around 2027 with enforcement realistically starting late 2028 to mid-2029. Check the timeline section for the full schedule by category.
Is textiles the first product category to require a DPP?: No. Batteries are first. The battery DPP (for EV, light-means-of-transport, and industrial batteries over 2 kWh) becomes mandatory on 18 February 2027, ahead of textiles and all other ESPR categories. Textiles are a priority group but follow later — enforcement is expected late 2028 to mid-2029.
What is the EU DPP registry and who hosts the passport data?: The EU DPP registry (due 19 July 2026) is a pointer directory — it stores product identifiers and resolves them to the URL where the passport lives. It does not host the passport data itself. Your DPP data must be hosted by a compliant service (such as PassportBox), and the registry simply points there. Think of it like a DNS system: the registry resolves an ID to an address, and the address serves the actual information.
What data carrier technology is required?: ESPR Article 10 and Annex III mandate a QR code (ISO/IEC 18004) plus a unique product identifier (ISO/IEC 15459). The format must be interoperable and machine-readable. GS1 Digital Link is the industry-consensus implementation that satisfies these requirements, though the regulation is technology-neutral — you are not limited to GS1 as long as you meet the ISO standards.
What is ESPR and when did it come into force?: ESPR stands for the Ecodesign for Sustainable Products Regulation (EU 2024/1781). It is the EU umbrella regulation that replaces the old Ecodesign Directive and introduces Digital Product Passports across multiple product groups. It came into force on 18 July 2024. Specific DPP requirements for each product group are then set out in delegated acts adopted under ESPR.

This is general information, not legal advice. Regulatory requirements and dates are evolving — verify against official EU sources. europa.eu