Digital Product Passport (DPP) 2026: EU, China & US Requirements + Implementation Guide

A digital product passport is a structured, machine-readable record of a physical product: what it is made of, where it came from, what its environmental footprint is, and how it can be repaired, reused or recycled. It is reached through a data carrier on the product itself, usually a QR code, and in the EU it becomes a condition of market access rather than a marketing feature.

This page tracks the state of play across the three regimes that matter for an exporting manufacturer, the EU, China and the United States, and what each of them actually requires today. The EU is the only one of the three with a hard legal deadline in force.

What is in force in 2026, and what is still pending: EU, China and US at a glance

Last checked: 4 September 2026. Since the previous check in July 2026 the picture has not moved on the statutory side: the Digital Product Passport Registry under the Ecodesign for Sustainable Products Regulation (ESPR) opened on 20 July 2026, and batteries remain the only product group with a fixed date written into law. Every other date below tracks the Commission working plan, not adopted legislation, and will move if a delegated act slips.

I have covered this in more depth here: Ten Climate Tech Niches Under €1 Billion and the EU Rules Behind Them.

Two dates on the standards side are worth keeping in view because they decide what a passport will look like technically rather than when it is due. The Commission's battery due-diligence guidelines were due by 26 July 2026, with the due diligence obligations themselves postponed to 18 August 2027, and shape the responsible-sourcing layer of every battery passport. ISO/IEC Joint Technical Committee 5 on digital product passports was established in April 2026 as the global standards venue, with substantive deliverables expected from 2028, which means the international standard will arrive after the first EU obligations, not before them.

I have covered this in more depth here: China's Corporate Sustainability Disclosure Standards (CSDS): What Applies from 30 April 2026.

The practical reading of this table: there is no product obligation you can miss in the next twelve months unless you sell batteries. That is precisely why the window is worth using. No product-specific delegated act is in force, so the requirements are not yet legally pinned down, and building the underlying data layer now costs less than retrofitting it against a published schema under deadline pressure.

EU, China and US: how the three digital product passport regimes diverge

The three blocs will not converge into one clean global passport standard, and planning as if they will is the most expensive mistake I see. They differ not in detail but in what the passport is for: a market-access gate in the EU, an instrument of data sovereignty and export facilitation in China, a commercial requirement passed down the supply chain in the US.

China's approach, led by the China Academy of Information and Communications Technology, is the part of this picture that gets least attention outside the country and matters most for anyone with Chinese suppliers. It pairs a product-level carbon credentialing initiative aimed at reducing trade friction for Chinese exports with a preference for state-operated infrastructure. The strategic logic is not compliance with Brussels but an alternative reference point to it, with cross-border data flows kept under Chinese protocols and the whole effort tied to the 2030 carbon peak and 2060 neutrality goals.

That creates a conflict a single global platform cannot design away. EU data protection rules push toward European storage, while China's Cybersecurity Law requires Chinese storage for certain data categories, and a passport carrying supplier identities and material origins sits squarely in that overlap. Verification reciprocity is equally unresolved: nobody has yet confirmed that EU authorities will accept Chinese third-party verifiers, or that Chinese customs will recognise EU-issued credentials.

The United States needs less explanation and is easy to underestimate. There is no federal mandate and none in prospect, but American manufacturers selling into Europe implement full EU compliance for those product lines anyway, and their tier-1 customers pass the same requirements down. This is the Brussels Effect working through purchase orders rather than statute, which is why "we do not sell into the EU" is a weak reason to wait, your customer's customer probably does.

The practical conclusion for a product line sold in all three markets: treat the EU schema as the baseline because it is the strictest and the only one legally hard-wired, then map deltas for China rather than building a parallel data model. Waiting for a harmonised global standard that has no political sponsor only burns the lead time you have now. Understanding broader EU Taxonomy simplification measures helps put the pace of European regulatory change in context.

Strategic Decision Framework: Global vs Regional Architecture

Multinational manufacturers face critical architectural choices shaping operational capabilities for 5-10 years. Wrong decisions create costly legacy digital systems, compliance gaps, or competitive disadvantages.

Option 1: Global Unified Digital Product Passport Platform

A single technology platform and data architecture serving all markets through regional configuration represents the most streamlined long-term approach.

When This Makes Sense:

Product portfolios remaining relatively homogeneous across markets justify unified infrastructure. Companies with resources for significant upfront technology investment and high confidence in eventual global convergence around EU-compatible standards benefit most.

Advantages:

Long-term cost efficiency emerges through economies of scale in platform licensing and maintenance. Data consistency ensures single source of truth across operations. Supplier simplicity allows vendors providing comprehensive information once in standardised format. Cross-market analytics enable portfolio-level sustainability performance insights.

Implementation Timeline:

Phase 1 (2025) focuses on platform selection and EU compliance, establishing foundation for entire value chain integration. Phase 2 (2026-2027) extends platform to China operations with localisation. Phase 3 (2028+) drives global supplier adoption through consolidated requirements.

Understanding product carbon footprint and lifecycle assessment methodologies proves essential for accurate DPP data generation across platforms.

Option 2: Regional Systems with Data Federation

Separate platforms or instances for major regions (EU, China, Americas, Asia-Pacific) with data exchange protocols enable cross-border information sharing where required.

When This Makes Sense:

Product portfolios differing significantly by region, substantial regional IT autonomy, or high uncertainty about global convergence timelines favour federated approaches. Existing regional technology infrastructure proves difficult to integrate centrally.

Advantages:

Flexibility allows each region optimising for local data requirements without compromise. Lower initial costs through phased investment matching actual regulatory timelines. Risk distribution contains platform failures or regulatory misalignments regionally.

Implementation Approach:

Phase 1 establishes EU priority system as reference architecture. Phase 2 evaluates China system selection based on regulatory clarity. Phase 3 deploys lighter-weight solutions for markets without strict mandates. Phase 4 assesses consolidation business case as global standards emerge.

Option 3: Hybrid Core-Plus Architecture

Core global data repository with lightweight access layer plus regional modules handling jurisdiction-specific requirements balances standardisation benefits with regional flexibility.

Implementation Structure:

Core global repository (2025-2026) maintains product master data, supplier information, base environmental data, and common metadata. Regional modules add EU-specific ESRS E1 detailed data, Chinese state system integration, US sector-specific requirements, and Asia-Pacific market attributes as needed.

Decision Matrix:

Product portfolio consistency, regulatory convergence confidence, IT governance capability, investment budget, and speed-to-compliance requirements determine optimal architectural choice. Most multinational manufacturers find hybrid approaches offering best risk-adjusted returns.

Supplier Engagement and Technology Integration: getting data and systems ready

The hard part of a digital product passport is never the QR code, it is the data supply chain behind it. The product, supplier and material data a passport demands usually sits in fragmented ERP, PLM and supplier spreadsheets that were never built to talk to each other, and buying a passport platform before that foundation is fixed just automates the gaps. Start with the data model, not the front end.

The single most useful exercise before any platform decision is a field-level inventory: sorting the data points a passport will need into what already exists somewhere in the company and what has to be collected for the first time. That split, not the software licence, is the real cost driver, and it is rarely as bad as feared on the left column or as easy as hoped on the right.

The right-hand column is also the column that propagates downstream. Those are the fields your customers will put into their own specifications, which is why tier-1 suppliers of automotive and electronics manufacturers are already being asked for them ahead of any legal deadline. Applying recognised lifecycle assessment methodologies and standards to those fields is what makes the numbers defensible rather than merely present.

Supplier readiness differs sharply by region. European suppliers generally know what is coming and already produce environmental data for REACH and RoHS. Large Chinese suppliers are moving quickly, pushed by both domestic programmes and EU export requirements, while Chinese SMEs lag. Southeast Asian suppliers outside export-dependent sectors often have neither awareness nor the digital infrastructure, and intermediaries sit between you and the actual producer. Segment accordingly: strategic suppliers get direct engagement and joint pilots, operational suppliers get templates and group training with contractual data obligations, and the long tail gets self-service resources plus industry-average data where nothing supplier-specific is available.

The carrier and registry decision is smaller than it looks. The ESPR allows QR codes, RFID and NFC. QR codes are cheap to print and readable with any phone, which makes them the default; RFID and NFC earn their cost only where contactless or automated scanning is already part of the process, as in logistics or high-value items. More consequential is where the data lives, and here the architecture is fixed by the regulation rather than by your vendor: the carrier holds only a static identifier, the EU Central DPP Registry resolves that identifier, and the passport content itself stays on the manufacturer's approved data host. You keep control of your data and you keep legal responsibility for it. There is no central EU database to upload into.

That also answers the question people ask most often about scanning in the field. Because the identifier resolves through the registry to a hosted record, retrieving the current passport needs connectivity at the point of reading, and the printed carrier alone will not display the data offline.

On the system side, four integration points carry most of the load: PLM for bills of materials and specifications, ERP for supplier master data, manufacturing execution systems for production data behind carbon footprints, and quality management for verification records. Whether the passport platform acts as master, as an aggregator pulling from source systems on demand, or as a cached hybrid, matters less than deciding it once and enforcing data ownership per field. A workable sequence is a three-month mapping and design phase, a pilot on one product line to prove the flows end to end, then extension to the wider portfolio, with automated data-quality checks added rather than bolted on afterwards. Well-structured ESG APIs and sustainability data management make the difference between a passport that updates itself and one that a person maintains by hand. Where a category deadline already exists, the EU Battery Passport is the most instructive template, because it is the only one whose data requirements are fully settled in law.

Frequently Asked Questions