What Is a Digital Product Passport in Fashion?

TL;DR: A Digital Product Passport (DPP) is a mandatory digital identity for products sold in the EU, introduced under the Ecodesign for Sustainable Products Regulation (ESPR). For fashion and textile brands, DPPs must contain 49 structured data points — covering materials, environmental footprint, and supplier details — accessible via QR code, NFC, or RFID. Enforcement is expected between late 2028 and mid-2029.

Every season, fashion brands make hundreds of product decisions: fiber choices, factory locations, chemical inputs, recycled content percentages. Most of that information lives in disconnected spreadsheets, supplier emails, and PLM systems — known internally, but invisible to anyone outside the organization.

That is exactly what the Digital Product Passport is designed to change.

Under the EU's Ecodesign for Sustainable Products Regulation (ESPR), fashion and textile brands selling on the EU market will be required to attach a structured, machine-readable DPP to every product. Not a sustainability page on their website. Not a PDF fact sheet. A live, scannable, auditable data record that follows the product throughout its lifecycle — from point of sale through resale and end of life.

For Heads of Sustainability, COOs, Compliance Managers, and Supply Chain Directors at fashion brands, this is not a distant regulatory footnote. The textile delegated act is expected by end of 2027, with mandatory compliance for the first impacted collections arriving as early as Spring/Summer 2028. The data infrastructure required to comply takes months — sometimes years — to build.

This article explains what a Digital Product Passport actually is, what data it must contain, how the regulatory framework works, and what getting started looks like in practice.

What Is a Digital Product Passport, Exactly?

A Digital Product Passport is a mandatory digital identity for products placed on the EU market. Each passport is attached to a physical product via a data carrier — a QR code, NFC tag, or RFID chip — and contains structured, standardized information covering the product's full lifecycle.

The DPP must be readable at the point of sale, both online and in-store, and must remain accessible throughout the product's life — including during resale, repair, and end-of-life processing. That last point matters more than it might seem. A DPP is not a static label. It is a living data record that regulators, recyclers, retailers, and consumers can access at any stage.

The DPP operates as two interconnected layers. The data layer defines what information the passport contains: material composition, environmental footprint, recycled content, supplier information, and compliance documentation. The system layer defines how that information is stored, transmitted, and accessed: unique product identifiers, API connections to the EU registry, role-based access rights, and long-term data hosting requirements.

Both layers matter. Without a strong data foundation, sustainability information cannot become legally compliant DPP data. Without the right technical infrastructure, that data cannot be verified, accessed, or trusted.

Why Did the EU Create the ESPR — and Where Does Fashion Fit?

The ESPR — Ecodesign for Sustainable Products Regulation (EU) 2024/1781 — is a framework law designed to make products sold in the EU more durable, repairable, recyclable, and transparent. It does not prescribe specific requirements directly. Instead, it establishes a mechanism for issuing delegated acts, each targeting a specific product category with technical requirements tailored to that sector.

Textiles and clothing were identified as a priority sector in the European Commission's 2025–2030 ESPR working plan. The fashion industry's environmental footprint — high water consumption, significant carbon emissions, low recycling rates — made it an early target. The EU's 2022 Strategy for Sustainable and Circular Textiles set the direction; the ESPR provides the enforcement mechanism.

What makes the DPP different from previous sustainability reporting requirements is its scope and structure. Earlier frameworks asked brands to report at the company level — annual sustainability reports, CDP submissions, CSRD disclosures. The DPP requires product-level data, structured to a technical standard, machine-readable, and publicly accessible. Sustainability becomes embedded in the product itself, not described in a PDF published once a year.

This shift from narrative disclosure to structured, product-level data is the most significant regulatory change fashion brands have faced in decades.

What Data Does a Fashion DPP Actually Contain?

On May 13, 2026, the Joint Research Centre (JRC) published the first complete specification of DPP content for textile apparel under the ESPR — 49 data points organized into four categories. This specification represents the most detailed regulatory signal to date, even though the binding requirements will be set by the textile delegated act expected by end of 2027.

The Four Data Categories

Product identification covers the technical identifiers that link the passport to a specific product: GTIN, model and batch IDs, HS/TARIC customs codes, and the relevant ESPR and PEFCR product categories.

Producer identification covers the entities responsible for the product: manufacturer name, address, and contact; importer information where the manufacturer sits outside the EU; and facility-level identifiers using GLN or EORI codes.

Product information is the largest category and the hardest to compile. It includes:

• Fiber composition (all fibers above 1% by weight)

• Durability and recyclability scores

• Recycled content percentage and type of recycling

• Substances of concern — name and concentration

• Carbon and environmental footprint

• Care and warranty information

Compliance documentation requires either a third-party conformity certificate or a self-declaration accompanied by calculation parameters for regulatory verification.

The JRC specification covers 10 apparel categories drawn from the EU PEF methodology: t-shirts, shirts, sweaters, jackets, pants, dresses, leggings and socks, underwear, swimwear, and textile accessories. Workwear and sportswear are included. Smart textiles, PPE, medical devices, and intermediate products such as yarns and fabrics are excluded.

Who Can See What? Understanding Tiered Access

DPP data is not uniformly public. The specification establishes three access tiers:

Public data — visible to consumers at point of sale — includes product and batch identifiers, material composition, durability and recyclability scores, recycled content, substances of concern by name and concentration, and environmental performance class.

Authorities-only data includes operator contact details, conformity documentation, and footprint calculation parameters.

Legitimate-interest data — accessible to recyclers, repair operators, and other supply chain actors — covers substance locations, end-of-life data, and absolute environmental footprint values.

The absolute carbon footprint stays protected; only its performance class is public. This design deliberately balances consumer transparency with protection of commercially sensitive supply chain information.

What Granularity Is Required?

The minimum data granularity under the current specification is the production batch, not the individual item. The batch ID is mandatory. Producer, facility, and substances-of-concern data sit at batch level, while most product characteristics are recorded at model level. Item-level tracking remains voluntary — a practical accommodation for brands managing large-volume production.

How Are Brands Expected to Prove Compliance?

The JRC specification establishes two compliance pathways.

Scenario A: The brand self-declares and backs that declaration with third-party certification. The passport carries only the certificate reference.

Scenario B: The brand self-declares and provides calculation parameters and a technical file, kept under restricted access for regulatory verification.

The choice between these two scenarios has significant implications for workflow and cost. Scenario A requires an investment in external certification but reduces the burden of internal data documentation. Scenario B keeps more control in-house but demands a robust, auditable data infrastructure capable of satisfying regulatory review.

Either way, the underlying requirement is the same: data must be traceable, structured, and verifiable. Brands that cannot demonstrate the provenance of their compliance claims face real exposure — market withdrawal, financial penalties, and reputational damage that extends beyond the EU market.

When Does the DPP Become Mandatory for Fashion Brands?

The framework is being built now. Key milestones to plan around, based on information current as of mid-2026:

• May 2026: The first six DPP technical standards were published by CEN/CENELEC Joint Technical Committee 24 under Mandate M/604, covering identity, physical carriers, APIs, and data architecture.

• May 13, 2026: The JRC published the first complete DPP content specification — 49 data points for textile apparel.

• June 26, 2026: The public consultation on DPP content closed, marking the last significant window for industry input before the Commission moves to drafting.

• August 2026: The final two technical standards (covering security and trust) were expected to be published.

• End of 2027: The textile delegated act is expected, establishing mandatory DPP content requirements in law.

• End of 2028 to mid-2029: The DPP becomes enforceable for priority textile sectors. The first impacted collection is Spring/Summer 2028.

• 2030: The DPP scope is expected to extend to footwear, leather goods, and additional product categories.

Once the delegated act enters into force, member states have up to 18 months to transpose it into national law. Brands should plan for operational compliance by end of 2028 at the absolute latest.

That timeline sounds distant. It is not. Supplier data collection, system integration, and LCA calculation at catalog scale take months to get right. Brands that treat 2028 as the start date — rather than the end date — will be scrambling.

Why Does This Matter Beyond Compliance?

The business case for DPP readiness extends well beyond avoiding penalties.

Greenwashing liability. The Green Claims Directive — running in parallel with ESPR — gives EU regulators direct authority to pursue brands making unverifiable sustainability claims. A brand with DPP-verified product data is significantly less exposed than one relying on marketing copy. Structured, auditable data is both a compliance requirement and a legal shield.

Retail and procurement requirements. Retailers sourcing from fashion brands are increasingly requiring DPP readiness as a supplier qualification condition. Early compliance converts a regulatory burden into a commercial advantage — particularly as procurement teams in the EU begin building DPP status into vendor scorecards.

Consumer trust at point of sale. A QR code on a garment is a direct communication channel between the brand and the consumer — one that works after the sale, requires no additional media spend, and reaches exactly the buyers who care most about product provenance. For premium brands, DPP-verified claims about material quality, ethical sourcing, and environmental performance can justify price positioning in ways that unverifiable marketing language cannot.

Second-hand and resale markets. Digital product data enables authenticated resale. As circular economy platforms grow in Europe, brands with structured product passports gain access to verified secondary market channels that competitors without DPP infrastructure simply cannot enter.

How Do Fashion Brands Get Started with DPP Readiness?

The most common finding when brands begin a DPP readiness audit is this: most of the required data already exists somewhere in the organization. The problem is that it lives in disconnected systems — PLM software, supplier spreadsheets, EcoVadis profiles, sustainability reports — rather than in a structured, centralized, product-level format.

Getting started is less about collecting new data and more about organizing what you already have, identifying the gaps, and building the supplier data flows to fill them.

Step 1: Map your supply chain at batch level. The DPP requires data at production batch granularity. That means knowing which factory produced which run of which product — not just which supplier produces which category. Tier 1 mapping is the floor; Tiers 2 through 4 determine your ability to substantiate fiber composition, origin claims, and substance-of-concern declarations.

Step 2: Calculate environmental footprint at variant level. Carbon footprint per unit, calculated using EU PEF methodology, is a mandatory public data field. Manual LCA calculation is feasible for a handful of products; at catalog scale, it requires automated tooling. Methodology matters too — results need to be traceable and defensible under regulatory scrutiny.

Step 3: Structure data to the 49-point specification. Not all data fields are equally difficult. Product identifiers and fiber composition are typically available quickly. Substances of concern, recycled content verification, and environmental footprint calculations require deeper supply chain integration and, in some cases, third-party certification.

Step 4: Choose a compliance pathway. Decide whether Scenario A (third-party certification) or Scenario B (self-declaration with calculation parameters) better fits your organization's risk tolerance, existing certification relationships, and data infrastructure. This decision shapes the entire implementation approach.

Step 5: Publish and test. Generate DPPs for a pilot product — one SKU, one batch — and test the full data flow from supplier input through QR code to consumer-facing passport. A pilot surfaces data quality issues, system integration gaps, and supplier capability shortfalls before they become enforcement problems.

NormaTrack is built for exactly this workflow. The platform maps supply chains from Tier 1 to Tier 4, calculates LCA automatically per variant using ISO 14040 methodology, and publishes EU-compliant Digital Product Passports with QR codes at catalog scale — without consultants and without rebuilding existing systems. It integrates with 20+ tools including Shopify, SAP, EcoVadis, and Microsoft Dynamics, with setup measured in days rather than months.

Explore a live DPP sample to see what a compliant passport looks like in practice, or request a demo to walk through the platform using your own catalog data.

The DPP Is Compliance Infrastructure — Build It Once, Use It Everywhere

The Digital Product Passport is not a one-time reporting exercise. It is a data infrastructure investment that compounds over time. The supply chain mapping required for DPP compliance also powers LCA calculation, risk identification, greenwashing defense, and retailer qualification. The product-level data structures required by ESPR are the same structures that enable verified resale, circular economy access, and consumer transparency at scale.

Brands that build this infrastructure now — before enforcement pressure arrives — are not just getting ahead of regulation. They are building a product data foundation that will define how they operate, compete, and communicate for the next decade.

The brands that wait will not just face compliance risk. They will find themselves rebuilding their data architecture under deadline pressure, at higher cost, with less leverage over their suppliers — and without the early-mover advantage that the current window provides.

Frequently Asked Questions

What is a Digital Product Passport in the context of fashion?

A Digital Product Passport is a structured, machine-readable digital record attached to a physical textile or apparel product sold in the EU. Introduced under the ESPR (Regulation EU 2024/1781), a fashion DPP contains up to 49 data points covering material composition, environmental footprint, supplier information, and compliance documentation. It is accessible via QR code, NFC tag, or RFID chip and must remain available throughout the product's lifecycle.

Which fashion brands are required to comply with the EU DPP?

All brands placing textile and apparel products on the EU market are subject to ESPR DPP requirements — regardless of where the brand is headquartered or where the products are manufactured. A brand producing in Vietnam or Bangladesh and selling in Germany or France faces identical obligations to a brand manufacturing in Portugal. Size exemptions have been discussed for SMEs, but no confirmed carve-out has been established.

When does the Digital Product Passport become mandatory for fashion?

The textile delegated act — which will establish binding DPP requirements in law — is expected by end of 2027. DPP compliance for textiles is projected to be mandatory between late 2028 and mid-2029, with the first impacted collection being Spring/Summer 2028. Given the data infrastructure required, brands need to begin preparation well before those dates.

What are the 49 data points required in a fashion Digital Product Passport?

The JRC published a complete specification on May 13, 2026, covering four categories: product identification (GTIN, batch IDs, customs codes), producer identification (manufacturer and facility details), product information (fiber composition, recyclability score, recycled content, substances of concern, carbon footprint, care instructions), and compliance documentation (certification or self-declaration with calculation parameters). The binding final requirements will be confirmed in the textile delegated act.

What happens if a fashion brand does not comply with EU DPP requirements?

Non-compliant products can be blocked from entering or withdrawn from the EU market by national market surveillance authorities. Brands may face financial penalties under national laws implementing the ESPR. Beyond regulatory sanctions, retailers sourcing non-compliant products carry increasing liability — meaning DPP non-compliance becomes a commercial risk, not just a regulatory one, as procurement teams embed DPP status into supplier qualification criteria.

How is a Digital Product Passport different from a sustainability report?

A sustainability report is a company-level, annually published narrative document. A Digital Product Passport is a product-level, continuously accessible, machine-readable data record. DPPs are structured to a technical standard, publicly accessible via QR code, auditable by regulators, and must reflect each production batch — not aggregated company-wide performance. The two serve fundamentally different purposes: one communicates, the other proves.

How long does it take to implement DPP compliance for a fashion brand?

Implementation timelines depend on supply chain complexity, existing data maturity, and the number of SKUs requiring passports. Pilot implementations — covering one product and one batch — typically take 6 to 12 weeks. Catalog-scale rollout depends on data availability and supplier cooperation. Brands using a dedicated platform like NormaTrack can compress timelines significantly compared to manual approaches.