The Digital Product Passport Ecosystem: Stakeholder Roles, Data Exchange and Access Rights

From suppliers to customs and recyclers: who interacts with a Digital Product Passport across the product lifecycle, what data each party contributes, and who is allowed to see what.

DPP

Suppliers

Manufacturers / Brands

Customers / Users

Service & Repair

Regulators & Customs

Recyclers

Digital Product Passport

The product's digital record, linked to the physical item via a QR code or NFC tag and mandated across a growing range of product groups in the EU. Sitting at the center of the product lifecycle, it connects upstream supplier data with the information that customers, repairers, recyclers, and authorities need, while showing each role only what it is authorised to see.

Suppliers

Component makers, fabric mills, and raw material producers whose parts and materials go into the finished product. Even when they do not issue a consumer passport themselves, they provide the upstream material, origin, and substance data that the brand's passport builds on.

Manufacturers / Brands

The economic operators that place finished products on the EU market and bear legal responsibility for issuing, registering, and maintaining the passport. Beyond fulfilling regulatory mandates, they use the passport to govern data access and stay connected with customers after the sale.

Customers / Users

Consumers, commercial buyers, and subsequent second-hand owners who buy and use the product day to day. By scanning the product with a smartphone, they get instant access to verified sustainability data, manuals, warranty services, and care instructions without needing an app.

Service & Repair

Independent repair workshops, authorised service centers, and refurbishers working to extend product lifespans. Through the passport, they access model- or unit-specific repair manuals, diagnostics, and spare part catalogues, and can log completed maintenance work.

Regulators & Customs

National customs agencies and market surveillance authorities responsible for enforcing EU product and ecodesign rules. They use the central EU Registry and the passport's restricted compliance tier to verify registrations at the border and audit conformity files in the market.

Recyclers

Sorting facilities, dismantlers, battery recyclers, and material recovery plants handling products at the end of their useful life. The passport gives them fast, machine-readable data on material composition, hazardous substances, and safe disassembly to maximise material recovery.

What is it?

A structured, machine-readable record linked to the physical product through a unique identifier (such as a GS1 Digital Link) at the model, batch, or item level. It remains accessible for the full statutory retention period of its product group.

Where does data live?

With the manufacturer or its DPP service provider. The central EU Registry only stores the identifiers and links that let customs and authorities locate the passport; the product data itself remains hosted by the brand or its provider.

What it means for brands

Product, compliance, and sustainability data scattered across ERP, PIM, and spreadsheets comes together in one record per product. At the same time, the code on the item opens a direct channel to customers after the sale.

How access works

Access is role-based. Anyone scanning with a phone sees the public layer, such as care instructions and sustainability metrics. Repairers, recyclers, and authorities sign in to unlock the technical and compliance data meant for their role.

Why they are affected

Brands cannot issue a compliant passport without upstream data. Under the ESPR, suppliers must provide the material composition and compliance details that manufacturers need to populate the passport.

What data they provide

Bills of materials, recycled content shares, component carbon footprints, facility identifiers, and declarations on substances of concern (such as under REACH and RoHS).

What it means for brands

When materials or component suppliers change between production runs, batch-level passports let brands record the exact upstream data for each batch without rewriting the master product record.

Access & confidentiality

The public passport shows only what the law requires for consumers, typically aggregated for the finished product. Exact formulations, trade secrets, and supplier identities stay protected with the brand.

Why they use it

Placing a regulated product on the EU market requires a valid, registered DPP. It is a prerequisite for conformity, automated customs clearance, and consistent product data across batches.

What they contribute

The unique product identifier (at model, batch, or item level), the registration in the EU DPP Registry, the EU Declaration of Conformity, user and safety manuals, sustainability metrics, and customer support channels.

What it means for brands

Regulation puts the QR code or NFC tag on the product; the brand owns the experience behind it. Under the brand's own domain, that same scan powers warranty registration, spare parts, care guides, and trade-in offers.

Access & confidentiality

Brands control which fields are public, which require a verified professional login, and which documents are reserved for authorities. That way, every regulatory requirement is met without exposing commercial secrets to competitors.

Why they scan it

Before buying (in store or online), to compare verified durability, repairability, and environmental data. After buying, to pull up manuals, care instructions, or spare parts directly from the product long after the box is gone.

What they contribute

Reading the passport never requires an account. Optionally, owners can register their product, make a warranty claim, request service, or pass the digital record on when reselling the item.

What it means for brands

Brands usually lose contact with buyers at the checkout, especially when selling through retail partners. The passport keeps a direct, branded channel open on the product itself for care guides, accessories, reorders, and trade-in programs.

Access & confidentiality

Anyone can scan the code with a standard phone camera and open the public passport in the browser, with no app, login, or fee. Upstream supplier identities, trade secrets, and technical schematics stay private.

Why they scan it

Technicians scan the product to pull up model- or unit-specific disassembly instructions, wiring diagrams, diagnostic error codes, and the exact part numbers needed for a repair.

What they contribute

Where item-level logging is used, workshops can record the service date, the serial numbers of replacement parts fitted, and safety checks, building a verified maintenance history for the product.

What it means for brands

Providing digital repair manuals and parts lists fulfills Right to Repair obligations while linking workshops straight to the brand's own spare parts shop so they order genuine replacements.

Access & confidentiality

Customers see everyday care and troubleshooting guides. Sensitive repair assets such as exploded views, wiring diagrams, and diagnostic specs are unlocked only for repairers with a verified account.

Why they check it

At the border, customs systems automatically check that the product's passport is registered before releasing goods. In the market, surveillance authorities use the passport to audit the declarations and test reports behind a product.

What they contribute

Authorities primarily read and verify passport records rather than writing to them. Customs logs automated border clearance checks, while market surveillance handles inspections, compliance requests, and recalls through official procedures.

What it means for brands

A complete, properly registered passport allows shipments to clear EU customs electronically with fewer border inquiries. If the registration ID or mandatory compliance documents are missing, customs can hold the goods.

Access & confidentiality

Authorities authenticate with their own credentials to inspect the full Declaration of Conformity, test reports, and technical documentation, all of which remain hidden from consumers and competitors.

Why they scan it

Sorting lines handle each item in seconds. They need to know at once: which polymer or alloy is this, are there batteries or hazardous substances inside, and where are the critical raw materials?

What they contribute

End-of-life status updates confirming that a product was dismantled or recycled, along with recovered material weights and recycling certificates.

What it means for brands

Precise material and dismantling data improves recovery rates at end of life and gives brands verified proof of recovery for recycling quotas and Extended Producer Responsibility (EPR) reporting.

Access & confidentiality

Recyclers receive authorised access to material breakdowns, hazardous substance locations, and dismantling instructions in a machine-readable format that sorting lines can process directly, without exposing supplier contracts.

More guides

The EU DPP Registry: A Step-by-Step Guide to Sign-Up, Enrolment and Verification

Read article

itemactive · Your DPP Platform

One passport per product. The right view for every stakeholder.

itemactive is the white-label DPP platform for manufacturers and brands. Share public product data with customers, restrict technical files to authorised repairers and authorities, and turn every scan into a direct customer channel.

Book a demo Contact Us