The European Union is about to impose the most significant product transparency requirement in commercial history. The Ecodesign for Sustainable Products Regulation (ESPR): Regulation (EU) 2024/1781, adopted by the European Parliament on April 23, 2024, and published in the Official Journal on June 28, 2024, introduces the Digital Product Passport (DPP): a machine-readable digital record that the Commission can require, product group by product group, for physical products sold within the EU single market. No ESPR delegated act is published to date, so no ESPR passport obligation has yet come into being. For luxury brands, fashion houses, and high-value goods manufacturers, the regulation opens a preparation window rather than a live compliance deadline. This guide explains what the DPP is, when it takes effect, what it requires, and how to prepare, with a particular focus on what the regulation means for brands in the luxury and premium segments.
1. What Is the Digital Product Passport?
At its core, the Digital Product Passport is a structured digital record that follows a product from the moment it is manufactured through its entire useful life, including sale, resale, repair, refurbishment, and eventual recycling or disposal. It is the product's reference history, fed not by marketing but by verifiable data.
Unlike a paper certificate or a static label, the DPP is designed to be machine-readable, interoperable across systems, and continuously updateable. When a product changes hands on the secondary market, when it undergoes repair, or when it reaches end-of-life processing, the passport is updated accordingly. Every actor in the value chain, from raw material supplier to recycler, can contribute data and access the information relevant to their role.
The DPP serves multiple policy objectives simultaneously. The European Commission positions it as a pillar of the EU Green Deal and the Circular Economy Action Plan. Specifically, it aims to enable consumers to make informed purchasing decisions based on verified environmental data; support customs and market surveillance authorities in identifying non-compliant or counterfeit products; facilitate recycling and end-of-life processing by providing material composition data to waste handlers; and create a level playing field by requiring all manufacturers, European or foreign, to meet the same transparency standards.
For the luxury sector, one additional function is critical: the DPP creates a verifiable chain of custody that makes counterfeiting dramatically more difficult. A product without a valid Digital Product Passport will, by definition, be identifiable as non-compliant, and potentially counterfeit.
2. The Regulatory Timeline: What Happens and When
The ESPR is a framework regulation. It establishes the legal basis and principles, but the specific requirements for each product category are defined through delegated acts, secondary legislation that the European Commission adopts based on impact assessments, stakeholder consultations, and technical feasibility studies. The rollout is staggered:
February 2027: Batteries (the pilot). The EU Battery Regulation (Regulation (EU) 2023/1542) is the first legislation to mandate a digital passport. By February 18, 2027, all industrial batteries above 2 kWh, light means of transport batteries, and electric vehicle batteries placed on the EU market must carry a DPP. The passport must contain data on capacity, performance, state of health, material composition (including cobalt, lithium, and nickel sources), carbon footprint calculated per the Product Environmental Footprint (PEF) methodology, and recycled content percentages. This category serves as the testbed for the entire DPP infrastructure.
Textiles: expected around 2028. Electronics: no passport act. No delegated act is published for textiles. The act is expected around 2027 and the obligation around 2028, a planning horizon rather than a date written into law. For textiles, the passport is expected to cover fiber composition and origin, manufacturing country and facility, presence of substances of very high concern (SVHCs) per REACH Regulation, environmental footprint data (carbon, water, waste), care and repair instructions, and recyclability information: those fields are an anticipation, not a published requirement. For electronics, no ESPR delegated act creates a passport for electrical and electronic equipment. The 2025–2030 working plan only provides for horizontal measures, repairability targeted around 2027 and recyclability around 2029. Smartphones and tablets are already covered by Ecodesign Regulation (EU) 2023/1670, which sets ecodesign requirements and creates no passport obligation.
The other product groups: no confirmed year for any of them. The Commission has a mandate to adopt delegated acts for further product groups. Alongside textiles, the ESPR 2025–2030 working plan names furniture, tyres, mattresses, iron and steel, and aluminium, and no confirmed year should be assumed for any of them, textiles included, until its own act is published. The plan names no luxury group of its own: footwear and leather goods are treated as textile-adjacent categories, while jewelry and watches are not among the named groups, so no ESPR date exists for them today. Construction products do not take their dates from the ESPR working plan at all: that sector follows Construction Products Regulation (EU) 2024/3110, in force since 7 January 2025 and applying in stages from 8 January 2026, with no confirmed passport date for any product family. Waiting for the final delegated act before beginning preparation is a strategic error, because implementation takes 12–18 months for most companies.
A critical point: the ESPR applies to all products sold on the EU single market, regardless of where they are manufactured. A handbag stitched in a Florentine atelier, a watch assembled in Geneva, a garment sewn in Bangladesh, all need a compliant DPP to be legally sold in any of the EU's 27 member states. This extraterritorial reach means the regulation will reshape global supply chains, not just European ones.
3. The Five Things a Passport Has to Solve in Practice
Each delegated act tailors the data fields to a specific product category, and none is published yet. Annex III of the ESPR is a menu of twelve elements a delegated act may draw from, not a list of obligations, and it carries no sustainability data of its own. The five points below are our reading of what a passport has to solve in practice, not five requirements written in the regulation:
Point 1: Unique Product Identifier. Every product (or, for certain categories, every batch or model) must carry a globally unique identifier conforming to ISO/IEC 15459 or an equivalent standard. This identifier links the physical product to its digital passport unambiguously. For luxury goods, this will almost certainly mean unit-level serialization, each individual item gets its own passport, not just each SKU.
Point 2: Physical Data Carrier. The unique identifier must be accessible via a data carrier physically attached to the product. The ESPR prescribes no technology, and no delegated act sets a list of carrier requirements. In practice, a carrier that does the job has to survive the product's expected lifespan, be scannable with widely available devices, and be hard to tamper with or duplicate. This is where technology choice becomes critical, more on this in section 5.
Point 3: Structured, Machine-Readable Data. The passport must store product data in a standardized, machine-readable format that enables automated processing by authorities, recyclers, and digital platforms. The Commission is developing common data schemas through the European Data Space for Smart Circular Applications (EDSCA). Data categories include product identity and traceability (manufacturer, facility, batch, serial), material composition and substances of concern, environmental footprint (carbon, water, waste, energy), circularity information (repairability, recyclability, spare parts), and compliance documentation (declarations of conformity, certifications).
Point 4: Differentiated Access Rights. Not everyone should see the same data. The ESPR names categories of actors who must have free and easy access to the passport (Article 11, point b), but it sets no access tier of its own: it defers the split of rights to each product group's delegated act (Articles 9(2)(f) and 10(1)(g)), and none is published. The split below is ours, not the regulation's: consumers see product-level information (materials, environmental footprint, care instructions); market surveillance authorities and customs officials access full compliance and traceability data; recyclers and waste handlers access material composition and disassembly information; and economic operators (manufacturers, importers, distributors) manage their own data contributions. SealTrust ships six default profiles aligned on the five audiences of JRC145830 Annex 8, a scientific report with no legal force, the public profile being split into anonymous access and end-user access. They are audiences with different needs, not increasing levels of clearance, and they are reconfigurable field by field.
Point 5: Long-Term Data Persistence. Product passports must remain accessible for a minimum period determined by the product's expected lifespan, each delegated act will set that period for its own product group, and none is published yet. The regulation says nothing about decentralisation. It points the other way: Article 10(4) has the economic operator keep a back-up copy with a digital product passport service provider. A centralised database is not non-compliant.
4. Why the DPP Hits Luxury Brands Differently
The luxury industry occupies a unique position relative to the DPP. On the one hand, luxury brands already invest heavily in quality control, craftsmanship storytelling, and brand protection. On the other, the operational reality of implementing unit-level digital passports across complex, often artisanal supply chains presents specific challenges.
Artisanal production complexity. Luxury manufacturing often involves small-batch, handcrafted processes spread across multiple specialized workshops. A single handbag may pass through five or more ateliers. Capturing structured data at each stage requires process changes that respect the artisanal character of production while meeting regulatory standards.
Multi-tier supply chains. A luxury watch might contain over 200 components sourced from dozens of suppliers across several countries. Mapping material provenance to the level expected (facility-level, not just country-level) demands data-sharing agreements and digital infrastructure that most supply chains don't yet have.
Secondary market implications. Luxury goods have unusually long product lifespans and active secondary markets. Bain & Company estimates the global luxury resale market will exceed €50 billion by 2027. A DPP that follows a product through resales, repairs, and decades of ownership requires infrastructure designed for permanence, not a subscription database that goes offline if a vendor changes providers.
Counterfeiting exposure. The OECD and EUIPO report that luxury and fashion goods represent over 60% of counterfeit seizures by value. The DPP is explicitly designed to help authorities identify counterfeits. But that only works if the data carrier is tamper-resistant and the underlying data is verifiable. A DPP built on a QR code pointing to a centralized database can be replicated almost as easily as the products it's supposed to protect.
The bottom line: luxury brands face higher complexity, higher stakes, and higher potential upside from DPP implementation than most other sectors.
5. NFC + Blockchain: The Optimal DPP Infrastructure
The ESPR doesn't prescribe specific technologies, but its requirements effectively narrow the field. Let's evaluate the options against those five points.
QR codes are cheap to print and universally scannable. Printed graphics degrade over product lifespans of years or decades, any camera can duplicate them, and a passport that points to a single company's database depends on that company staying in business. None of that makes a QR code non-compliant: the ESPR sets no list of carrier requirements, and the battery regulation, the only one carrying a firm date, requires a QR code (Article 13(6)). A QR-only passport is compliant where a passport is required at all. What a QR code alone does not give you is anti-counterfeiting protection: it can be photographed and reprinted, so it shows the passport exists, not that the object in your hand is the one the passport describes.
RFID works well in logistics but requires dedicated readers for most frequencies. UHF RFID is not consumer-scannable. HF RFID overlaps with NFC but typically lacks the cryptographic capabilities needed for tamper-resistance.
NFC with NTAG 424 DNA (or equivalent cryptographic NFC) is the technology that best answers the five points above. Each NTAG 424 DNA chip contains a hardware AES-128 cryptographic coprocessor, generates a unique Secure Dynamic Messaging (SDM) response at every scan, incorporates an anti-replay monotonic counter, and offers 10+ year data retention at 85°C with 200,000 write cycles. The tag is readable by any modern smartphone without an app, just tap. Its sub-0.3 mm profile integrates invisibly into labels, linings, caps, and packaging. Crucially, the cryptographic response makes the data carrier clone-resistant, where a printed code can be reproduced from a photograph. That is our own criterion, not a regulatory one: the ESPR ranks no carrier and requires tamper resistance from none of them.
Blockchain addresses persistence and integrity. Anchoring a passport fingerprint on a public ledger dates the record and shows it has not changed since, without depending on any single vendor's business continuity. Blockchain provides immutability (data cannot be retroactively altered), interoperability through open APIs, built-in ownership tracking through token transfers, and 10+ year persistence. The regulation requires no decentralisation and a centralised database is not non-compliant. Anchoring is our engineering choice for durability and public verifiability, not a compliance requirement.
Combined, NFC provides a clone-resistant physical data carrier, and blockchain provides the persistent digital backbone. Together, they answer the five points above, which are our reading of what a passport has to solve in practice, not requirements written in the regulation, while delivering strong anti-counterfeiting protection.
6. The Four-Step DPP Readiness Roadmap for Luxury Brands
Whatever the publication date of your own delegated act, we recommend starting now. Here is a practical four-step roadmap:
Step 1: Data Audit and Gap Analysis (Months 1–3). Inventory every data point you currently capture across your product lifecycle. Map this against the ESPR's common data framework. Identify gaps, which are typically largest in raw material provenance, environmental footprint calculations, and facility-level manufacturing records. Assess your suppliers' readiness to provide structured data. Deliverable: a gap analysis document with prioritized remediation items.
Step 2: Supply Chain Mapping and Data Agreements (Months 3–8). Depending on the category, expected traceability may go below country of origin, down to the manufacturing site. Work backward through your supply chain: who supplies what, from where, with what certifications? For multi-tier supply chains typical in luxury, this may require establishing data-sharing agreements with Tier 2 and Tier 3 suppliers. Engage with industry consortia (like the Aura Blockchain Consortium or the Responsible Jewellery Council) where shared standards reduce individual effort. Deliverable: a supply chain data architecture with identified data sources for each DPP field.
Step 3: Technology Selection and Pilot (Months 6–12). Select your data carrier technology and DPP platform partner. Run a pilot on a single product line: 50–500 units, covering NFC tag provisioning and embedding, blockchain enrollment and certificate minting, consumer scan experience testing, compliance report generation, and integration with your existing ERP/PLM systems. The pilot validates the end-to-end workflow before you commit to full-scale deployment. SealTrust offers pilot kits with pre-provisioned NTAG 424 DNA tags and technical guidance. There is no sandbox: a production key is always st_live_, and a pilot runs on a real account with a small volume.
Step 4: Production Rollout and Continuous Compliance (Months 10–18). Deploy across your product catalog. Integrate tag provisioning into your manufacturing workflow. Establish processes for ongoing data maintenance, the DPP is a living document that must be updated when products are repaired, resold, or reach end of life. Set up monitoring dashboards for compliance reporting, scan analytics, and counterfeiting alerts. Train your teams on DPP operations.
7. Beyond Compliance: The Strategic Upside
The brands that will benefit most from the DPP are those that see it not as a regulatory burden, but as a competitive tool. Here's what the data shows:
Consumer willingness to pay. Buyer surveys consistently report a willingness to pay more for products whose sustainability claims are verifiable, though the figures vary widely by study and by category. A DPP, especially one accessible via a simple NFC tap, transforms sustainability claims from marketing assertions into verifiable facts.
Secondary market value. A passport that stays with the product through resales lets a second-hand buyer check its provenance and its chain of custody rather than take the seller's word for it. As the DPP normalizes product histories, authenticated items will increasingly outperform non-authenticated ones on resale.
Anti-counterfeiting. With the illicit market in counterfeit luxury and fashion goods estimated at $98 billion (OECD/EUIPO), a DPP backed by cryptographic NFC and blockchain makes it dramatically harder for fakes to pass as genuine, especially on the online marketplaces where most counterfeits are sold.
Direct-to-consumer engagement. Every NFC scan is a direct touchpoint with the product owner. Brands can serve personalized content, maintenance reminders, exclusive event invitations, and loyalty rewards, turning the DPP from a compliance tool into a CRM channel.
Operational intelligence. Scan data reveals where products are being used, how often they're verified, when they change hands, and where counterfeiting hotspots emerge. This data is invisible to brands today. The DPP makes it available in real time.
8. What Happens If You Don't Comply
The ESPR includes enforcement mechanisms with real teeth. Products without a valid DPP can be blocked from the EU market by customs authorities. Market surveillance authorities can issue withdrawal orders requiring products to be pulled from retail. Financial penalties are set at the national level but are designed to be "effective, proportionate, and dissuasive", the same language used for GDPR penalties, which in practice have reached hundreds of millions of euros. And there's the reputational dimension: a luxury brand publicly cited for DPP non-compliance faces a narrative that directly contradicts the transparency and quality values at the heart of luxury positioning.
9. Frequently Asked Questions
Does the DPP apply to products already on the market? No. The DPP applies to products placed on the market after the relevant delegated act's compliance date. Existing inventory is not retroactively affected, though brands may choose to passport high-value items voluntarily.
Can I use a QR code and comply? Yes. The ESPR sets no list of carrier requirements, and the battery regulation, the only one carrying a firm date, requires a QR code (Article 13(6)). What a QR code alone does not give you is anti-counterfeiting protection: it can be photographed and reprinted, so it shows the passport exists, not that the object in your hand is the one the passport describes. That is a reason to add a cryptographic carrier, and it is not a regulatory one.
Which blockchain does SealTrust use? You don't have to choose or manage one. SealTrust anchors records on Base, a public Ethereum Layer 2 (publicly verifiable, low-cost, and proof-of-stake) so the durability and sustainability criteria the ESPR cares about are handled for you, end to end.
How much does this cost? It depends on your product volume, catalog, and supply-chain complexity, so SealTrust pricing is tailored to each deployment rather than a fixed list price. Talk to our team for a quote built around your range.
10. Getting Started
The only firm deadline to date is the battery passport of 18 February 2027, and it comes from the EU Batteries Regulation (EU) 2023/1542, not from the ESPR: no ESPR delegated act is published, so no ESPR passport obligation has yet come into being. For luxury brands, the 2028–2030 window is a forecast, not a calendar, and it can arrive faster than most organizations expect. The companies that begin preparation now will have the smoothest transitions, the strongest compliance positions, and the earliest access to the competitive advantages that the DPP enables.
SealTrust provides a turnkey DPP solution combining NTAG 424 DNA NFC tags, blockchain-anchored digital passports, and a compliance management dashboard, purpose-built for luxury and high-value goods. SealTrust supports you at every step, from data audit to production rollout.
Want a DPP readiness assessment for your catalog? Talk to our team, we'll walk you through the regulatory requirements, an implementation checklist, and how SealTrust maps to each ESPR criterion.
Or contact our team directly for a consultation tailored to your product categories and compliance timeline.
Sources: ESPR Regulation (EU) 2024/1781, Official Journal of the European Union; EU Battery Regulation (EU) 2023/1542; OECD/EUIPO, "Mapping Global Trade in Fakes 2025" (May 2025, 2021 data); Bain & Company, "Luxury Market Study" (2024); European Commission, Ecodesign for Sustainable Products documentation.
