EU Digital Product Passport Registry: a shared pointer, not a product-data lake

External-source research synthesis, not an OfferSignal client result. Based on the retained October 2026 research and source-specific dates.

A manufacturer can have technical, repair and end-of-life information without reliably identifying the right product, exposing the right fields or showing who changed what. The European Union's Digital Product Passport (DPP) framework addresses that coordination problem. Its registry is a registration and discovery layer—not a central product-data lake, product approval, quote engine or order system.

What the Commission registry now does

The European Commission says the production registry and testing environment launched on 20 July 2026, with user-interface and application-programming-interface registration. The framework links a persistent unique product identifier to a data carrier, while the operator or authorised DPP service provider hosts and updates the full passport. The registry stores identifiers and commodity codes, not every underlying product record. 1 2 6

Commission Implementing Regulation (EU) 2026/1778 allows registration at model, batch or item level, depending on the applicable Union law, and uses the most granular level when rules differ. Automated checks cover semantic conformity, mandatory-data coherence, granularity, relevant commodity-code ranges and applicable backup links. The registry records a persistent registration identifier, product identifiers, commodity code, service-provider reference, registrant, timestamp and registration-event integrity. 3

A qualified-electronically sealed proof contains the product identifier, relevant commodity code, verified operator, timestamp and passport-version hash. It remains available for 90 calendar days, while changes are logged. This proves registration, not compliance with all EU law. Verified operator status lasts at most three years or until the identification method expires; it is an identity control, not a data-quality measure. 2 3

Batteries show why access is the hard part

For relevant electric-vehicle, light-means-of-transport and industrial batteries above 2 kWh, the battery passport obligation is scheduled for 18 February 2027. The QR code must provide access from that date, and the passport can contain identification, technical and performance information, sustainability, repair, reuse, repurposing, remanufacturing and recycling data. The broader DPP timeline gives ICT requirements an indicative 2029 date, not an operative general mandate at the cutoff. 1 7

Battery access is layered rather than simply public or private. Some information is public; test reports are reserved to notified bodies, market-surveillance authorities and the Commission; and other composition, dismantling and individual-battery data require a legitimate interest. A purchaser or authorised third party has read-only access to battery-management-system state-of-health and expected-lifetime information for residual-value, further-use, reuse and repurposing purposes. Distributors receive carrier, identifier or link support, but not automatically all restricted technical data. 4

At the cutoff, the Commission FAQ said the final binding act defining legitimate-interest categories and repairer/recycler rights to reuse certain restricted data had not been adopted. The registry does not host the full passport, authentication is not centrally prescribed, and the placing operator remains accountable when a service provider updates data. 5

An illustrative manufacturer workflow

This is an illustrative application, not a reported deployment. An electrical-equipment manufacturer could identify each model, batch or item and responsible operator; assemble current technical, safety, repair and end-of-life records; attach the carrier; publish the passport at its authoritative host; register metadata; and expose role-authorised fields to buyers, dealers, repairers, recyclers or authorities.

That workflow can support compliance discovery, repair triage, residual-value assessment and recycling routing when records are accurate. It cannot establish a correct drawing revision, supplier tolerance, current capacity or a cross-border quote's currency, tax, Incoterms, duties, sanctions and intellectual-property permissions. A valid URI is not approval for a custom job, binding price or autonomous commercial action.

Test more than whether registration succeeds: replay records with stale revisions, wrong units, missing certificates and over-broad permissions. Measure registration failures, correction time, authoritative-record retrieval and unauthorised exposure, while retaining the version hash and change log. Repair, engineering, supplier, price and order decisions remain with named authorities.

What the evidence does—and does not—show

The evidence is legal implementation-status evidence, not an independent customer study. Registry operational from 20 July 2026, but no public adoption denominator, registration count, API volume, uptime, failed-registration rate or independent security audit was identified. No independently measured repair-time, recycling-yield, quote-conversion or revenue outcome was found; service prices are undisclosed. 1 3 5 6

Sources and next reading

EU DPP overview and timeline — public Commission guidance.

DPP Registry launch and testing — public launch page; authenticated registration functions were not tested.

Battery DPP FAQ — public official guidance; final restricted-access act was pending at the cutoff.

Explore OfferSignal · Focused Business & AI Workshop · All research

References