Everything Garment Factories
Ask About EU DPP Compliance

No — DPPs are only mandatory for products covered by specific Delegated Acts under ESPR. Textiles and garments are in the first priority wave and will require DPPs from 2028–29. Not all categories are covered yet, but garments exported to the EU are confirmed in scope under the ESPR Working Plan 2025–2030.

Products without a valid, registered DPP cannot legally be placed on the EU market after enforcement. EU customs authorities can block shipments and impose penalties on non-compliant importers. Your EU buyers will also likely require DPPs contractually before the regulatory deadline.

Possibly, but do not plan on it. ESPR Article 10(1)(b) lets the data carrier sit on the product, its packaging or documents accompanying it, as the textile delegated act will specify. Recital 37 says the carrier should be on the product itself where possible, so the passport stays reachable for the garment's whole life, including at recycling. A hangtag is usually removed after purchase, so for garments plan on a QR on the sewn-in care label.

Under our Data Processing Agreement (DPA), your factory owns all DPP data. DPPLive acts as your data processor — we store and host, but the data belongs to you. You can export everything in JSON-LD format at any time. ESPR formally places obligation on the EU importer/brand, but data ownership remains with the originating factory.

Yes, unambiguously. ESPR Article 1(2) states it applies to physical goods placed on the EU market regardless of where they are manufactured. The EU Commission confirms requirements "apply in a non-discriminatory manner to EU and non-EU companies." Bangladesh factories are fully in scope through their EU buyer importers.

Yes — and this is a significant competitive advantage. Factories that present live DPPs to EU buyers demonstrate operational maturity and reduce compliance burden on the brand. You can build and publish the passport for a style on DPPLive before any buyer asks. The EU registry upload itself is the duty of the economic operator placing the garment on the EU market — usually the brand or importer (ESPR Article 13(4)) — and a ready passport makes that step quick.

CE marking confirms product safety conformity. OEKO-TEX certifies textile freedom from harmful substances. A DPP is a dynamic digital record permanently accessible via QR code and updated throughout the product's lifecycle. DPPs do not replace certifications — they make all compliance data digitally accessible. OEKO-TEX and GOTS data can be included in your DPP fields.

ESPR works with four unique identifiers: ① Unique Product Identifier (UPID) — the product's identifier, which the QR code links to and every passport needs (Article 10(1)(a)). ② Unique Operator Identifier (EOID) — your company's operator code. ③ Unique Facility Identifier — your production site. ④ Unique registration identifier — returned by the EU registry when a passport is registered (Article 13(5)). The delegated act decides when ② and ③ are required (Article 12 and Annex III). DPPLive generates the first three for you; the fourth comes from the registry.

ESPR sets the minimum: the passport must stay available for at least the product's expected lifetime, and the textile delegated act will fix the exact period (Article 9(2)(i)). It must stay available even if the company responsible goes out of business (Article 11(e)), which is why a back-up copy has to be held by a DPP service provider (Article 10(4)). DPPLive keeps published passports available for at least 10 years after their last update, hosted in Western Europe.

A Delegated Act is a secondary EU legal instrument adopted by the European Commission under the authority of ESPR. ESPR itself is the framework — Delegated Acts set the specific, product-by-product requirements (exact data fields, formats, timelines). The Textile Delegated Act is expected in 2027 and will finalise exactly what data your garment DPPs must contain.

GS1 Digital Link is a GS1 standard that puts a product's GTIN into a web address, so one QR code works both as a barcode and as a link. ESPR requires the data carrier and the product identifier to follow the ISO/IEC 15459 standards listed in Annex III, or an equivalent (Article 10(1)(c)), and passport data to use open standards (Article 10(1)(d)); a GS1 GTIN in a GS1 Digital Link is one widely used way to meet the first. By default, DPPLive QR codes carry your passport's own DPPLive link; if the GTIN is licensed to you, you can choose a GS1 Digital Link instead (https://dpplive.com/01/{GTIN}). Any standard QR reader scans both.

ESPR Article 74 leaves penalty levels to individual EU Member States, but they must be "effective, proportionate, and dissuasive." Practical consequences include: customs refusal (your shipment cannot enter the EU), administrative fines (amounts are set nationally by each Member State under Article 74; there is no single EU figure), and — most importantly for export factories — de-sourcing by EU brands. EU buyers dominate most exporters' order books (over 60% of Bangladesh RMG exports, for example); losing relationships over DPP gaps is the single largest commercial risk.

Higg Index (Sustainable Apparel Coalition) and BSCI (amfori) are voluntary, buyer-side audit programs evaluating environmental and social performance. DPP is a legally mandated, product-level public record — not an audit. They are complementary: data from your existing Higg/BSCI assessments feeds directly into DPP fields (carbon footprint, water use, social compliance), but DPP adds legal force, traceability via QR, and EU-wide accessibility. Factories already running Higg/BSCI have a head start on DPP data collection.

Yes — materially and ahead of the regulatory deadline. H&M Group, Inditex (Zara), C&A, and Bestseller have publicly committed to DPP readiness ahead of 2028–29 enforcement. Several brands have stated DPP capability will be a sourcing prerequisite by 2027. Tier-1 suppliers that cannot supply DPP-ready data risk losing PO allocation. Conversely, factories that demonstrate live DPP capability today often see expanded order share from compliance-conscious buyers.

Under REACH Article 33, an article containing a Substance of Very High Concern (SVHC) from the ECHA Candidate List above 0.1% w/w must come with information for safe use — at minimum the substance name. ESPR adds its own rule: the textile delegated act will require passport information on substances of concern, such as name, location and concentration (ESPR Article 7(5)). The current ECHA list contains over 240 substances, including phthalates, certain azo dyes, and brominated flame retardants. In DPPLive you record each declared substance per passport: its ECHA name, CAS number and concentration.

DPPLive is free for up to 10 Digital Product Passports a month per factory, with a public passport page in 9 languages. Factories that need more than 10 DPPs a month, team accounts or the carbon calculator get custom pricing. Compared to in-house implementation — estimated $50,000–$200,000 for ERP integration plus annual maintenance — a hosted platform avoids that build cost. Payment by bKash; card payment coming soon. Free pilot: one style with full data for four weeks, no card required.

Not yet. The sequence is: 20 July 2026 — the EU Central DPP Registry opened (infrastructure, not an obligation on factories); 2027 (expected) — the Textile Delegated Act finalises the exact data fields; 2028–2029 — expected enforcement for garments. The commercial deadline arrives first: major EU buyers are already writing DPP-readiness into 2026–2027 sourcing terms.

The care label is a static piece of fabric: ISO 3758 wash symbols plus fibre content. A DPP is the dynamic digital record behind the QR code printed on that care label — carbon footprint, substances-of-concern information, traceability, recycled content, and end-of-life instructions, kept accessible for at least the garment's expected lifetime. The care label answers “how do I wash this”; the DPP answers “what is this product’s full compliance record.” The DPP does not replace the care label — it lives on it.

The legal duty sits with the responsible economic operator placing the product on the EU market — normally the EU brand or importer. That operator can authorise a DPP service provider (ESPR Article 2(32)) to store and process the passport for it (Articles 10(4) and 11(c)), using data that originates at the factory; the registry upload stays the operator's duty (Article 13(4)). Three working models exist: brand-managed, factory-managed via a service provider, and hybrid. Full walk-through in our Registry submission guide.

ESPR lets each Delegated Act set the granularity — model, batch, or item level. For most garments the expected answer is model level: one DPP per style/colourway, covering thousands of identical pieces, which keeps cost per garment negligible. Batch level applies where production runs differ meaningfully (e.g., dye lots); item level is reserved for high-value goods.

SCIP is ECHA's database for articles containing SVHC substances above 0.1% w/w, required under the Waste Framework Directive. It is a separate legal duty that the EU importer files — the DPP does not replace it today. The practical overlap: the same REACH Article 33 screening that fills your DPP chemical fields produces the SCIP data too, so factories collect once and report twice. The Commission has signalled long-term convergence of the two systems.

Regulatory liability sits with the responsible economic operator (the EU brand/importer) under member-state penalties per ESPR Article 74. The factory's exposure is contractual: EU supply agreements increasingly include DPP-accuracy clauses and audit rights. On DPPLive every published version is kept and hashed (SHA-256), so the audit trail shows exactly who entered what and when — accurate data at source is the factory's best protection.

Yes — that is the design of the system. Under ESPR Article 15, customs release a product only after checking its unique registration identifier and commodity code against the EU registry (Article 13); the check becomes automatic once the registry is connected to the EU customs single window (Article 15(3)). Once enforcement applies to textiles, a missing or invalid Registry entry can mean the shipment is held or refused. In-market, surveillance authorities additionally spot-scan care-label QR codes. Database checks are systematic; physical scans are random.

Legally, the DPP mandate is EU-only today. The UK has no DPP law yet but is studying alignment; the US has no federal mandate, though New York's proposed Fashion Act includes disclosure duties; France already requires product environmental labelling under its AGEC law. Practically, one ESPR-grade dataset satisfies all of these — factories that build DPP data for the EU are automatically ahead for every other market.

No. A DPP has access tiers. The public view (anyone scanning the QR) shows consumer-level data: fibre composition, origin, care, carbon footprint, recyclability. Detailed supply-chain records, supplier names, and full chemical specifics sit in a restricted tier visible only to authorised roles — customs, market surveillance, recyclers, and buyers you approve. Your commercial data is not published to the open internet, and pricing is never part of a DPP.

No. ESPR is technology-neutral: it requires open interoperable standards, persistent identifiers, and tamper-evidence — all satisfied by conventional infrastructure with SHA-256 version hashing. Some vendors build DPPs on blockchain; that is a design choice, not a legal requirement, and it typically adds cost and complexity. Industry blockchain pilots you may have read about are vendor implementations — the regulation itself never mandates blockchain.

Not a problem. ESPR mandates interoperability and data portability: every DPP exports as structured JSON-LD, and the identifiers (GTIN, UPID, EOID) are platform-neutral by design. Your factory-side data can feed the brand's system directly, or you run passports for your own models while the brand runs theirs — the identifiers link them. There is no lock-in: you can export everything and switch providers at any time.

Not their own garment DPP — the passport attaches to the final product. But Tier 2/3 suppliers must feed the data behind it: fibre origin, dye and chemical inputs with CAS numbers, wet-processing energy data. Expect garment factories to make this a contractual requirement from 2027. Mills and dyehouses that can hand over structured data on request will become preferred suppliers as DPP compliance cascades upstream.

The public view shows: product name and photo, fibre composition, country of origin, carbon footprint, ISO 3758 care symbols, certifications (GOTS, OEKO-TEX, GRS), and recycling guidance. Authorised roles unlock more: approved buyers see the full compliance record, recyclers see the material-recovery and chemical table, authorities see identifiers and registry status. See it yourself in our live demo.

The expected method is the EU Product Environmental Footprint (PEF) — specifically the Apparel & Footwear PEFCR — a lifecycle figure in kgCO₂eq covering raw materials, spinning, knitting/weaving, dyeing and finishing, assembly, and transport. Key inputs are your energy consumption (multiplied by the national grid factor — Bangladesh: 0.61 kgCO₂/kWh), material mix, and wet processing. DPPLive's carbon calculator implements these categories so factories enter consumption data, not formulas.

The passport follows the product — the same care-label QR keeps resolving for at least the garment's expected lifetime (ESPR Article 9(2)(i)). Resale platforms scan it to verify authenticity and composition; recyclers read the fibre and chemical table to decide mechanical vs chemical recovery. This is why ESPR recital 37 asks for the carrier to be on the product itself where possible. DPP is what makes textile-to-textile recycling economical: for the first time, sorters know precisely what is in each garment.

Yes. ESPR Article 25 bans the destruction of unsold apparel and footwear — for large enterprises from 19 July 2026, for medium-sized enterprises from 2030 (micro and small firms are exempt). Companies must also disclose annually how many unsold products they discard and why. It is the same regulation that created the DPP — together they push the industry from disposal to circularity, and they raise the value of unsold-stock channels like outlets and resale.

With data at hand, minutes. A first manual DPP in DPPLive takes roughly 10–15 minutes; a new colourway can start as a copy of an existing passport. The real time cost is one-off: assembling your chemical inventory and carbon inputs the first time typically takes a factory 1–2 weeks. After that, the DPP becomes a routine step in the merchandising checklist for each new style.

Three costs stack up. Lost orders: major EU buyers are making DPP capability a sourcing prerequisite from 2027 — before the legal deadline. Rush premium: implementation and consultancy prices spike near regulatory deadlines, as GDPR showed in 2018. Data debt: carbon baselines and chemical inventories take months to backfill accurately. Starting now costs a modest monthly subscription; starting in late 2027 costs the same subscription plus the scramble — and possibly the buyer.

A Digital Product Passport is a digital record permanently linked to a physical product via a QR code or NFC tag on the care label. It carries the sustainability, material-composition, supply-chain and compliance data required by EU Regulation 2024/1781 (ESPR): fibre composition, carbon footprint, chemicals, care and recycling instructions. Each passport has a Unique Product Identifier (UPID) and links to the EU Central DPP Registry.

Three moving parts. Identifiers: the product gets a GTIN and UPID, the company an EOID. Data carrier: a QR code on the care label — the passport's own link by default, or a GS1 Digital Link if you choose — resolves to the passport's permanent URL. Registry: the identifiers are lodged with the EU Central DPP Registry — the lookup customs and market surveillance use. Anyone scanning the code sees the live passport — fibre composition, carbon footprint, chemical declarations, care and recycling guidance — for as long as the passport must stay available.

The exact list will be set by the textile delegated act (ESPR Article 9(2)(a) and Annex III); Article 7 and Annex I set the categories it can draw on. Based on the Commission's preparatory work, expect: a unique product identifier (often a GTIN), operator and facility identifiers; product category; fibre composition totalling 100%; country of origin; carbon footprint (kgCO2eq); recyclability; care and end-of-life instructions; and information on substances of concern (Article 7(5)).

Batteries lead with the only hard date — 18 February 2027, under their own Regulation 2023/1542. Under the ESPR Working Plan 2025–2030 the first ESPR wave covers textiles, iron & steel, aluminium, furniture, tyres and mattresses — steel and aluminium reach garment factories early through zippers, buttons and trims. For garments the sequence is: Textile Delegated Act 2027, enforcement expected 2028–2029.

A European Commission-operated registry, live since 20 July 2026, that stores each passport's identifiers and metadata — not the full data, which stays with your DPP Service Provider. It is the source-of-truth lookup for customs, market surveillance authorities and recyclers. Every DPP must be registered there before its product is placed on the EU market.

Five steps: (1) complete every field the textile delegated act requires (ESPR Article 9(2)(a) and Annex III); (2) validate — errors are cheaper to catch before publishing; (3) publish the passport at its permanent URL (or a GS1 Digital Link, if you choose that format); (4) the economic operator placing the garment on the EU market uploads the identifiers to the Registry (Article 13(4)), which returns a unique registration identifier (Article 13(5)); (5) keep it current with a new version for any material change. A DPP platform automates most of steps 2–5. The Registry opened on 20 July 2026; textiles join once their delegated act applies.

Not with a free QR generator. The code must carry a persistent unique product identifier and keep resolving to the live passport for as long as the passport must stay available. The route most EU buyers expect is a GS1 Digital Link URL built on the product's GTIN (format: https://domain/01/GTIN). In practice: get a GTIN from your national GS1 office, let your DPP platform generate the Digital Link QR, print it at roughly 15×15 mm on the care label, and test-scan after wash cycles. Static codes with no identifier structure do not meet the identifier standards ESPR Article 10(1)(c) points to.

An Economic Operator Identifier is the unique business ID the EU DPP Registry uses to record who placed the product on the market. The European Commission has not finalised issuance yet — the likely routes are EU EORI numbers for importers and a GS1-issued identifier for non-EU manufacturers. Nothing to do today: DPPLive registers EOIDs on behalf of factories once the system goes live.

Yes, through a new version. ESPR Article 9(1) requires passport data to be accurate, complete and up to date, and Article 11(f) limits who may change it. On DPPLive a correction publishes a new version with its own SHA-256 hash; earlier versions stay on record, so every change is traceable.

A DPP contains product data, not personal data of consumers or workers, so GDPR exposure is limited by design. Where GDPR does apply is the platform around it — factory user accounts and contact details. DPPLive hosts its database and files in Western Europe and maintains a Records of Processing Activities, an appointed DPO, and 72-hour breach notification per GDPR Article 33.

ESPR places the duty on the economic operator placing the product on the EU market — for most Bangladesh-made garments that is the EU brand or importer of record. In practice the obligation flows down the chain: the importer can only comply with data the factory supplies, so purchase orders increasingly make passport-ready data a delivery condition. A factory that owns its data keeps both the liability conversation and the order simple.

Start with data, not software. (1) Collect what is already certain: fibre composition, country of origin, REACH Article 33 chemical declarations, care instructions. (2) Secure a GTIN from GS1 Bangladesh. (3) Run one pilot DPP for one style, end to end. None of this needs an IT department — a merchandiser with a spreadsheet can prepare the first passport in days, and our free readiness assessment shows which gaps to close first.

Test five things: data ownership with export (structured JSON-LD download any time — no export is the single biggest red flag); EU data residency and long-term hosting that outlives the garment; GS1 Digital Link carriers; Registry submission support (registry live since 20 July 2026); and compliance updates such as ECHA/SVHC sync. Price matters less than these legal guarantees — they are what an audit tests. Our provider-evaluation guide has the full row-by-row checklist.