On this page
Digital product passports and packaging: what applies, and what doesn't?
Marks and reference graphics are shown for identification, academic research and commentary. The image does not grant permission to apply a scheme mark to packaging; consult the issuing body's current eligibility and artwork rules.
Introduction
A common belief in the packaging sector is that packaging will carry an EU Digital Product Passport. It will not, at least not under the instrument that defines that term. Packaging is excluded from the Ecodesign for Sustainable Products Regulation delegated acts, which are the DPP’s legal home. Packaging’s own data duties sit in the packaging regulation, on a separate track.
Track one: the ESPR passport
The Ecodesign for Sustainable Products Regulation establishes the DPP as its central information instrument. The passport is a structured, product-level digital record covering composition, durability, reparability, recycled content, substances of concern and the further attributes each product rule specifies, accessible through a data carrier on the product, with access differentiated by user category. Its deployment is sequenced by delegated act, product group by product group. The Commission's first ESPR working plan, adopted in April 2025, prioritises iron and steel, textiles, tyres, aluminium, furniture and mattresses, with delegated acts from 2026–2029 and compliance dates trailing each act by the regulation's minimum lead times (dpp-tool, n.d.; European Commission, 2025).
Packaging's exclusion from this machinery is a feature of the legislative design rather than an omission. Packaging already possessed a comprehensive and recently negotiated product regulation of its own, and running ESPR delegated acts across the same subject matter would have duplicated, and potentially contradicted, the packaging regulation's requirements. The design adopted gives each regime exclusive custody of its artefact: ESPR governs products, the packaging regulation governs their wrapping, and the DPP term belongs to the first track alone.
Track two: the packaging regulation's data obligations
Packaging's own digital-information architecture is assembled across the packaging regulation's provisions and is examined piecemeal elsewhere in this collection. Gathered in one place, it amounts to a passport in all but name, subject to differences noted below.
Its components comprise technical documentation, in the form of the conformity file substantiating recyclability, recycled content and the regulation's other product requirements, anchored in the regulation's annexes and declaration-of-conformity machinery, with initial obligations already live from August 2026; unique identification requirements for packaging and for producer traceability; the harmonised label system, whose material-composition pictograms may be supplemented by QR-carried information; the mandatory data carrier for reuse-system packaging, linking to system availability and rotation tracking; and the digital-only EPR symbol from February 2027 (Complydex, n.d.; Regulation (EU) 2025/40). Each element appears individually in this theme's earlier articles; the aggregate is what matters here. European packaging is acquiring documented identity, digital carriage and differentiated disclosure, which together constitute the DPP's functional anatomy, through packaging-specific instruments that never use the term.
The differences from the ESPR model are equally structural. Packaging's data obligations are uniform by instrument rather than sequenced by delegated act per product group; its carriers are specified provision by provision, with a QR code in one place and open digital marking in another, rather than through a single passport framework; and its disclosure logic runs predominantly to systems, including sorters, EPR schemes and enforcement authorities, whereas the ESPR passport's design centres on product-lifetime actors such as repairers, refurbishers, resellers and recyclers of the product itself.
The sequencing in detail
The ESPR working plan's product-group sequencing merits precise statement, both because packaging contents appear on it and because its rhythm indicates how European product-data law will be introduced over the coming decade.
The first working plan's priority groups and indicative timing, as recorded in the sequencing analysis on which this article relies, are as follows: iron and steel first, with a delegated act expected in 2026 and compliance around 2028; textiles, tyres and aluminium following, with delegated acts in 2027 and compliance around 2029; furniture on a 2028 act with compliance around 2030; and mattresses closing the wave at 2029, with compliance around 2031. The regulation guarantees at least eighteen months between a delegated act's entry into force and its application, and a mid-term review of the plan is scheduled for 2028 (dpp-tool, n.d.; European Commission, 2025). Two of the named groups, aluminium and textiles, are packaging-relevant materials, and their passports will document upstream attributes such as alloy provenance and fibre composition for products whose packaging carries the parallel PPWR marks. For those sectors, the meeting of the two tracks described below will occur on the same substrate.
The carrier ecology beneath both tracks is broader than the QR code that dominates discussion. The identification standards examined earlier in this group encode across media, so that the same Digital Link identity can ride a printed 2D code, an NFC tag or a RAIN RFID inlay, and the radio carriers' integration guidance addresses passport use cases expressly, in the form of item-level identification with the serialisation depth that rotation tracking and product passports share (RAIN Alliance, n.d.). For packaging specifically, radio carriage remains economically exceptional, given tag cost measured against packaging margins; the reuse architecture's item-level demands are, however, where that exception erodes first, since a returnable container amortises its tag across its rotations, with the consequence that the reuse loop rather than the supermarket shelf is the plausible point of arrival for radio-carried packaging identity.
The sequencing has a practical implication for packaging: nothing in the passport wave touches packaging as such, the first wave's compliance dates cluster at the turn of the decade, and the packaging-specific obligations run earlier, being the obligations dated on this collection's market pages. The confusion the two tracks generate is in substance a confusion about scheduling, which the schedule, stated, resolves.
The convergence on the artefact
The two tracks meet physically. Consider a washing machine in 2029: the machine carries its ESPR passport, resolved through a data carrier its delegated act specifies, whereas its packaging carries the packaging regulation's marks and carriers, comprising sorting pictograms, possibly QR-supplemented, together with EPR identification in the digital layer. The result is one boxed object, two legal information regimes and potentially three or four printed carriers.
The rationalising instrument is the resolver architecture described in the identification article: a single GS1 Digital Link code can, by link type, serve the passport request, the disposal query, the EPR identification and the deposit lookup from one printed symbol, which is the multi-audience arrangement that both regimes' carrier provisions permit in principle. Whether artwork in fact converges on one code, or instead accretes parallel carriers regime by regime, is a design outcome the coming years will settle; the economics of print space favour convergence, whereas the separation of compliance functions favours accretion. The packaging of the early 2030s will make the outcome observable at retail.
Outside the EU, the two tracks' export significance diverges. The ESPR passport binds products placed on the EU market wherever made, so that its data demands reach global supply chains and its sequenced product groups determine the relevant timetable. The packaging track binds packaging on that market with equal extraterritorial reach, but through requirements — labels, carriers and documentation — that this collection's market pages treat as ordinary compliance. What is marketed to non-EU brands as a "DPP for packaging" is, under the law as it stands, the second track described under the first track's name.
The two-track settlement as information design
Beyond its compliance mechanics, the two-track settlement bears on regulatory information design more generally, and three features of it generalise across this collection's subject matter.
The first concerns audience-first architecture. The ESPR passport was designed from the demand side, its structure following the questions of product-lifetime actors — the repairer requiring disassembly data, the refurbisher requiring component provenance, the recycler requiring composition — with access differentiated accordingly. The packaging track was designed from the system side, its data obligations tracing the institutions that handle packaging, namely sorters, EPR schemes, deposit systems and market surveillance, rather than any consumer's questions. The contrast accounts for a feature that practitioners have found difficult to reconcile, namely that packaging, the product class consumers handle most, has the least consumer-facing digital architecture. On the design's own logic, the information consumers act on in respect of packaging, being the bin decision, is served by the printed pictogram, while the remainder concerns machines and institutions. The split accordingly indicates that information regimes are structured by determining which party acts on a given datum before determining where that datum should be placed, which corresponds to the allocation this theme's QR article identifies in claims law as a two-layer doctrine.
The second concerns the cost of a name. In sector discourse, "digital product passport" became the designation of the entire digitalisation wave, and that naming has affected resource allocation, with packaging firms budgeting against the wrong instrument and vendors selling passport-readiness for a regime that excludes their clients' products. Regulatory communication is itself an information design problem: where a legislator separates tracks but one track's name is applied to both, the resulting confusion is built into the architecture as surely as by any of the ambiguous symbols documented elsewhere in this collection. The packaging regulation's data obligations have no distinct name of their own, and the resulting vacuum is filled at present by corrections of the kind this article states.
The third feature is that both tracks, independently, converged on the same carrier layer and the same identification standards. Where two regimes designed by different directorates for different artefacts arrive at a common technical substrate, that substrate becomes infrastructure in the full sense, and the governance questions of consequence migrate from the regimes to the layer they share, which is the analysis advanced in this group's identification article.
Limits of the assertion
The propositions the passport regime does not establish may be stated directly.
The DPP does not apply to packaging as such, which is this article's founding correction. The packaging regulation's data obligations do not constitute an ESPR passport: the anatomy is similar and the law is separate, and conflating them misstates both regimes' timetables and content. Neither track's carriers constitute consumer claims: a QR code or a passport link asserts data availability rather than environmental performance, and the claims-law disciplines documented in this collection apply undiminished to whatever the resolved content states. The passport does not audit itself: attribute integrity rests on the conformity and market-surveillance machinery behind the data, and the concentration of trust identified in respect of machine-facing marks applies with equal force to registries no shopper can read. Finally, neither track was operationally complete at this article's verification date: the ESPR passport awaits its delegated acts' compliance dates, whereas the packaging track's harmonised-label implementing acts remain outstanding. Both regimes are architectures under construction, and operational detail asserted at present should be dated accordingly.
Summary
The passport split allocates two artefacts to two regimes without duplication, and the packaging track's system-facing design corresponds to the institutions that in fact determine packaging's fate, namely sorting, EPR and deposit systems, rather than to product-lifetime actors. Its cost is the confusion this article addresses: compliance resources are being sold, and budgeted, against a "packaging DPP" that does not exist in law, while the obligations that do exist — documentation live since 2026, digital EPR identification from 2027, and carrier-linked reuse labeling from 2029 — arrive under less prominent designations. Taken together, the two tracks constitute the first comprehensive legal architecture in which every package is documented, identified and resolvable, which is the condition under which the printed label can be reduced to what human readers require, the remainder having an alternative location.
Three questions accordingly distinguish the two regimes where details remain unsettled. For any "passport" claim made about packaging, the instrument meant — whether the ESPR's delegated-act machinery or the packaging regulation's own data obligations — determines the timetable, the data model and the enforcement route. For any compliance product offered against a "packaging DPP", the relevant test is whether an article number can be cited, since an offer that cannot cite one rests on the conflation this article corrects. For the architecture's endpoint, the carriers rather than the registers are the indicator: the point at which packaging's EPR identification, disposal labeling and reuse data resolve through a single scanned identity, which is technically feasible under the standards described in this theme's digital group, is the point at which the two-track split ceases to be visible to the user, whatever the statutory position.
References
Complydex (n.d.) PPWR labelling requirements: Article 12. Available at: Open source (Accessed: 18 August 2026).
dpp-tool (n.d.) ESPR delegated acts: status and sequencing. Available at: Open source (Accessed: 18 August 2026).
European Commission (2025) ESPR first working plan, COM(2025) 187, 16 April. Referenced via the sequencing analysis cited above.
RAIN Alliance (n.d.) Seamless GS1 Digital Link integration across RAIN RFID and NFC. Available at: Open source (Accessed: 18 August 2026).
Regulation (EU) 2025/40 of the European Parliament and of the Council of 19 December 2024 on packaging and packaging waste, OJ L, 2025/40, 22.1.2025. Available at: Open source (Accessed: 18 August 2026).
Note on sources and verification
Packaging's exclusion from ESPR delegated acts, the first working plan's product-group sequencing and its April 2025 adoption are from the sequencing analysis cited, which tracks the Commission instrument; the working plan itself (COM(2025) 187) was not machine-retrieved and is referenced through that analysis. The packaging track's components — documentation and declaration obligations live from August 2026, unique identification, harmonised labels with QR supplementation, the reuse data carrier, and digital-only EPR identification from February 2027 — follow packaging-regulation research conducted for this collection and documented in the theme's earlier articles, with the recurring limitation that the Regulation's article-level verbatim text could not be machine-extracted; recital-level text and two compliance analyses corroborate each element. The ESPR passport's access-differentiation and attribute scope are stated at the level of the regulation's public descriptions; its delegated-act detail post-dates verification. The washing-machine illustration is hypothetical.
Last verified: 18 August 2026.