Everything Garment Factories
Ask About EU DPP Compliance

No — DPPs are only mandatory for products covered by specific Delegated Acts under ESPR. Textiles and garments are in the first priority wave and will require DPPs from 2028–29. Not all categories are covered yet, but garments exported to the EU are confirmed in scope under the ESPR Working Plan 2025–2030.

Products without a valid, registered DPP cannot legally be placed on the EU market after enforcement. EU customs authorities can block shipments and impose penalties on non-compliant importers. Your EU buyers will also likely require DPPs contractually before the regulatory deadline.

No. ESPR Article 9(2)(b) requires the data carrier to be physically on the product itself — not the packaging or a detachable hangtag. For garments, the QR code must be on the permanent care label. This ensures the DPP remains accessible throughout the garment's lifetime and at end-of-life recycling.

Under our Data Processing Agreement (DPA), your factory owns all DPP data. DPPLive acts as your data processor — we store and host, but the data belongs to you. You can export everything in JSON-LD format at any time. ESPR formally places obligation on the EU importer/brand, but data ownership remains with the originating factory.

Yes, unambiguously. ESPR Article 1(2) states it applies to physical goods placed on the EU market regardless of where they are manufactured. The EU Commission confirms requirements "apply in a non-discriminatory manner to EU and non-EU companies." Bangladesh factories are fully in scope through their EU buyer importers.

Yes — and this is a significant competitive advantage. Factories that present live DPPs to EU buyers demonstrate operational maturity and reduce compliance burden on the brand. Under ESPR Article 2(32), DPPLive acts as your certified service provider — enabling you to create, host, and submit DPPs independently, ahead of any buyer demand.

CE marking confirms product safety conformity. OEKO-TEX certifies textile freedom from harmful substances. A DPP is a dynamic digital record permanently accessible via QR code and updated throughout the product's lifecycle. DPPs do not replace certifications — they make all compliance data digitally accessible. OEKO-TEX and GOTS data can be included in your DPP fields.

ESPR Article 10(2) requires four persistent identifiers in every DPP: ① Unique Product Identifier (UPID) — the product's digital fingerprint. ② Unique Operator Identifier (EOID) — your factory's EU operator code. ③ Unique Facility Identifier — your production building/location. ④ Registry Identifier — assigned by the EU Central Registry from July 2026. Our platform generates all four automatically.

ESPR requires DPPs to remain accessible for the expected product lifetime plus 10 years — minimum 10 years total. Even if the DPP service provider ceases operations, the data must remain accessible. This is why we store all DPPs in AWS Frankfurt with S3 Glacier long-term backup, and why EU Registry submission creates an independent permanent copy.

A Delegated Act is a secondary EU legal instrument adopted by the European Commission under the authority of ESPR. ESPR itself is the framework — Delegated Acts set the specific, product-by-product requirements (exact data fields, formats, timelines). The Textile Delegated Act is expected late 2026 / early 2027 and will finalise exactly what data your garment DPPs must contain.

GS1 Digital Link is an international standard that encodes a URL containing a product's GTIN into a QR code. ESPR requires data carriers to use open, interoperable standards — GS1 Digital Link is the industry standard that satisfies this. Our DPP QR codes use the format: https://dpplive.com/01/{GTIN}/dpp — fully compliant and scannable by any standard QR reader.

ESPR Article 74 leaves penalty levels to individual EU Member States, but they must be "effective, proportionate, and dissuasive." Practical consequences include: customs refusal (your shipment cannot enter the EU), administrative fines (Germany has indicated up to €50,000 per non-compliant SKU), and — most importantly for export factories — de-sourcing by EU brands. EU buyers dominate most exporters' order books (over 60% of Bangladesh RMG exports, for example); losing relationships over DPP gaps is the single largest commercial risk.

Higg Index (Sustainable Apparel Coalition) and BSCI (amfori) are voluntary, buyer-side audit programs evaluating environmental and social performance. DPP is a legally mandated, product-level public record — not an audit. They are complementary: data from your existing Higg/BSCI assessments feeds directly into DPP fields (carbon footprint, water use, social compliance), but DPP adds legal force, traceability via QR, and EU-wide accessibility. Factories already running Higg/BSCI have a head start on DPP data collection.

Yes — materially and ahead of the regulatory deadline. H&M Group, Inditex (Zara), C&A, and Bestseller have publicly committed to DPP readiness ahead of 2028–29 enforcement. Several brands have stated DPP capability will be a sourcing prerequisite by 2027. Tier-1 suppliers that cannot supply DPP-ready data risk losing PO allocation. Conversely, factories that demonstrate live DPP capability today often see expanded order share from compliance-conscious buyers.

Per REACH Article 33 (referenced in ESPR), any Substance of Very High Concern (SVHC) on the ECHA Candidate List present at greater than 0.1% w/w must be declared by name and CAS number. The current ECHA list contains over 240 substances, including phthalates, certain azo dyes, and brominated flame retardants. Our platform syncs the ECHA list weekly and automatically flags any matches in your bill-of-material — saving hours of manual cross-checking per DPP.

DPPLive runs on an affordable monthly subscription sized for garment factories — Starter and Professional tiers with AI extraction, carbon calculator, and 24-language EU output (contact us for current pricing). Compared to in-house implementation — estimated $50,000–$200,000 for ERP integration plus annual maintenance — the SaaS model reduces compliance cost by 80–95% for typical mid-sized factories. bKash and Stripe both accepted. 14-day free trial, no card required.

Not yet. The sequence is: 19 July 2026 — the EU Central DPP Registry opens (infrastructure, not an obligation on factories); late 2026 / early 2027 — the Textile Delegated Act finalises the exact data fields; 2028–2029 — expected enforcement for garments. The commercial deadline arrives first: major EU buyers are already writing DPP-readiness into 2026–2027 sourcing terms.

The care label is a static piece of fabric: ISO 3758 wash symbols plus fibre content. A DPP is the dynamic digital record behind the QR code printed on that care label — carbon footprint, REACH Article 33 chemical declarations, traceability, recycled content, and end-of-life instructions, kept accessible for 10+ years. The care label answers “how do I wash this”; the DPP answers “what is this product’s full compliance record.” The DPP does not replace the care label — it lives on it.

The legal duty sits with the responsible economic operator placing the product on the EU market — normally the EU brand or importer. But ESPR Article 2(32) allows a DPP Service Provider to create, host, and submit passports on their behalf, using data that originates at the factory. Three working models exist: brand-managed, factory-managed via a service provider, and hybrid. Full walk-through in our Registry submission guide.

ESPR lets each Delegated Act set the granularity — model, batch, or item level. For most garments the expected answer is model level: one DPP per style/colourway, covering thousands of identical pieces, which keeps cost per garment negligible. Batch level applies where production runs differ meaningfully (e.g., dye lots); item level is reserved for high-value goods.

SCIP is ECHA's database for articles containing SVHC substances above 0.1% w/w, required under the Waste Framework Directive. It is a separate legal duty that the EU importer files — the DPP does not replace it today. The practical overlap: the same REACH Article 33 screening that fills your DPP chemical fields produces the SCIP data too, so factories collect once and report twice. The Commission has signalled long-term convergence of the two systems.

Regulatory liability sits with the responsible economic operator (the EU brand/importer) under member-state penalties per ESPR Article 74. The factory's exposure is contractual: EU supply agreements increasingly include DPP-accuracy clauses and audit rights. Because published DPPs are immutable and versioned with SHA-256 hashes, the audit trail shows exactly who entered what and when — accurate data at source is the factory's best protection.

Yes — that is the design of the system. The EU Central Registry (ESPR Article 13) exists so customs can automatically cross-check a consignment's product identifiers against registered passports. Once enforcement applies to textiles, a missing or invalid Registry entry can mean the shipment is held or refused. In-market, surveillance authorities additionally spot-scan care-label QR codes. Database checks are systematic; physical scans are random.

Legally, the DPP mandate is EU-only today. The UK has no DPP law yet but is studying alignment; the US has no federal mandate, though New York's proposed Fashion Act includes disclosure duties; France already requires product environmental labelling under its AGEC law. Practically, one ESPR-grade dataset satisfies all of these — factories that build DPP data for the EU are automatically ahead for every other market.

No. A DPP has access tiers. The public view (anyone scanning the QR) shows consumer-level data: fibre composition, origin, care, carbon footprint, recyclability. Detailed supply-chain records, supplier names, and full chemical specifics sit in a restricted tier visible only to authorised roles — customs, market surveillance, recyclers, and buyers you approve. Your commercial data is not published to the open internet, and pricing is never part of a DPP.

No. ESPR is technology-neutral: it requires open interoperable standards, persistent identifiers, and tamper-evidence — all satisfied by conventional infrastructure with SHA-256 version hashing. Some vendors build DPPs on blockchain; that is a design choice, not a legal requirement, and it typically adds cost and complexity. Industry blockchain pilots you may have read about are vendor implementations — the regulation itself never mandates blockchain.

Not a problem. ESPR mandates interoperability and data portability: every DPP exports as structured JSON-LD, and the identifiers (GTIN, UPID, EOID) are platform-neutral by design. Your factory-side data can feed the brand's system directly, or you run passports for your own models while the brand runs theirs — the identifiers link them. There is no lock-in: you can export everything and switch providers at any time.

Not their own garment DPP — the passport attaches to the final product. But Tier 2/3 suppliers must feed the data behind it: fibre origin, dye and chemical inputs with CAS numbers, wet-processing energy data. Expect garment factories to make this a contractual requirement from 2027. Mills and dyehouses that can hand over structured data on request will become preferred suppliers as DPP compliance cascades upstream.

The public view shows: product name and photo, fibre composition, country of origin, carbon footprint, ISO 3758 care symbols, certifications (GOTS, OEKO-TEX, GRS), and recycling guidance. Authorised roles unlock more: approved buyers see the full compliance record, recyclers see the material-recovery and chemical table, authorities see identifiers and registry status. See it yourself in our live demo.

The expected method is the EU Product Environmental Footprint (PEF) — specifically the Apparel & Footwear PEFCR — a lifecycle figure in kgCO₂eq covering raw materials, spinning, knitting/weaving, dyeing and finishing, assembly, and transport. Key inputs are your energy consumption (multiplied by the national grid factor — Bangladesh: 0.61 kgCO₂/kWh), material mix, and wet processing. DPPLive's carbon calculator implements these categories so factories enter consumption data, not formulas.

The passport follows the product — the same care-label QR keeps resolving for the product lifetime plus 10 years. Resale platforms scan it to verify authenticity and composition; recyclers read the fibre and chemical table to decide mechanical vs chemical recovery. This is exactly why Article 9(2)(b) puts the carrier on the product itself. DPP is what makes textile-to-textile recycling economical: for the first time, sorters know precisely what is in each garment.

Yes. ESPR Article 25 bans the destruction of unsold apparel and footwear — for large enterprises from 19 July 2026, for medium-sized enterprises from 2030 (micro and small firms are exempt). Companies must also disclose annually how many unsold products they discard and why. It is the same regulation that created the DPP — together they push the industry from disposal to circularity, and they raise the value of unsold-stock channels like outlets and resale.

With data at hand, minutes. A first manual DPP in DPPLive takes roughly 10–15 minutes; AI extraction from a tech pack or BOM cuts that to 2–3 minutes; new colourways clone an existing passport. The real time cost is one-off: assembling your chemical inventory and carbon inputs the first time typically takes a factory 1–2 weeks. After that, the DPP becomes a routine step in the merchandising checklist for each new style.

Three costs stack up. Lost orders: major EU buyers are making DPP capability a sourcing prerequisite from 2027 — before the legal deadline. Rush premium: implementation and consultancy prices spike near regulatory deadlines, as GDPR showed in 2018. Data debt: carbon baselines and chemical inventories take months to backfill accurately. Starting now costs a modest monthly subscription; starting in late 2027 costs the same subscription plus the scramble — and possibly the buyer.

A Digital Product Passport is a digital record permanently linked to a physical product via a QR code or NFC tag on the care label. It carries the sustainability, material-composition, supply-chain and compliance data required by EU Regulation 2024/1781 (ESPR): fibre composition, carbon footprint, chemicals, care and recycling instructions. Each passport has a Unique Product Identifier (UPID) and links to the EU Central DPP Registry.

Three moving parts. Identifiers: the product gets a GTIN and UPID, the company an EOID. Data carrier: a GS1 Digital Link QR code on the care label resolves to the passport's permanent URL. Registry: the identifiers are lodged with the EU Central DPP Registry — the lookup customs and market surveillance use. Anyone scanning the code sees the live passport — fibre composition, carbon footprint, chemical declarations, care and recycling guidance — for at least 10 years.

Per ESPR Article 7 plus the draft Textile Delegated Act, the mandatory fields include: UPID, GTIN, EOID and facility ID; product category; fibre composition totalling 100%; country of origin; carbon footprint (kgCO2eq); recyclability percentage; care instructions; end-of-life instructions; an SVHC declaration per REACH Article 33; and chemicals used with CAS numbers.

Batteries lead with the only hard date — 18 February 2027, under their own Regulation 2023/1542. Under the ESPR Working Plan 2025–2030 the first ESPR wave covers textiles, iron & steel, aluminium, furniture, tyres and mattresses — steel and aluminium reach garment factories early through zippers, buttons and trims. For garments the sequence is: Textile Delegated Act late 2026/early 2027, enforcement expected 2028–2029.

A European Commission-operated registry, opening 19 July 2026, that stores each passport's identifiers and metadata — not the full data, which stays with your DPP Service Provider. It is the source-of-truth lookup for customs, market surveillance authorities and recyclers. Every DPP must be registered there before its product is placed on the EU market.

Five steps: (1) complete every mandatory data field per ESPR Article 7; (2) validate — published passports are immutable under Article 9, so errors must be caught first; (3) publish the passport at its permanent GS1 Digital Link URL; (4) lodge the UPID, GTIN, EOID and facility ID with the Registry, which returns a registry identifier; (5) keep it current with a new version for any material change. A DPP Service Provider automates steps 2–5; the Registry accepts submissions from 19 July 2026.

Not with a free QR generator. A compliant carrier encodes a GS1 Digital Link URL built on the product's GTIN (format: https://domain/01/GTIN) and must resolve to the live passport for 10+ years. In practice: get a GTIN from your national GS1 office, let your DPP platform generate the Digital Link QR, print it at roughly 15×15 mm on the care label, and test-scan after wash cycles. Static codes with no identifier structure fail ESPR conformity checks.

An Economic Operator Identifier is the unique business ID the EU DPP Registry uses to record who placed the product on the market. The European Commission has not finalised issuance yet — the likely routes are EU EORI numbers for importers and a GS1-issued identifier for non-EU manufacturers. Nothing to do today: DPPLive registers EOIDs on behalf of factories once the system goes live.

No. Under ESPR Article 9 a published DPP is immutable. Any correction means publishing a new version with its own SHA-256 hash, creating a tamper-proof audit chain — and both versions remain accessible for at least 10 years under the retention rules.

A DPP contains product data, not personal data of consumers or workers, so GDPR exposure is limited by design. Where GDPR does apply is the platform around it — factory user accounts and contact details. DPPLive maintains EU data residency (AWS Frankfurt), a Records of Processing Activities, an appointed DPO, and 72-hour breach notification per GDPR Article 33.

ESPR places the duty on the economic operator placing the product on the EU market — for most Bangladesh-made garments that is the EU brand or importer of record. In practice the obligation flows down the chain: the importer can only comply with data the factory supplies, so purchase orders increasingly make passport-ready data a delivery condition. A factory that owns its data keeps both the liability conversation and the order simple.

Start with data, not software. (1) Collect what is already certain: fibre composition, country of origin, REACH Article 33 chemical declarations, care instructions. (2) Secure a GTIN from GS1 Bangladesh. (3) Run one pilot DPP for one style, end to end. None of this needs an IT department — a merchandiser with a spreadsheet can prepare the first passport in days, and our free readiness assessment shows which gaps to close first.

Test five things: data ownership with export (structured JSON-LD download any time — no export is the single biggest red flag); EU data residency and 10-year hosting; GS1 Digital Link carriers; Registry submission support from 19 July 2026; and compliance updates such as ECHA/SVHC sync. Price matters less than these legal guarantees — they are what an audit tests. Our provider-evaluation guide has the full row-by-row checklist.