The EU Digital Product Passport Registry is operational, but that does not mean every display frame sold today must already carry a passport. The Ecodesign for Sustainable Products Regulation creates a framework. Product obligations depend on applicable delegated acts that define the covered product group, data, carrier, access rights, level and timing. A self-made QR code does not turn a frame into an official DPP.
This guide is for EU importers, private-label brands, retailers and OEM/ODM frame suppliers deciding what to do in 2026. It explains how to test whether a current product-specific duty exists and how to prepare useful data without claiming more than the law supports. It is not an ESPR classification, delegated-act interpretation, DPP registration service, cybersecurity design or legal opinion.
The short answer: check the applicable product rule
Regulation (EU) 2024/1781 says products can be required to have a DPP in accordance with applicable delegated acts. Those acts are expected to specify the product group and the passport's content, data carrier, placement, model, batch or item level, access rights, update responsibilities and availability period. The framework alone does not supply every answer for every product.
Before asking a supplier for a “DPP certificate,” identify the exact frame and search for a current delegated act or other Union legislation that covers it and requires a passport. Record the legal instrument, product definition, application date and transitional provisions. If no applicable act is found, mark the result “no current product-specific DPP duty identified in this review,” not “permanently exempt.”
The Registry going live is infrastructure, not automatic scope
Commission Implementing Regulation (EU) 2026/1778 lays down arrangements for the DPP Registry, including roles, authentication, registration and operation. The Commission announced the Registry as live in July 2026. This is an important implementation milestone because it gives covered economic operators and authorities an operating system for passports that Union law requires.
The implementing regulation also describes the registry in relation to products covered by relevant delegated acts and other legislation. It does not say that every ordinary product must be registered immediately. Procurement teams should separate three statuses: the technical registry exists; a product group has a legal passport requirement; and the exact SKU has a valid passport created by the responsible operator.
Do not assume a display frame is furniture
The Commission's ESPR and Energy Labelling Working Plan 2025–2030 prioritises furniture among final products. A display frame may be used in a home, office, hotel, university, club or retail space, but location does not establish that it falls within the future furniture measure. Product definitions will matter when requirements are developed and adopted.
Write the frame's objective characteristics: wall-mounted or freestanding, empty or object-holding, decorative or illuminated, materials, dimensions, function, intended user and sales category. Ask qualified advisers to compare those facts with any adopted product definition. Do not advertise “furniture DPP ready” because a working-plan table contains the word furniture.
Do not assume an aluminium frame is covered as aluminium
The working plan also prioritises aluminium as an intermediate product. A finished display frame containing an aluminium profile is not necessarily treated as the intermediate aluminium product addressed by a future measure. The imported configuration, processing, classification and eventual delegated-act definition must be reviewed.
Keep both levels visible in the data model: the finished frame and its aluminium component. The upstream profile may later carry information useful to a downstream passport even if the final product follows another rule. This is a reason to request traceable material data now, not a reason to state that the finished frame already has an aluminium DPP obligation.
Create a product-scope decision record
For each SKU, record the product name, identifier, configuration, intended use, relevant classifications, material summary, EU economic operator, sources searched, possible product groups, applicable act if any, effective date, adviser, conclusion and next review trigger. Link the decision to a photo and technical drawing so another team can recognise the product.
Review the record when a frame becomes illuminated, connected, battery-powered, floor-standing or bundled with another regulated product. A passive certificate frame and a digital photo display may not follow the same Union legislation. Product naming on a marketplace cannot replace a technical description.
Build the bill of materials at useful granularity
Map frame profile, glazing, mat, printed insert, backing, stand, wall hardware, plaque, fasteners, adhesives, coatings and packaging. For each component, keep the supplier, production site, material family, internal code, mass or dimensions where relevant, recycled or certified attributes only where evidenced, and approved alternatives. Mark confidential fields and the party authorised to see them.
A single line saying “mixed materials” cannot support repair, recycling, substance or sourcing questions. The opposite extreme—collecting every factory process parameter without purpose—creates cost and security risk. Start with information that identifies the product, supports procurement and can be validated. Expand only when an applicable act or business need defines the requirement.
Use stable identifiers before designing a passport
Choose product and model identifiers that remain unique and controlled across the brand, supplier, packaging, ERP, retailer feeds and reorders. Record factory and economic-operator identities accurately. The ESPR framework anticipates unique product, operator and facility identifiers, but the applicable act and technical rules determine how they must be used.
Do not invent an “EU DPP number” or recycle one code across materially different models. If the business already uses GTIN, SKU or another identifier, document ownership, uniqueness, versioning and the link to the technical file. Identifier governance is valuable today even before it becomes a passport field.
Prepare for model, batch or item-level choices
Regulation (EU) 2024/1781 allows product-specific rules to specify whether the passport operates at model, batch or item level. A frame programme needs different systems for each. Model-level data can describe a stable construction; batch-level data can capture site and material period; item-level data can support serialised products but adds operational complexity.
Do not select item-level serialization because it sounds more advanced. Map which facts vary by model, colour, size, batch, factory and individual unit. Keep batch and production records even if the customer-facing identifier is model-based. When a delegated act arrives, this map will make implementation faster and less error-prone.
Assign data ownership across the value chain
The brand may own the SKU and consumer content. The manufacturer controls final assembly facts. A profile mill, board producer, coating supplier or packaging converter controls upstream material records. The EU importer places the product on the market. A DPP service provider may host or process data when legally and contractually appropriate. Write who creates, verifies, updates and retains each field.
A supplier should not be asked to guarantee data it cannot see upstream, and an importer should not accept a completed spreadsheet without provenance. Use statuses such as verified document, supplier declaration, calculated value, buyer-provided data and unresolved. Preserve the source, date, unit, product revision and reviewer for every material claim.
Protect confidential manufacturing information
The ESPR framework anticipates differentiated access to passport data. Not every actor necessarily sees every field. Buyers should therefore classify information now: public product facts, customer-facing instructions, authority access, supply-chain access and confidential process or commercial data. Qualified legal and cybersecurity teams should design the final access model.
Do not put confidential formulations, supplier prices, personal data or customer artwork into a public QR landing page. The regulation states that customer personal data should not be stored without explicit consent. A practical data map identifies what must be shared, what can be restricted and what should remain outside the passport.
Keep evidence behind sustainability fields
A material name, recycled-content percentage, repair instruction or end-of-life statement must connect to evidence. Store the source document, scope, method, supplier, production period and limitations. A DPP is a container for data; it does not independently verify a claim or make unsupported information lawful.
Align the data set with the separate EU green-claims review. If a supplier changes from solid wood to wrapped MDF or from one aluminium profile source to another, both the product data and any customer-facing claim may need review. Do not copy a sustainability statement from a marketing page into the passport database without checking its basis.
Design a supplier data schedule for the quotation
Attach a table to the RFQ that identifies required facts, format, responsible party, timing, evidence type and confidentiality level. Start with construction, material identity, supplier and site, model and batch references, dimensions, mass, repair or replacement parts where relevant, packaging and change-notice commitments. Mark fields that are future-readiness requests rather than current legal requirements.
This distinction improves quotes. Suppliers can price the real work and disclose gaps instead of buying a generic “DPP package.” The purchase order can require delivery of agreed data before production release or shipment, with legal counsel defining responsibility, audit rights and remedies.
Test data quality on a pilot SKU
Choose one representative frame and reconcile the design drawing, bill of materials, supplier documents, golden sample, packaging and ERP record. Check units, identifiers, component names, sites, dates and revision control. Ask a colleague unfamiliar with the project to trace a field back to its source. If they cannot, the future passport will not solve the problem.
Use the pilot to find manual bottlenecks and ambiguous ownership. Then decide which data belong in the product lifecycle system, supplier portal, ERP or controlled document store. Avoid building a large custom platform before the applicable product requirements and business case are clear.
Plan the data carrier only after requirements are known
The applicable rules can specify the data carrier, layout and positioning. Until then, a brand may use a QR code for instructions or product information, but it should label that function honestly. It must not present an ordinary marketing page as an official ESPR passport or imply registration that has not occurred.
When a carrier is required, check durability, readability, placement on product, packaging or documentation, replacement handling and accessibility before print approval. Connect the physical code to a persistent identifier and tested URL. Packaging redesign, marketplace images and retailer feeds may all need coordinated changes.
Separate the DPP from the product page
An ecommerce page can describe the frame, options, installation and enquiry route. A DPP can contain regulated and role-specific information connected to the product. They may link to each other, but they have different governance. Marketing copy changes quickly; compliance data needs controlled updates and availability over the period set by law.
Do not make the DPP disappear when a campaign page is retired or a supplier relationship ends. The ESPR framework addresses continued availability and backup arrangements. Contract and system design should plan for service-provider change, insolvency, product discontinuation and long-term access.
Control revisions and reorders
Create change triggers for material, component supplier, production site, coating, adhesive, construction, dimensions, repair method, packaging, identifier and responsible economic operator. The supplier should notify the buyer before implementation. The product-data owner decides which records, claims and passport fields require update.
Version the dataset rather than overwriting history. A product sold in 2027 may not share the same construction as a 2026 batch even when the retail name is unchanged. Keep effective dates and lot linkage so authorities, customers and service partners are not shown current data for an older item.
Use a practical readiness checklist
- Exact frame configuration, intended use and legal product-scope record.
- Applicable delegated act or other DPP requirement, if identified.
- Current conclusion, adviser, source links and next review date.
- Stable model, SKU, batch and facility identifiers.
- Component-level bill of materials and approved alternatives.
- Supplier, site, evidence source, date and data-quality status.
- Public, restricted, authority and confidential access classes.
- Owner for create, verify, update, retain and correct.
- Marketing claims separated from substantiating evidence.
- Carrier and placement left open until the applicable rule is known.
- System continuity and backup responsibility.
- Change triggers tied to reorders and product revisions.
Avoid six common false starts
Do not buy a DPP certificate with no legal basis. Do not assume a frame is furniture or intermediate aluminium. Do not register placeholder data as if verified. Do not publish confidential supplier information. Do not attach one QR code to several materially different models. Do not promise an implementation date that the adopted product rule has not set.
A credible buyer says what is known and what is pending. The most useful 2026 preparation is a clean product identity, bill of materials, supplier evidence chain, identifiers, role matrix and change-control process. Those assets support procurement today and can be mapped to future delegated requirements when they become concrete.
Experience scope and project limits
Editorial review: Jessica, Founder & Project Advisor at DOREMI Display. Updated 1 September 2026. Jessica's practical scope covers frame specifications, material and sample coordination, packaging, supplier data requests, manufacturing handover and reorder control. She is not presented as an EU regulator, ESPR lawyer, DPP registry operator, data architect, conformity body or cybersecurity auditor.
This guide cannot decide whether a specific frame is within a product group, confirm a current or future DPP duty, create an official passport, approve an identifier or define access rights. EU economic operators should use the current delegated acts and qualified legal, technical, data and security advisers for the actual product.