Ownership and governance
Name the accountable business owner, legal and compliance support, data owners, IT lead and product specialists.
A practical route from regulatory uncertainty and fragmented product data to a governed, testable Digital Product Passport operating model.
Start with capability
A Digital Product Passport connects regulatory requirements to product identity, engineering data, supplier evidence, manufacturing records, customer access and lifecycle updates. No single department owns all of those elements.
Manufacturers should establish a cross-functional programme and prove how information will be governed throughout the product lifecycle. The technology must support that model, but software alone cannot resolve unclear ownership or unreliable source data.
Seven readiness workstreams
Name the accountable business owner, legal and compliance support, data owners, IT lead and product specialists.
Segment the portfolio by product family, market, regulatory route and likely model, batch or item-level passport.
Define persistent product identifiers and test QR, NFC or other permitted carriers in the real operating environment.
Create a field-level dictionary covering meaning, format, units, source, validation, owner and update trigger.
Connect declarations, certificates, instructions and lifecycle events to the correct product and version.
Map ERP, PLM, PIM, MES, QMS, service and supplier data without creating another uncontrolled silo.
Separate public, customer, service, auditor, authority and internal information by role and legitimate need.
Programme ownership
The executive sponsor removes cross-functional barriers. Day-to-day ownership should sit with a named programme lead who can coordinate decisions without taking data ownership away from specialist functions.
Sets priority, funding and cross-functional accountability
Owns product structure, specifications, revisions and technical meaning
Interprets applicable legislation and confirms evidence obligations
Controls approved evidence, release status, corrections and audit trail
Owns integration, identity, security, resilience and support model
Defines creation, attachment, inspection, repair and retirement workflows
Coordinates required supplier and material data
Defines useful customer access and the value proposition beyond compliance
Product selection
A successful demonstration is not enough. The pilot should test identity, data ownership, evidence, physical access, stakeholder permissions and at least one change after publication.
Product-data chain
Every required value should have a definition, system of record, business owner, format, validation rule, access class and update trigger. Evidence needs the same discipline, including version, validity, target product and permitted audience.
What the applicable legislation or business case needs
Who is accountable for accuracy and approval
Where the authoritative value or evidence is maintained
How it is validated, versioned, accessed and updated
Use governed mappings, identifiers, validation and synchronisation to assemble the passport view.
Twelve-week readiness route
Confirm the product, markets, responsible operator, team, success measures and decision boundary.
Map product hierarchy, identifiers, required fields, evidence, source systems and access classes.
Build the product and passport templates, load governed data, issue identifiers and test integrations.
Publish controlled passports, scan physical carriers and test lifecycle events, corrections and restricted access.
Compare passport outputs with sources, resolve data gaps and measure operating effort and failure modes.
Approve, revise or stop based on evidence, then define the next product family and integration depth.
Common failure patterns
Prepare reusable identity, governance and data capabilities now while keeping the final dataset configurable.
Define passport level, identity, resolver and operating workflow before buying carriers at scale.
Keep authoritative ownership clear and exchange governed data from source systems.
Classify evidence and expose only the information appropriate to each stakeholder.
Design corrections, inspections, repairs, status changes and long-term availability from the start.
Use a representative product that exposes real data and workflow problems.
Start with readiness evidence
Use the 30-point readiness checklist to identify gaps, or discuss a controlled UniQorn Trace™ pilot using your real product, evidence and workflow.
Common questions
No. ESPR creates the framework, while product-specific delegated acts determine which products are covered, the required data, passport level and application dates. Separate EU legislation can create passport duties for other product groups.
Establish ownership, segment the product portfolio, assess identifiers and source data, create a governed data dictionary, classify evidence and run a controlled pilot using a configurable architecture.
One accountable business owner is essential, but implementation is cross-functional. Product, compliance, quality, IT, operations, supply chain and commercial teams each own different decisions and data.
The decision depends on architecture, capability, scale and long-term operating cost. Evaluate product identity, data modelling, evidence, permissions, interoperability, persistence, security and regulatory change—not only the user interface.
Yes. Existing systems should normally remain authoritative for the information they govern. The DPP layer maps, validates and publishes the required view while controlling passport identity, access, evidence and lifecycle history.
Start with one representative product family and enough real items or batches to test identity, data, evidence, carrier access, publication, corrections and lifecycle behaviour. The objective is to prove the operating model before scaling.
See Regulation (EU) 2024/1781, particularly Articles 9–13, and the European Commission Digital Product Passport guidance. Verify current product-specific legislation before implementation.
Editorial note: This manufacturer guide provides general readiness information, not legal advice or a claim that every product already requires a DPP.