The European Union's phased Digital Product Passport (DPP) mandate is forcing automotive manufacturers, tier suppliers, and logistics operators to overhaul data infrastructure, cross-border contracting, and procurement systems ahead of hard compliance deadlines beginning in February 2027.
Background
The DPP is a digital data container designed to enhance transparency, traceability, and circularity by providing standardized, product-specific sustainability and lifecycle data. Developed under the European Green Deal and the EU's circular economy strategy, the passport is established under Regulation (EU) 2024/1781 on the Ecodesign for Sustainable Products (ESPR), which makes a digital passport mandatory for most products marketed in the EU.
The ESPR has been in force since 18 July 2024. In April 2025, the European Commission adopted its first ESPR Working Plan for 2025-2030, setting out priority product groups for future requirements. For the automotive sector, the EU's End-of-Life Vehicles (ELV) Directive has long aimed to improve vehicle recycling and promote the use of recycled materials. As part of its broader circularity agenda, the European Commission has proposed a new regulation replacing the existing ELV Directive that introduces several transformative measures, including a mandatory DPP for vehicles.
Details
The first firm deadline in the automotive sector is the Battery Passport. By February 18, 2027, every industrial and electric vehicle (EV) battery with a capacity exceeding 2 kWh sold in the EU must carry a Battery Passport-a comprehensive digital record tracking the battery's entire lifecycle, from raw material extraction to end-of-life recycling. Required data fields include battery chemistry and material composition (covering weight percentages of cobalt, lithium, nickel, and lead), the carbon footprint of the manufacturing process, and recycled content percentages with mandatory minimum thresholds that increase over time.1Digital Product Passport (DPP): all you need to know
The scope then widens substantially. Tyre DPP delegated acts are expected to be finalized in 2027-2028, with compliance required 18-24 months after publication. Vehicle component delegated acts are anticipated in 2028-2029 and could cover electronic control units, catalytic converters, and safety-critical parts. Vehicle-level DPP requirements are likely to emerge in 2029-2030, aggregating component-level data into comprehensive vehicle passports. Under the proposed ELV Regulation, all vehicles placed on the market must carry an Environmental Vehicle Passport from 72 months after entry into force.
Data interoperability represents the central operational challenge. The automotive supply chain's complexity poses unique hurdles: a single vehicle may contain components from five or more supplier tiers, with raw materials originating from mines and refineries across multiple continents. The ESPR requires DPP data to cover the entire value chain, meaning OEMs must gather and verify information from every tier. Key challenges include multi-tier supply chain complexity, where 60-80% of required DPP data comes from suppliers across multiple tiers, many with differing technical capabilities. An automotive OEM's Battery Passport, for example, requires data from battery cell manufacturers down to raw material miners and recyclers-no single entity holds all the necessary information.
The ESPR mandates that DPP data be structured in open, machine-readable formats such as XML or JSON to ensure interoperability and prevent vendor lock-in, with compliance required under international standards such as ISO/IEC 15459 for unique identifiers. Industry frameworks including GS1 and Catena-X further support consistent data exchange across supply chains.
Market readiness remains low. According to KPMG's 2026 European Digital Product Passport Readiness Survey, 81% of European companies lack structured lifecycle data required for DPP compliance. The largest barriers are data fragmentation, supplier transparency, and system interoperability. While the concept is straightforward, executing it across complex global supply chains introduces significant operational, technical, and organizational hurdles. Data sovereignty tensions further complicate cross-border compliance: EU GDPR mandates European data localization while China's Cybersecurity Law requires in-country storage for certain data categories, forcing manufacturers operating in both markets into difficult compromises.
Under the ESPR, the economic operator who places the product on the EU market-typically the manufacturer or importer-holds primary legal responsibility for the accuracy and completeness of the DPP. If a supplier fails to provide necessary data, the OEM faces market access denial and significant fines that may be levied per non-compliant product sold.
Outlook
Industry experts widely cite a realistic implementation timeline of 12 to 18 months for DPP compliance infrastructure, reflecting the process's complexity. The first ESPR-specific delegated acts have already slipped from late 2025 to mid-2026, following a pattern of delay seen in the Battery Regulation's delegated acts-a pattern suggesting tyre and electronics deadlines may also shift beyond current estimates. A central EU DPP registry and interoperable systems are expected to be operational by mid-2026, laying the data infrastructure foundation that OEMs and suppliers will need to connect to. Procurement teams and legal advisors are already being urged to audit supplier contracts for data-sharing obligations and begin mapping bill-of-materials data against published requirements before the first delegated acts for vehicle components are issued.
