What is a Digital Product Passport (DPP)?

A Digital Product Passport (DPP) is a digital record linked to a physical product via a QR code or NFC on the care label, containing mandatory sustainability, material composition, supply chain, and compliance data required by EU Regulation 2024/1781 (ESPR). Each DPP carries a Unique Product Identifier (UPID) and links to the EU Central DPP Registry.

Who needs a Digital Product Passport?

Under ESPR Article 4, any economic operator that places a regulated product on the EU market must ensure a DPP exists — regardless of where the product is manufactured. For textiles this includes manufacturers, importers, distributors, and brands. Bangladesh's approximately 4,500 RMG export factories are directly affected because their products enter the EU market.

When is DPP mandatory for textile factories?

ESPR was adopted on 18 July 2024. The EU Central DPP Registry launches 19 July 2026. The Textile Delegated Act, which sets the precise data requirements, is expected late 2026 or early 2027. Enforcement for textiles is expected 2028–2029, giving factories an 18–24 month implementation window after the Delegated Act publishes.

Can a Bangladesh factory submit a DPP without the EU brand?

Yes. ESPR Article 2(32) defines a 'DPP Service Provider' that may create, host, and submit DPPs on behalf of the responsible economic operator. The factory retains data ownership. This allows a Bangladesh factory to be DPP-ready before its EU buyers complete their own systems.

What data must a textile DPP contain?

Per ESPR Article 7 plus the draft Textile Delegated Act, mandatory fields include: Unique Product Identifier (UPID), GTIN, Economic Operator ID (EOID), facility ID, product category, fibre composition (must total 100%), country of origin, carbon footprint (kgCO2eq), recyclability percentage, care instructions, end-of-life instructions, SVHC declaration per REACH Article 33, and chemicals used (CAS numbers).

What is an EOID and how do factories get one?

An Economic Operator Identifier (EOID) is a unique business identifier required for the EU DPP Registry. The European Commission has not yet finalised the EOID issuance system. Likely candidates include EU EORI numbers for established importers and a GS1-issued identifier (similar to GLN) for non-EU manufacturers. DPP Global registers EOIDs on behalf of factories once the system goes live.

Can a published DPP be edited later?

No. Under ESPR Article 9, published DPPs are immutable. Any change requires creating a new version with its own SHA-256 hash for tamper-proof audit. Both versions remain accessible for at least 10 years (ESPR data retention requirement).

What are the penalties for non-compliance?

ESPR Article 74 leaves penalties to Member States, but they must be 'effective, proportionate and dissuasive'. Customs may refuse entry of products without a valid DPP. Brands may de-source factories that cannot supply compliant DPPs. Practical risk: loss of EU buyer relationships, which represent over 60% of Bangladesh RMG exports.

How does DPP differ from the Higg Index or BSCI?

Higg Index (Sustainable Apparel Coalition) and BSCI (amfori) are voluntary buyer-side audit programs. DPP is a legally mandated, product-level public record. They are complementary: Higg/BSCI data feeds into DPP fields, but DPP adds legal force, traceability via QR, and EU-wide accessibility.

How long must DPP data be retained?

ESPR Article 12 requires DPP data to remain accessible for at least the expected lifetime of the product, with a minimum of 10 years from when the product was last placed on the market. DPP Global stores data in AWS Frankfurt EU region for compliance with both ESPR and GDPR data residency rules.

Does DPP comply with GDPR?

DPPs do not contain personal data of consumers or workers, so GDPR application is limited. However, factory user accounts on the platform are GDPR-protected. DPP Global maintains a Records of Processing Activities (RoPA), an appointed DPO, and 72-hour breach notification per GDPR Article 33.

What chemicals must be declared in a textile DPP?

Per REACH Article 33 referenced in ESPR, any Substance of Very High Concern (SVHC) on the ECHA Candidate List present at >0.1% w/w must be declared by name and CAS number. The current ECHA list contains over 240 substances. DPP Global syncs the ECHA list weekly and flags any matches automatically.

What is the EU Central DPP Registry?

A European Commission-operated registry, launching 19 July 2026, that stores the unique identifiers and metadata of every DPP. It is the source-of-truth lookup for customs, market surveillance authorities, and recyclers. Each DPP must be registered there, even if data is hosted by a private DPP Service Provider.

Will DPP affect H&M, Zara, Inditex, or Uniqlo sourcing decisions?

Yes, materially. Major EU buyers including H&M Group, Inditex, C&A, and Bestseller have publicly committed to DPP readiness ahead of the 2028–2029 enforcement window. Factories that cannot provide DPP-ready data risk losing PO allocation. Several brands have stated DPP capability will be a sourcing prerequisite by 2027.

How much does DPP compliance cost a Bangladesh factory?

DPP Global pricing starts at $99/month (Starter, 500 DPPs). Professional tier at $499/month covers 5,000 DPPs with AI extraction, carbon calculator, and 24-language EU output. Compared to in-house implementation cost (estimated $50,000–$200,000 for ERP integration plus annual maintenance), the SaaS model reduces compliance cost by 80–95% for typical mid-sized factories.

About & Contact — DPP Global

About Us

Built by Compliance Specialists for
Bangladesh's Garment Industry

DPP Global is a factory-side EU Digital Product Passport (DPP) platform built for Bangladesh's RMG exporters. We help garment factories generate ESPR 2024/1781-compliant passports and QR codes, and submit them to the EU Central Registry — turning compliance into a competitive advantage with EU buyers, buying houses, and recyclers.

About & Trust Signals

Built by Compliance Specialists.
Trusted by Buyers and Recyclers.

Compliance Team

10+ years RMG compliance

Our compliance leads have managed BSCI, SEDEX, OEKO-TEX, GOTS, and GRS certifications across 200+ Bangladesh factories. Engineering team has shipped production systems on Cloudflare Workers since 2023.

Data Residency

EU AWS Frankfurt

All DPP data stored in eu-central-1 (Frankfurt). Encryption at rest (AES-256) and in transit (TLS 1.3). 30-day rolling backups, 10-year cold archive in S3 Glacier per ESPR retention rules.

Security & Audit

ISO 27001 (in progress)

SOC 2 Type II planned. Penetration testing scheduled before public launch. Argon2id-class password hashing (scrypt N=16384), mandatory 2FA for admin, immutable audit trail with SHA-256 hashing of every published DPP version.

Industry Partnerships

BGMEA · BKMEA · BTMA

Member-discount partnerships with Bangladesh's three principal garment trade associations. Integration with EU buyer compliance teams (Tier-1 brands) for direct data exchange.

Security Policy · Privacy & DPO · Research · Press & News

Contact Us

Get in Touch.
We Respond Within 24 Hours.

📧

Email

hello@dppbangladesh.com

📍

Office

Dhaka, Bangladesh
EU inquiries also welcome

💬

+880 1700-DPP-BOT
Mon–Fri 9AM–6PM (BST)

🤝

Partnerships

BGMEA/BKMEA partnerships,
EU buyer referral programmes,
white-label licensing

Free DPP Readiness Assessment

Not sure where to start? Book a free 30-minute call with our compliance team. We will assess your factory readiness and provide a custom DPP implementation roadmap.

Send Us a Message

Factory Name

Email Address

Enquiry Type

Number of EU-destined SKUs

Message

Built by Compliance Specialists forBangladesh's Garment Industry

Built by Compliance Specialists.Trusted by Buyers and Recyclers.

Get in Touch.We Respond Within 24 Hours.

Built by Compliance Specialists for
Bangladesh's Garment Industry

Built by Compliance Specialists.
Trusted by Buyers and Recyclers.

Get in Touch.
We Respond Within 24 Hours.