Digital Product Passport

The European regulatory framework

The law sets the obligation,
the market sets the pace

The Digital Product Passport stems from the European ESPR regulation (EU 2024/1781), in force since July 2024. It is the framework: the passport rules derive from it, and it will become mandatory one sector at a time.

Regulatory timelines and sectors involved

The European working plan prioritises textiles, iron and steel, aluminium, furniture and tyres: planned dates concern the adoption of acts, not the automatic start of obligations. Battery passports are required from 18 February 2027 for industrial batteries above 2 kWh, electric vehicle batteries and light means of transport batteries. The PPWR governs packaging labels and information without imposing a universal DPP for all packaging.

The market moves faster than the rules

Market demands may precede legal obligations: a customer preparing passports for its products may request verifiable data from suppliers. Preparing this data early helps businesses respond to supply-chain requests and assess applicable requirements in good time.

The rules on environmental claims

Since 27 September 2026, the new rules under Directive (EU) 2024/825 against misleading environmental commercial practices have applied. Generic environmental claims require recognised excellent environmental performance relevant to the claim; merely having data is not enough. A DPP can help organise information, but does not by itself certify that a claim complies with the rules.

The strategic value is turning the product from an environmental cost into a permanent circular resource

Read the in-depth guide

Sources and review

Sources checked: 4 November 2026. Planned adoption dates may change; scope and application dates must be checked in the relevant acts.

Building value together

Bring your company into the world of certified data

Enable reliable processes, reduce operational risk and guarantee the quality of information along the entire value chain. Choose Nest Company’s technology.

Contact us

1. POLICY AND MANAGEMENT COMMITMENT

1.1 Policy Statement

The Management of The Nest Company Srl (TNC), aware of the strategic importance of quality and information security in the context of SMEs working with significantly larger enterprise clients, has implemented an appropriate Integrated Management System (IMS) aligned with the principles of ISO 9001:2015 and ISO/IEC 27001:2022 standards, extended to ISO/IEC 27017.

The management of chain of custody, authenticated digital declarations, and the digital product passport involves handling sensitive and critical data for our clients. TNC recognizes that client trust is based on the continuous demonstration of technical competence, regulatory compliance, and management maturity comparable to the highest industry standards.

1.2 Strategic Objectives

Quality Objectives

  • Deliver software and services that meet the specifications and contractual commitments agreed with clients.
  • Ensure that development projects meet traceability, authenticity, and data integrity requirements.
  • Enhance the professional skills of employees and collaborators.
  • Develop innovation initiatives while respecting security and compliance constraints.
  • Maintain a performance-based results evaluation system.

Information Security Objectives

  • Ensure confidentiality, integrity, availability, and resilience of information.
  • Ensure full awareness of managed information and evaluation of its criticality.
  • Guarantee secure access by preventing unauthorized processing.
  • Ensure secure collaboration with third parties.
  • Promote awareness of security-related issues.
  • Promptly detect anomalies and incidents.
  • Ensure authorized access to operational facilities.
  • Ensure compliance with legal and contractual requirements.
  • Detect abnormal events and vulnerabilities.
  • Ensure Business Continuity and Disaster Recovery.

1.3 Commitment of Top Management

  1. Provide adequate resources: Allocate human, technical, and financial resources for the IMS.
  2. Establish clear governance: Define roles, responsibilities, and reporting structures.
  3. Ensure competence: Guarantee continuous staff training.
  4. Promote a security culture: Integrate security into the company culture.
  5. Manage the supply chain: Ensure security standards are applied to suppliers as well.
  6. Monitor and review: Conduct annual reviews of performance and processes.
  7. Communicate the policy: Publish it on the website and communicate it internally.