EU Central DPP Registry Explained: What It Is and How to Register
What the EU's central DPP registry stores, how companies register their products, the role of DPP service providers, and the go-live date of July 2026.
A common misconception about the EU Digital Product Passport is that it requires storing all product data in a single, centralized government database. In reality, the DPP architecture is deliberately decentralized — and the central registry plays a far more focused role.
This article explains what the EU central DPP registry actually does, what it stores, and how companies register their products.
What the Registry Is (and Isn’t)
The ESPR mandates a central DPP registry that must be operational by 19 July 2026. Its role is precisely defined:
What the Registry IS:
- A directory/index linking unique product identifiers to where passport data is stored
- A validation endpoint for verifying passport authenticity
- A registry of DPP service providers
- An access rights management system
What the Registry IS NOT:
- Not a data warehouse storing full passport contents
- Not a replacement for product data management systems
- Not a single point of failure (the decentralized model ensures resilience)
Decentralized DPP Architecture:
┌─────────────────────┐
│ EU CENTRAL │
│ DPP REGISTRY │
│ (July 2026) │
└──────────┬──────────┘
│
┌──────────────────────┼──────────────────────┐
│ │ │
▼ ▼ ▼
┌───────────────┐ ┌───────────────┐ ┌───────────────┐
│ Brand A's DPP │ │ Brand B's DPP │ │ Recycler's │
│ Database │ │ Database │ │ Verification │
│ (Hosted) │ │ (Hosted) │ │ Endpoint │
└───────────────┘ └───────────────┘ └───────────────┘
The registry holds pointers and validation keys, not the product data itself. This prevents a single point of failure while ensuring all passports can be discovered and verified.
What Data the Registry Stores
| Data Element | Purpose | Visibility |
|---|---|---|
| Unique Product Identifier (UPI) | Primary lookup key | Public |
| Brand / Manufacturer identity | Who created the DPP | Public |
| DPP hosting location (URL) | Where to find the actual passport data | Public |
| Cryptographic hash of DPP data | Tamper-evidence verification | Public |
| Public key for signature verification | Authenticate data origin | Public |
| DPP service provider ID | Who manages the passport | Public |
| Access rights rules | Who can see what | Role-based |
| Audit log | Who accessed/when | Regulator |
The Registration Process
Registering a product in the EU DPP registry involves several steps:
1. Obtain EORI Number
└── EU customs identification number (required for all importers)
2. Register as DPP Data Declarant
└── Validate company identity with registry
└── Designate EU Authorised Representative (non-EU manufacturers)
3. Assign Product Identifiers
└── Obtain GTINs from GS1
└── Create GS1 Digital Link URIs
4. Generate DPP Data Payload
└── Structured JSON-LD per delegated act requirements
└── Digitally signed by manufacturer
5. Register with Central Registry
└── Submit UPI, hosting URL, cryptographic hash
└── Registry validates and indexes
6. Deploy Data Carrier
└── Print QR code encoding GS1 Digital Link
└── Attach NFC/RFID tag to product
7. Compliance Verification
└── Customs scans carrier → resolves GS1 link → validates against registry
Role of DPP Service Providers
Most companies will not interact directly with the central registry. Instead, they will use DPP Service Providers — authorized third parties that handle the technical infrastructure:
| Service Provider Role | Examples of Services |
|---|---|
| DPP Platform | Create, host, and manage passport data |
| Data Collection | Aggregate supplier data across supply chain tiers |
| Verification | Third-party audit and certification integration |
| Registry Interface | Submit and manage registry entries on behalf of brands |
| Lifecycle Management | Update passports, manage access rights, handle transfers |
The Commission will establish an authorization framework for DPP service providers, ensuring they meet security, interoperability, and data protection standards.
Cost of Registration
The exact fee structure for the central registry has not been finalized, but expected costs include:
| Item | Estimated Cost |
|---|---|
| GS1 GTIN assignment | One-time fee (varies by company size and GTIN volume) |
| Registry registration fee | Nominal annual fee per product (under discussion) |
| DPP service provider subscription | €50-300/month (SME solutions) to €15k+/year (enterprise) |
| Data carrier (QR code) | <€0.01 per unit |
Timeline
| Date | Milestone |
|---|---|
| 19 July 2026 | Central DPP registry operational |
| 2025–2026 | CEN/CENELEC JTC 24 develops 8 interoperability standards |
| By March 2026 | Standards published; registry technical specifications finalized |
| Mid-2026 | DPP service provider authorization framework published |
Preparation Steps
- Obtain your EORI number if you don’t already have one
- Register with GS1 for GTIN allocation
- Evaluate DPP service providers — compare platforms for your sector and scale
- Prepare product data in structured digital format (JSON-LD)
- Designate an EU Authorised Representative if you are a non-EU manufacturer
The central registry is the linchpin of the DPP system — not as a massive data repository, but as the trust anchor that ensures any passport, anywhere, can be discovered and verified by any authorized stakeholder.
Related B2B Compliance Intelligence
- Standardizing Digital Product Passports with GS1 Digital Link Syntax: Under the EU ESPR, physical data carriers must resolve to standardized web locations. How do engineers implement GS1 Dig…
- Automating E-Waste Sorting: How Recyclers Use RFID Passports to Reclaim Precious Metals: High-volume precious metal reclamation from printed circuit boards requires ultra-accurate mechanical sorting. How do e-…
- The 2028 Smartphone Deadline: Preparing Apple, Samsung, and Google for ESPR Compliance: The European Commission has targeted smartphones and tablets for early mandatory Digital Product Passports. What are the…
📚 Regulatory & Academic Bibliography
- European Commission - ESPR Guidelines: Official EUR-Lex circular economy directives and delegated acts.
- GS1 Global Standards Registry: Technical specifications for GTIN-14 and resolver architectures.
- W3C Verifiable Credentials Core 2.0: Cryptographic verification protocols and JSON-LD syntax rules.
- ISO Quality Management Systems Catalog: Forensic laboratory and testing competence requirements (ISO 17025).