DPP Regulation 2026: Registry Draft, ISO/IEC JTC 5, and New Legislation

The EU published the Registry draft, ISO/IEC JTC 5 begins its work, and the Bundestag passed the Ecodesign Act — a comprehensive overview of the current state of DPP regulation.

by QR3 Redaktion

DPP Regulation 2026: Registry Draft, ISO/IEC JTC 5, and New Legislation

May 2026 marks a point of convergence in European and international standardization efforts around the Digital Product Passport (DPP): within just a few weeks, the European Commission published the draft of the central Registry Regulation, ISO and IEC established a dedicated Joint Technical Committee, and the German Bundestag passed the national Ecodesign Act. This article puts these developments in context and explains what they mean in practical terms for manufacturers, importers, and system integrators.

The EU DPP Registry: What the Draft Regulation Actually Requires

Publication and WTO Notification

On April 29, 2026, the European Commission published the long-awaited draft Implementing Regulation on the central DPP Registry. Just a few weeks later, on May 21, the EU formally notified the draft to the WTO Committee on Technical Barriers to Trade (TBT) under reference number G/TBT/N/EU/1211 — a mandatory step that gives other WTO members a 60-day comment period.

What the Registry Stores — and What It Doesn't

The Registry is deliberately lean by design. It stores only three data points per product:

  • the product's Unique Identifier (UID),
  • the resolver endpoint pointing to the actual data model,
  • the associated commodity code (e.g., a GTIN or a harmonized customs tariff code).

Product-specific sustainability data — material composition, carbon footprint, repairability index — are explicitly not within the scope of the Registry. Those remain the domain of sector-specific regulation, in the EU primarily the ESPR Regulation (EU) 2024/1781 and the delegated regulations built on top of it for individual product categories.

This architectural decision has far-reaching consequences: the Registry acts as a global address book, not a data store. Anyone who knows a product's UID can query the responsible resolver — much like the DNS system resolves a domain name to an IP address. The actual data model resides with the manufacturer or an accredited data trustee.

Retention Requirement: 10 Years After Last Placing on the Market

One technically and organizationally demanding requirement is found in the ESPR Regulation: Registry entries must remain available and up to date for at least 10 years after the last time a product is placed on the market. For long-lived industrial goods or vehicles that remain in circulation for decades, this can effectively extend the retention obligation to 20 years or more. System integrators need to plan data migration and archiving strategies from the very beginning of the implementation phase.

ISO/IEC JTC 5: International Standardization with a German Secretariat

Establishment and Mandate

ISO and IEC have officially established Joint Technical Committee 5 (ISO/IEC JTC 5), dedicated exclusively to DPP standardization. The mandate is clearly defined: the committee is to develop international standards that ensure the global interoperability of DPP systems — meaning that a DPP issued in the EU under ESPR requirements is also machine-readable and interpretable in Japan, the United States, or Brazil.

DIN Takes Over the Secretariat

The secretariat is being led by the German Institute for Standardization (DIN) — a signal that years of groundwork by German industry circles is paying off at the international level. Germany, through DIN and VDE, was already active in predecessor bodies and played a significant role in getting the DPP onto the ISO/IEC agenda in the first place.

For companies operating globally, the establishment of JTC 5 is important news: if you are building systems now, you should keep a close eye on the emerging ISO/IEC standards to minimize future migration costs. First working documents are expected by the end of 2026.

National Implementation: Germany's Ecodesign Act

On May 21, 2026, the German Bundestag passed the Ecodesign Act (Ökodesign-Gesetz), which modernizes the national implementation of EU ecodesign and energy labeling rules. The Act strengthens market surveillance authorities, updates sanctioning powers, and establishes legal entitlements for non-commercial repair initiatives to access spare parts.

For DPP implementers, the most relevant aspect is the strengthened market surveillance powers: German authorities are gaining expanded authority to verify the availability and accuracy of DPP data. Companies placing products on the German market should update their internal compliance processes accordingly.

Sector-Specific Predecessors: Batteries and Toys

Battery DPP: Webinar and Practical Guidance

The Battery Regulation (EU) 2023/1542 is the most concrete existing example of a product-specific DPP regime. On May 27, 2026, the European Commission's DG GROW hosted a webinar specifically for the battery industry, addressing data requirements, industry readiness, and SME support. The event makes clear that the Commission is actively working to close the implementation gap between regulatory text and real-world practice.

Toy DPP by 2030

In May 2026, SGS published an analysis of the upcoming toy DPP under the EU Toy Safety Regulation (EU) 2025/2509. The toy DPP is set to replace the existing declaration of conformity and will become mandatory by August 2030. For toy manufacturers, this means you have roughly four years to build out data models, resolver infrastructure, and QR code labeling — a timeline that is realistic, but not comfortable.

Resolver Architecture in the Context of the Registry

The lean design of the EU Registry presupposes that manufacturers or operators maintain a stable, long-lived resolver endpoint. The GS1 Digital Link is the de facto standard for the URL structure that connects UIDs and resolvers. A typical GS1 Digital Link URI for a product with a GTIN looks like this:

https://id.example.com/01/04012345678901

This URI can be used directly as QR code content and is simultaneously machine-readable for automated Registry queries. The transition from linear barcodes to GS1 Digital Link QR codes is accelerating: major retailers are planning to upgrade their point-of-sale systems to 2D-capable scanners by the so-called "Sunrise 2027" date.

EPR Digitalization: The Case for a One-Stop Shop

In May 2026, a coalition of European business associations — including EuroCommerce — called on the European Commission to establish a digital, EU-wide one-stop shop for Extended Producer Responsibility (EPR) as part of the planned Circular Economy Act. The initiative aims to replace today's fragmented EPR compliance landscape — with different registration requirements across 27 member states — with a single unified digital interface. The Circular Economy Act is expected in Q3 2026 and is set to introduce mandatory DPP checks at EU external borders starting in 2028.

Data Quality as an Underestimated Compliance Risk

In May 2026, the CE-RISE project published a comprehensive framework for assessing data quality in DPP content. Deliverable 2.4 addresses metrological traceability, measurement uncertainties, and data quality assessment — with the goal of ensuring that values such as carbon footprints or material shares are comparable and reliable.

This is a frequently underestimated aspect of DPP implementation: it is not enough to provide data — it must also be methodologically consistent and demonstrably correct. Market surveillance authorities will increasingly check not only whether a DPP exists, but also whether the information it contains is plausible and traceable.

Conclusion: Convergence on Multiple Levels Simultaneously

The developments of spring 2026 show that DPP regulation is advancing on three levels at once: the EU is establishing the central infrastructure with the Registry draft, ISO/IEC JTC 5 is laying the foundation for global interoperability, and national legislators such as the Bundestag are creating the enforcement framework. For companies, this means: if you start implementation now, you should factor in resolver infrastructure, data quality processes, and archiving strategies from the outset — and actively follow JTC 5's standardization work to limit the cost of future adjustments.