Every product sold into the European Union is about to carry a verifiable digital identity. Not a marketing claim. Not a sustainability badge. A regulated, machine-readable record of what the product is, where it came from, what it is made of, and how it can be repaired, resold, or recycled.
This is the Digital Product Passport, and for luxury brand leaders, it is the most consequential regulatory shift of the decade. The brands preparing now will treat it as a strategic asset. The brands waiting will treat it as a fire drill.
This guide explains what the EU DPP is, why it matters specifically for luxury, what the regulation will require of you, and what kind of infrastructure you need to put in place. We built Veritas to be that infrastructure, and we will explain why at the end.
What is the EU Digital Product Passport?
The Digital Product Passport is a structured, digital record that travels with a physical product throughout its lifetime. It is accessed through a data carrier on or in the product itself, typically a QR code or NFC tag, and links to verified information about the product's materials, origin, environmental impact, repairability, and end-of-life handling.
The DPP is mandated by the Ecodesign for Sustainable Products Regulation (ESPR), which entered into force in July 2024. It is not a recommendation. It is law. The only variable is when your product category's specific rules come into effect.
The regulation applies to any business that places goods on the EU market, including brands headquartered outside Europe. A brand based in New York, Tokyo, or Milan that sells into Paris is in scope.
Why it matters now, even though enforcement is staged
The phase-in is staggered by product group. The European Commission's ESPR Working Plan for 2025 to 2030 names textiles and apparel as a top-priority category, with the delegated act for textiles expected to be adopted in late 2027, followed by an 18-month transition window before enforcement. Footwear is being studied separately, with adjacent timing. Furniture, mattresses, electronics, and many other categories follow through 2030. By the end of the decade, the DPP will cover almost every physical product sold in the EU.
For luxury brands, three deadlines should be on your wall:
- June 2026: The EU central DPP registry goes live alongside full application of the ESPR.
- Late 2027: The textiles delegated act is expected to be adopted. Draft rules will appear earlier on the Commission's "Have Your Say" platform.
- 2028 to 2029: Enforcement begins for textiles. By 2030, the DPP is expected to cover effectively all goods placed on the EU market.
Eighteen months sounds like time. It is not. Brands that have run pilots already report that the hardest work is not technology selection. It is the operational work of locating, validating, and structuring product-level data across fragmented supply chains. Industry estimates suggest roughly 82 percent of companies are currently unprepared. The brands that begin building the data foundation now will be the ones who turn 2027 into a competitive moment rather than an emergency.
Why this is a luxury problem, not a generic compliance problem
It is tempting to file the DPP under "regulatory checklist" and hand it to a sustainability team. For luxury, that would be a strategic mistake. The DPP collides with three things that define the category:
Counterfeiting. The DPP requires a verifiable digital identity for every product. A QR code printed on a label can be photographed and cloned in minutes. For mass-market goods, that may be acceptable. For a five-figure handbag or a limited drop, it is not. The same regulation that forces you to create a digital identity is also an opportunity to make that identity un-forgeable, and to finally close the gap between authentic and counterfeit at the unit level.
Resale and the secondary market. The DPP is explicitly designed to support circularity, which means resale, repair, and recycling. The luxury secondary market is already worth tens of billions and growing faster than the primary market. A DPP that authenticates an item at point of sale also authenticates it at every resale, every repair, every consignment. Brands that own this layer keep a relationship with their product across every owner. Brands that do not, hand that relationship to third-party platforms.
Storytelling and provenance. Luxury has always sold provenance. Until now, that story has lived on a hangtag, a certificate of authenticity, or a salesperson's pitch. The DPP makes provenance native to the product itself, accessible by anyone who taps or scans. The brands that treat the DPP as a creative surface, not a regulatory burden, will use it to deepen the relationship between the object and its owner. The object becomes the invitation.
What the DPP will actually require
Specific data fields will be defined by category-specific delegated acts, but the structural requirements are already clear from the ESPR framework and the textiles pilot work led by CIRPASS-2 and the European Commission. Expect every product to carry:
- A unique product identifier, typically built on a serialized GS1 GTIN, that distinguishes one physical unit from another.
- A data carrier physically present on the product, its packaging, or accompanying documentation. QR codes are the dominant pattern; NFC tags are an option the regulation explicitly permits and that several pilots have chosen.
- Verified product data covering material composition, country of origin, manufacturer identity, durability and repairability characteristics, substances of concern, and end-of-life guidance.
- Persistent accessibility. The DPP must remain available for the entire product lifecycle, even if the company that placed it on the market ceases operations.
- Registration in the EU central DPP registry by the economic operator responsible for placing the product on the market. For non-EU brands, this falls to the importer or authorized representative.
Penalties for non-compliance are set at the member-state level but must include, at minimum, fines and temporary exclusion from public procurement. The harder commercial penalty is simpler: products without a compliant DPP cannot be placed on the EU market.
What luxury brands need to build
Reduced to its essentials, a DPP program needs four layers:
The identity layer. Every product needs a unique, persistent, tamper-evident identifier. For luxury, the question is not whether to use a QR code or an NFC tag. It is whether the identifier itself can be cloned. If it can, the rest of the system inherits that weakness.
The data layer. Material composition, sourcing, manufacturer details, and lifecycle data must be collected from suppliers, structured to the EU's interoperability requirements (GS1 Digital Link and the EU DPP Core Ontology developed under CIRPASS-2), and made queryable. Most brands already hold this data somewhere across ERP, PLM, and supplier records. The work is making it product-level and reliable.
The access layer. Different audiences see different views: consumers, regulators, repairers, resellers, and customs authorities all have legitimate, distinct access rights. The system must enforce that.
The integration layer. The DPP must be created at manufacture, registered in the EU registry, updated through the product's lifetime, and accessible long after the original sale. That requires the identity layer and the data layer to be linked, durably, at the unit level, on every product, at scale.
Where most approaches fall short
Two patterns are common today, and both are inadequate for luxury at scale.
The first is the printed QR code. It is cheap, it is universal, and it solves the data-carrier requirement on paper. It does not solve authentication. A QR code is a public URL pointer. Anyone can photograph it, print it on a counterfeit, and link to a credible-looking page. The regulation does not require the carrier to be un-clonable. The market does.
The second is the software-only DPP platform. These vendors offer a CMS for product data and a URL the brand attaches to whatever carrier it chooses. The data structure may be excellent. The link between the data and the physical product is not theirs to guarantee. If the physical anchor is a printed code, the platform inherits its weakness.
Luxury cannot afford either pattern as its terminal answer. The whole point of the category is that a physical object has value precisely because it is not interchangeable with a copy.
How Veritas solves it
Veritas builds proprietary, unclonable NFC microchips that embed directly into luxury goods at the point of manufacture. Each chip uses NXP NTAG 424 DNA technology with a cryptographic signature that changes on every tap, which means the chip itself cannot be cloned, replayed, or counterfeited. A photograph of the chip is useless. A copy of the data is useless. Only the original silicon, embedded in the original object, returns a valid authentication.
Three form factors cover the full range of luxury production:
- Flex is sewable into garments and soft goods, with an integrated tamper wire that detects if the chip is removed or transplanted.
- Orbit is designed for hard goods including handbags, leather accessories, and watches.
- Capsule is built for jewelry, collectibles, and small-form objects where space is constrained.
Each chip carries a unique, persistent identifier linked to a structured Digital Product Passport containing the data the ESPR requires: materials, manufacturer, country of origin, lifecycle information, and the additional provenance fields that luxury demands. The DPP is built to the EU's interoperability standards, registered where required, and remains accessible across resales, repairs, and the entire lifecycle of the object.
The result is a single piece of infrastructure that solves three problems at once:
- EU DPP compliance for the 2027 textiles deadline and the categories that follow through 2030.
- Unit-level anti-counterfeiting that does not depend on a printable, clonable label.
- A persistent owner relationship that survives every resale, repair, and ownership transfer.
This is why we built Veritas this way. Software-only DPP solutions can hand you a compliant data record. They cannot hand you a physical object that cannot be faked. Compliance without authentication leaves luxury exposed on the dimension that matters most. Authentication without compliance leaves you scrambling in 2027. The DPP and the unclonable chip should be the same system, because in practice they are the same problem.
What to do in the next twelve months
Whether you work with Veritas or not, the operational sequence is the same:
- Audit your product data. Identify, by category, what information you already hold, where it lives, and where the gaps are.
- Map your supply chain to the data fields. Most DPP work fails at the supplier interface. Start the supplier conversations now.
- Choose your identity layer deliberately. Decide whether your category requires a tamper-evident, un-clonable carrier, or whether a printed code is sufficient. For luxury, the answer is almost always the former.
- Run a pilot on a single SKU or capsule collection. Pilots surface the operational issues that no slide deck will.
- Pick partners who solve the whole problem, not one slice. The DPP is a system. Vendors who solve only the data layer or only the carrier layer will leave you stitching the integration together yourself.
The window
By the time the textiles delegated act is published in late 2027, the brands that will be ready are the brands that started in 2025 and 2026. The brands that wait will be retrofitting under deadline pressure, with worse data, fewer supplier relationships, and a forced choice between speed and quality.
The DPP is not a regulatory obstacle. It is the most significant chance in a generation to make every luxury object verifiably what it claims to be, to keep a brand relationship alive across every owner, and to make counterfeiting structurally harder rather than rhetorically condemned. The brands that see it that way will define the next decade of the category.
If you want to talk about what a DPP and authentication program looks like for your products, get in touch.
Veritas builds proprietary unclonable NFC microchips for luxury authentication, provenance, and EU Digital Product Passport compliance. Veritas is backed by 776, a16z, Vogue, and the Disney Family. Learn more about our chip products.