GS1 UK surveyed over 500 senior retail executives. The number that stood out: only 16% of UK exporters feel fully prepared for the Digital Product Passport. 79% worry they could be locked out of the EU market entirely if they fail to comply. Individual revenue exposure? Roughly £1.5 million per noncompliant business.
And this isn't some far off theoretical risk. The EU's central DPP Registry must be operational by July 19, 2026. Battery passports are mandatory from February 18, 2027. Delegated acts for textiles, iron and steel, tyres, and aluminium are in the pipeline for 2026 to 2027, each with an 18 month compliance window after adoption.
The regulation is here. The infrastructure is being built. The question is whether companies can keep up.
The pilots say it's possible. Barely.
Volvo shipped the first commercial battery passport on the EX90. QR code on the inside of the driver's door. Built on Circulor's blockchain platform. Covers carbon footprint, material provenance, recycled content. Real product, real passport, real market.
CATL and BMW announced a joint China EU compliance pilot in February 2026 using the Catena-X automotive dataspace. The goal: harmonise battery passport data between Chinese and European regulatory systems. That's cross border, cross jurisdiction DPP interoperability. Already in testing.
CIRPASS-2 (€12.5 million in EU Digital Europe funding, 49 partners, running until April 2027) is executing 13 lighthouse pilots across textiles, electronics, tyres and construction. Their early findings are feeding directly into delegated act preparation. One January 2026 paper on textile DPP granularity (model vs. batch vs. item level) went straight to the ESPR Ecodesign Forum.
So the big players are moving. The problem is everyone else.
The readiness gap is real
The German Economic Institute (IW Cologne) put it plainly: many German firms are not yet familiar with or ready for the DPP. A practicable cross sector implementation solution is needed.
CIRPASS-2's own expert survey (December 2025 to March 2026) found that respondents broadly agree that publicly available regulatory information is insufficient and inaccessible. DPP service providers carry a significant educational burden just to get companies to understand what's required.
Italian SMEs in furniture, ceramics and textiles are flagged as particularly exposed. The Italian government has set up a DPP working group and is developing a subsidised readiness programme.
The pattern is consistent across every market: large enterprises with dedicated regulatory teams are managing. SMEs are not. And the regulation doesn't distinguish between them (except for slightly later deadlines on the unsold products destruction ban).
The data problem underneath
The real bottleneck isn't regulatory awareness. It's data.
A DPP requires structured, verified data across your entire product lifecycle. Material composition down to substances of concern (4,600+ substances under the ESPR definition). Carbon footprint per product. Recycled content percentages. Supply chain due diligence documentation.
Most of this data exists somewhere. But "somewhere" usually means a PDF from a supplier, a spreadsheet from the LCA team, a test report in a shared drive, and a certificate of conformity in someone's email.
CIRPASS-2 and multiple PIM vendors report the same thing: collecting carbon footprint and recycled content data from sub tier suppliers takes three to six months minimum. And that's before third party verification, which is required for battery due diligence by August 2027.
Now multiply that across a product portfolio with hundreds of SKUs and suppliers across multiple tiers. Manually? Not happening.
Enter AI
This is where the landscape gets interesting. AI driven DPP compliance tooling has gone from white papers to shipping products in the last 18 months.
Spherity built a DPP platform (VERA) and added a Model Context Protocol (MCP) server. That means AI agents can access DPP data in a governed way. Use cases: automated data validation, anomaly detection, predictive compliance monitoring, circularity advice through customer facing chatbots.
Exiger offers an AI driven Bill of Materials that uses predictive analytics to infer missing component data when suppliers don't respond. That directly attacks the supplier data bottleneck that everyone identifies as the number one problem.
AWS published architectural patterns for agentic AI in compliance. Intelligent agents that monitor standards changes, harmonise supplier data formats, validate certificates, and orchestrate nondeterministic compliance tasks. Data spaces like Catena-X and Manufacturing-X provide the secure exchange layer.
Altana partnered with US Customs and Border Protection on AI powered product passports. Their CEO describes it as preclearance for goods, where validated passports expedite future shipments by referencing previously approved supply chain data. Over 140 million buyer supplier connections on their network.
PicoNext ships a generative AI assistant that ingests raw product data and produces DPP aligned sustainability summaries.
And then there's a wave of PIM and traceability platforms (Inriver, Bluestone PIM, Circularise, Traceable, Tappr, Avelero, Carbonfact) that have all shipped DPP specific features in the last two years.
What this means practically
The DPP compliance challenge is fundamentally a data harmonisation problem at scale. Manual approaches don't work when you need structured, verified data from dozens of suppliers across multiple tiers for hundreds of products. AI is not a nice to have here. For most companies, it's the only realistic path to compliance at the required scale and quality.
But the tools are early. Independent benchmarks of accuracy in DPP field completion or supplier data inference don't exist yet. Vendor claims about cost reduction should be treated as directional, not proven.
The smart move right now:
- Pick one SKU and run a pilot DPP. CIRPASS-2 partners and commercial platforms offer hosted environments. Ship one passport before the central registry goes live in July 2026.
- Start supplier engagement immediately. Carbon footprint and recycled content data collection is the long pole. three to six months minimum. Don't wait for the delegated act.
- Build on GS1 Digital Link from day one. It positions you for ESPR DPP, EU Deforestation Regulation, the GS1 Sunrise 2027 retail 2D barcode transition, and any future regime simultaneously.
- Pilot an AI compliance tool on one product line. Test whether automated field completion actually works for your data quality reality. Threshold: if you can hit 80% automated field completion, it's worth scaling.
- Watch the delegated acts weekly. Once your product category's act enters the Have Your Say consultation phase, your 18 month countdown has effectively started.
The companies that treat the DPP as a data architecture project rather than a compliance checkbox will come out ahead. Everyone else will be relabelling products and chasing supplier data under deadline pressure.
That's not a good place to be.