How often must I update the data in the product passport?
No fixed term, but an obligation to keep information current
The ESPR itself does not set a fixed interval for updating the digital product passport — not "every year", not "within a certain number of months after a change". What is established is the principle set out in Article 9 of the ESPR (Regulation (EU) 2024/1781): the information in the digital product passport must be accurate, complete and up-to-date throughout the entire period in which the passport must remain available. This is an ongoing obligation, not a snapshot at the time of completion when placing on the market. In practice, this means that an update is necessary as soon as something changes that is relevant to the data in the passport — a repair, an adjustment to the material composition, a recall, or the end of life being reached — and not according to a fixed calendar. How this looks in detail for each product category, which party may or must carry out which update, and which part of the data is fixed when placing on the market versus is completed later, is the subject of Article 10 of the ESPR, which refers to the delegated act for each product category.
For manufacturer, importer — and the actors further down the chain
This matter concerns first and foremost the party that compiles and places the passport on the market: the manufacturer or, for imports from outside the EU, the importer. That party is subject to the obligation to keep information current under Article 9 in any case for the data that have been entered when completing the passport. This concerns not only information that the manufacturer enters itself, but possibly also data that other actors in the chain add later: a repairer who replaces a component, a recycler who dismantles the product, or a subsequent owner in resale. Article 10 of the ESPR expressly states that the delegated act for each product category must establish which market participant or actor is responsible for uploading information, including after the product is placed on the market. This means that "updating" does not automatically remain a task of the original manufacturer — for some data that responsibility may shift to another party further along in the product lifecycle. Where this does not apply: static, technical basic data that are already fixed when placed on the market, such as a unique product identification number. These do not change by themselves and therefore do not need to be reviewed periodically either.
No fixed date yet established for electronics and ICT
There is no published delegated act that establishes the precise update obligations for electronics and ICT equipment. The ESPR itself sets out the framework in Articles 9 and 10, but the detailed implementation for each product category — including any deadlines for making changes — follows from the delegated act that is yet to be published. According to the European Commission's work plan for 2025-2030, delegated acts for each sub-category are expected from 2027 onwards; no publication date is yet known for electronics and ICT. Until the moment when a delegated act for a specific product category has been published and comes into force, there is no concrete update obligation under the digital product passport for that category — the obligation to have a passport itself only arises with that act.
What this means in practice
For those already preparing now, the sequence is roughly as follows. First, map out which data will eventually be included in the passport and which of that data may change during the product's lifetime — think of repair history, software versions, or altered material composition during a model revision. Next, set up an internal process that signals such events, so that an update is not left to chance but follows from a fixed review at a recall, model change, or end of production. Designate, even though this is not yet legally required, a person responsible within the organization for maintaining passport data — that role will probably be more concretely defined with the delegated act. Finally, keep track of the publication of the delegated act for your own product category, because only then will it specify which update intervals exactly apply, which party is responsible for what, and which data are dynamic and which are fixed.
Where this is stated: Article 9 and 10 of the ESPR
Article 9 of the ESPR (Regulation (EU) 2024/1781) stipulates that the digital product passport must remain available during the expected lifetime of the product and that the information contained in it must be accurate, complete and up to date. Article 10 of the same regulation determines that the delegated act must specify per product category which market actor is responsible for entering and updating information, including after the product is placed on the market. Together, these two articles form the framework within which the actual update obligations per product category will later be worked out.
Those setting up processes now should best start with an overview of which data in their own product may change during its lifetime and with whom in the chain agreements are needed — so that a working method is in place as soon as the delegated act for their product category appears.
What this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 10 (requirements for the digital product passport)
- Regulation (EU) 2024/1781 (ESPR), article 9 (digital product passport)
The regulation itself is on EUR-Lex. We provide references per statement; you do not have to take our word for it.
What you must concretely do
What is expected of you
The digital product passport is not a snapshot that remains unchanged after publication. Article 9 of the ESPR (Regulation (EU) 2024/1781) establishes that the passport must remain accessible throughout the entire lifetime of the product, and Article 10 of the ESPR (Regulation (EU) 2024/1781) sets out the requirements that the passport and the underlying data must meet. It follows that a passport must remain current as long as the product is on the market and as long as it is in circulation with users — not only on the day of sale.
Keep it up to date while the product is being sold
As long as a product model is still being supplied, the data in the passport must correspond to the current version of the product. If a supplier changes a component, a material or a specification, this has an impact on what the passport states. For a company with 10 to 100 employees, this usually means there must be a fixed moment — when an engineering change is made, a new supplier specification is received, or a revision of the technical documentation — when someone checks whether the passport is still accurate. Without that moment, the risk creeps in that the passport describes an older version of the product than what is actually in the box.
Keep it current after changes that affect the user
Some changes directly affect what a user or a supervisor receives from the passport: a software update that changes functionality, an adjusted warranty period, or a new assessment of repairability after a design change. Who sets out how long a device receives software updates, it is advisable to link that recording to the moment when the digital product passport is updated, so that the two registrations do not diverge. The same applies to a revision of the repairability score of a product: if the design changes, the score may also change, and that is a moment to revise the passport.
Availability of the passport itself, separate from its content
In addition to the content, there is the question of whether the passport remains accessible. Article 9 of the ESPR (Regulation (EU) 2024/1781) links the lifespan of the passport to that of the product, which means that the QR data carrier and the underlying data must not disappear once a product model is phased out. For a company that arranges hosting itself, this is an operational matter: a system that goes offline following a reorganisation, a system migration or a merger does not meet that expectation. At elektropas.com, this is one of the reasons why hosting is committed to for a fixed period, so that a company does not have to continue monitoring this itself.
Correction after a reported error
A separate situation is the error that only comes to light after publication — an incorrectly entered value, a mixed-up document, or data that upon closer inspection does not match the method by which the values were measured. As soon as that is noticed, there is an expectation that the passport is corrected, not that the error remains until the next planned revision. How that correction is carried out in practice is described on the page about correcting an error in the passport.
Where things go wrong in practice
A passport is filled in when a product line is launched and then not looked at again, while in the meantime two revisions of the product have been made — the data in the passport then belong to a version that is no longer supplied.
A supplier replaces a critical component to address supply problems, without anyone checking whether that replacement affects what is stated in the passport about the critical raw materials in the passport .
The IT department migrates to a new system and the old QR codes suddenly point to a page that no longer exists, while the products with that QR code are still in users' cabinets for years to come.
A software team extends or shortens the support period of a device in a product update, but this change is only communicated internally and not implemented in the passport that the end user consults.
An error in a technical data point is recognized internally for months as 'something for the next update', while the erroneous value continues to be visible to everyone who scans the QR code.
What you can document
- A fixed control moment in the process around engineering changes, at which someone checks whether the passport still matches the current product configuration.
- A designated person responsible within the company for keeping passport data up to date, even if the initial entry was made by an external party.
- A link between the internal registration of software support and the data in the passport, so that a change in one automatically triggers a review of the other.
- A procedure for what happens once an error is reported, including who is allowed to correct it and within what internal agreement that takes place.
- An overview of which product data per product group are maintained, to be aligned with what is described at the properties that are filled in per product group.
- An agreement on the hosting and accessibility of the passport after a product model is phased out, so that the QR code does not point to a dead link as long as the product is still in use.
This is not legal advice. This page provides general information about the regulations that this platform covers. We are not familiar with your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-08-22. Is something incorrect? Let us know — corrections take priority.