All insights

Who Can See What: The EU's Tiered Access Model for DPP Data

ENVRT··3 min read

TL;DR

The EU's DPP data specification methodology sets out a five-tier access model for Digital Product Passport data. Not everything is public. Here is how the framework decides who sees what.

One of the most common concerns fashion brands raise about Digital Product Passports is what they will be required to disclose publicly. The EU's newly published DPP data specification methodology addresses this directly, setting out a structured framework for role-based data access that distinguishes between what consumers see, what professional operators see and what regulators can access.

The short answer: not everything in the DPP is public. But the system is designed so that the right actors get the right information for their specific purpose.

The "Need-to-Know" Principle

The methodology proposes that DPP data access follows a "Role-Based, Need-to-Know" approach. Access permissions are assigned to specific roles rather than individual entities. Actors are grouped into predefined categories based on their function in the product life cycle, and each category receives access only to the data elements essential for performing that function.

This means a consumer accessing a DPP does not see the same information as a professional repairer, a recycler or a market surveillance authority. The data remains comprehensive, but it is revealed in layers depending on who is looking and why.

The Five Access Tiers

The methodology outlines five illustrative tiers of access:

Tier 1: Public/Consumer. High-level sustainability scores, primary material composition, efficiency classes, recycled content percentage, care instructions and end-of-life guidance. No proprietary technical details, supplier information or complex chemical formulations.

Tier 2: Professional operators. Repairers and refurbishers receive detailed disassembly instructions, spare part lists with identifiers, diagnostic information and reassembly guidance. More detailed than the consumer view but still focused on procedural and component-level information.

Tier 3: End-of-life operators. Recyclers and waste sorters receive detailed material composition of all major components, the precise identity and location of substances of concern and instructions for safe dismantling and material separation.

Tier 4: Supply chain professionals. Manufacturers and assemblers receive the data needed to calculate and report environmental footprint, material composition and compliance information for their own products.

Tier 5: Regulatory authorities. Full, unrestricted access to all legally mandated data, including technical documentation, conformity assessments, test reports and supply chain traceability data.

What This Means for Brands

The tiered model addresses several concerns simultaneously. Brands do not need to publish their full supply chain relationships, proprietary process details or detailed LCA models to the general public. That information sits in restricted tiers, accessible only to authenticated actors with a legitimate need.

At the same time, the data that consumers do see is designed to be practically useful for purchasing decisions. The methodology references scores and grades (like repairability or energy efficiency classes) that provide meaningful comparison points without overwhelming consumers with technical data.

For green claims, the tiered model also provides a built-in verification mechanism. A brand's public-facing claims (Tier 1) can be audited against the full technical file (Tier 5) by market surveillance authorities. This creates accountability without requiring public disclosure of commercially sensitive information.

Confidential Business Information Is Protected

The methodology explicitly acknowledges the need to protect confidential business information, intellectual property and personal data. The report states that the allocation of access rights must take into account "proportionality, data protection requirements and the protection of trade secrets."

This is not a blanket exemption. The methodology requires preparatory study teams to assess, for each data point, what the risks of disclosure are and who actually needs access. But it provides a clear legal and methodological basis for restricting access to sensitive information while still meeting the ESPR's transparency objectives.

How ENVRT Approaches DPP Transparency

ENVRT's Digital Product Passports are designed with consumer-facing transparency in mind. The environmental data presented in each DPP is structured to be practically readable for consumers and retailers, while the underlying assessment data supports the verification and compliance requirements that the ESPR framework will demand.

If you want to understand how your product data will be presented in a DPP, get in touch with the ENVRT team.

Frequently asked questions

No. The methodology proposes a tiered access model. Consumer-facing data includes high-level scores and material composition. Detailed supply chain relationships, technical data and conformity files sit in restricted tiers accessible only to authenticated actors with a legitimate need.

Get new insights in your inbox

One email per month. No spam, unsubscribe anytime.

Ready to build transparency into your supply chain?

See how ENVRT helps fashion brands track, measure, and communicate sustainability.

Get in touch