prodpas.eu

what data do I request from a subcontractor who manufactures a component

The material, origin and technical data of the component

When a subcontractor manufactures a component for you, you essentially request the same type of data that you will later need yourself to compile the digital product passport of the final product: what the component contains, where it comes from, and how it performs. In concrete terms, this concerns material composition (including any substances that must be reported), origin of raw materials, an article or type designation by which the component can be uniquely identified, and the technical data relevant to durability, repair or recycling — think of weight, service life, repair options or recycling percentages. Which data exactly is needed depends on the product group into which the final product falls, because the delegated regulation drawn up for each product group determines the exact content of the passport.

For suppliers in the chain, not for the end manufacturer itself

This issue arises as soon as you have a component manufactured by a third party — a subcontractor, supplier or specialized component maker — and incorporate that component into a product that you yourself place on the market. The subcontractor in that relationship is an "actor in the supply chain": someone who must provide information, but is not themselves responsible for compiling or publishing the digital product passport. That responsibility lies with the party placing the final product on the market, typically the manufacturer. This distinction is important: you request data from the subcontractor about their component, not a complete passport. They provide the building blocks, you (or the party compiling the passport) process those into the whole. This does not apply to situations in which the subcontractor themselves manufactures a self-contained marketable product that comes onto the market independently — in that case they are themselves the responsible manufacturer for that product, with their own passport obligation.

Even if the component is sourced from outside the EU, this changes who must provide which information; this concerns the role of the importer, who has their own obligations alongside those of the manufacturer. What importing components or products from outside the EU means for the passport obligation is worked out separately in what the product passport means when importing from outside the European Union.

No fixed date yet, but a fixed principle

No general entry-into-force date is yet known for when this obligation for subcontractors takes effect; that follows for each product group from the delegated regulation drawn up for it by the European Commission. What is fixed, however, is the principle from the ESPR itself: as soon as a passport obligation applies to a product group, actors in the supply chain must provide the data needed to comply with that obligation. Until a product group is specifically designated and the associated delegated regulation is published, there is no legal obligation to provide or request this data — although it may be practically wise to set up the information flow with subcontractors now, so that it is in place at the moment the obligation comes into force. When the passport becomes specifically mandatory for a product group can be followed via the page on when the product passport becomes mandatory for products.

How you tackle this: from question to recording

The first step is to determine which product group the final product falls into and which data the associated delegated regulation requires for that group — this determines exactly what you must request from the subcontractor. Next, you request those data specifically for the component: material composition, origin, and the technical characteristics named in the regulation. Because a component is often also supplied separately to other customers or can be replaced, it makes sense to immediately think about how you will handle a change of supplier during the product's service life — this is worked out in what happens to the passport if you change supplier during use. Then record the agreement on delivery of this data, preferably not scattered across emails but in the contract with the subcontractor, including what happens if data is missing or changes. A good approach to this is described in how you record the delivery of product passport data in your procurement contract. Next, check the supplied data for consistency and accuracy before you process it in the passport of the end product — incorrect data from a subcontractor do not automatically become correct just because they end up in another product's passport. If the subcontractor works with multiple variants of the same component for different customers, it is advisable to discuss beforehand how he distinguishes between those variants in his data delivery.

Justification: articles 38, 10 and 29 of the ESPR

That actors in the supply chain — including subcontractors who manufacture components — may be required to supply information needed for the product passport follows from article 38 of the ESPR (Regulation (EU) 2024/1781). Which data a passport must exactly contain, and thus which data are ultimately requested from the supply chain, is set out as a general framework in article 10 of the ESPR, with the specific implementation per product group in the corresponding delegated regulation. For situations in which a component is sourced from outside the EU, the obligations of the importer are relevant, as set out in article 29 of the ESPR.

Anyone getting started with this can best first look at which data is generally requested from a product supplier on the page which data you request from your product supplier, and then tailor this to the specific situation of a subcontractor who manufactures one component for the end product.

What you must do concretely

What is expected of you

A subcontractor who manufactures a component according to your specification delivers not only a physical product, but also information needed to compile the product passport of the end product. Article 38 of the ESPR (Regulation (EU) 2024/1781) establishes that actors in the supply chain — and a subcontractor falls under this — must supply the data needed to meet the requirements of a product group. What that means in practice breaks down into a few parts.

Material composition of the component

The passport typically contains information about the materials from which a product is made, including the share of recycled material and the presence of substances of concern. For a company with 10 to 100 employees, this means that the subcontractor must be able to specify for each component or production line which materials were used, and not just "steel" or "plastic" in a general sense — often a specification down to the level of alloy or polymer type is needed. Without that precision, the component can be delivered, but the passport cannot be filled in.

Origin and processing data

In addition to what a component is, where and how it was made also plays a role. Article 10 of the ESPR describes which categories of information a digital product passport can contain, and this includes information about production and origin. A subcontractor who in turn sources components or raw materials from elsewhere also passes on what has happened upstream in the chain. This is one of the points where things go wrong when a supplier delivers components from different product groups, because the origin information is then classified differently per product group.

Confirmation that data remain current

A passport is not a snapshot that never changes after delivery — if the subcontractor changes a material, supplier or process, this may have consequences for the accuracy of the passport of the end product. For a company that relies on a fixed subcontractor, this means that agreements are needed about when and how changes are reported, not only about the first delivery of data.

Alignment with the role of importer, if applicable

When the component or end product is sourced from outside the EU, additional obligations under Article 29 of the ESPR apply to whoever acts as an importer. A subcontractor outside the EU then supplies data to a party that itself must be able to demonstrate that the passport is correct and complete when placing on the market. This raises the question what the product passport means when importing from outside the European Union, and is relevant to check as soon as a subcontractor is established outside the EU.

Where things go wrong in practice

A recurring problem is that the subcontractor supplies data at the level of its own production, while the passport requests information at the level of the end product. A component is then described as "cast aluminium component", without the alloy code needed to specify the material information in the passport.

A second situation: the subcontractor works with changing suppliers for raw materials, without this being reported. The passport of the end product then remains based on outdated sourcing information, while the actual composition has already changed.

A third situation is the subcontractor that also supplies the component to other clients, and is therefore reluctant to share precise composition data for fear of competition-sensitive information. This conflict between passport obligation and confidentiality arises regularly, and is better regulated in advance than fought out afterwards.

A fourth situation: when switching subcontractors, it is assumed that the existing passport simply remains valid, while the new component has different materials or a different origin. This is the same pitfall that occurs when switching suppliers during use of the passport, and has an identical effect with subcontractors.

A fifth situation is that no structured request is made at all — the data comes in orally or via an informal email, without establishing which data has been requested and which has been provided. When the accuracy of the product passport is later called into question, there is then no record of what exactly was agreed.

What you can document

  • A standardized data request per component, including material composition to the level required by the product group, origin of raw materials and processing methods used. For setting up such a request, it is useful to look at which data you request from your product supplier, even when it is formally a subcontractor rather than a supplier — the nature of the information requested is comparable.
  • A contractual provision on the timing and form of data delivery, including what happens if material or process changes during the term of the cooperation. How such a provision might look is described in recording the delivery of product passport data in the procurement contract.
  • A confidentiality agreement when the subcontractor is reluctant to share composition data, so that confidentiality and data delivery are not at odds with each other. See for this the explanation on requesting a confidentiality declaration from a supplier regarding product passport data.
  • A control moment at which the delivered data is compared with what was actually processed in the component, for example via a sample or certificate from the subcontractor.
  • An overview of which subcontractor supplies which component, including the version and date of the most recently received data, so that when a subcontractor changes, it is clear which passport component must be reassessed.

This is not legal advice. This page provides general information about the regulations that this platform concerns. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.

Written with AI based on the sources above, reviewed by a human on 2026-09-05. Is something incorrect? Let us know — corrections are given priority.