What data does a DPP need? Five layers
Before you build a Digital Product Passport (DPP), it helps to understand what kinds of data usually go into it. Although the exact scope depends on the sector, a useful pattern of five information layers recurs. This article walks through each of them.
Why think about data in layers
The requirements for each product are set by the delegated act for its sector, so there is no single universal list of fields. Instead, it helps to think of data in terms of layers — coherent groups of information that organise what a passport should hold.
This is a helpful framing, not a rigid legal list. But it makes it easier to discuss internally where data comes from and who owns it. We cover the basics of the passport in What is a DPP.
Layer 1: product identity
The first layer answers "which product is this". It covers unique identifiers, the model name, the variant and the link to the data carrier.
Without an unambiguous identity, the other data loses meaning — there is no way to know what it refers to. That is why identity is the foundation of the whole record and the discoverable entry point at every scan.
Layer 2: responsible-operator data
The second layer says who is responsible for the product. It identifies the economic operator — the manufacturer or importer — that places the product on the EU market and is answerable for the passport's accuracy.
This information matters for market surveillance and for trading partners. It establishes the point of contact on questions of compliance, liability and any corrective action.
Layer 3: composition and materials
The third layer describes what the product is made of. It covers materials, relevant substances and, depending on the sector, information important for safety and recycling.
This is often the hardest layer to assemble, because the data comes from suppliers and from many production stages. At the same time it is central to the passport's environmental goals — without it, circularity is hard to talk about.
Layer 4: environmental and life-cycle information
The fourth layer concerns the product's impact and its behaviour across the life cycle. It may cover durability, reparability, environmental footprint and end-of-life guidance.
The scope of this layer depends heavily on the sector and the regulatory goals. This is where the passport most strongly supports the circular economy, by providing the data needed for repair and recovery.
Layer 5: traceability and evidence
The fifth layer links the passport to the documentation that backs up the stated information. It covers references to declarations of conformity, certificates and other evidence.
Because of it, the passport is not a set of unsupported claims but a record connected to credible sources. This matters both for surveillance authorities and for partners in the supply chain.
How the layers work together
The five layers form a coherent whole: identity says "what", the operator "who", composition "from what", the environmental layer "what impact and how long it lasts", and traceability "on what basis". Together they turn scattered documents into one record.
Not all layers are equally accessible to everyone — some data is public, some reserved for authorities or B2B partners. We expand on this in Layered DPP data access, and on the methodology for classifying fields in Essential, recommended, voluntary data.
Where the data for each layer comes from
Each layer usually has a different source inside the company. Product identity comes from catalogue systems and numbering logic. Responsible-operator data comes from registrations and company records. Composition and materials need information from suppliers, often across several tiers of the chain.
Environmental data combines measurement results, calculations and standards, while the traceability layer draws on compliance documents scattered across departments. Understanding where each piece of information sits is the first step to building a coherent passport.
Quality of data matters more than quantity
It is easy to confuse completeness with quality. A passport does not gain value by adding more fields if they are outdated or uncertain. It is better to have less data that is reliable and maintained.
So for each layer it is worth asking not only "do we have this data" but also "is it current, and how do we know it is correct". The answers to these questions decide the credibility of the whole record.
Layers and different audiences
The individual layers serve different audiences. A consumer cares about identity, basic characteristics and usage guidance. A repairer needs repair data, and a recycler needs composition. A surveillance authority reaches for traceability and evidence of compliance.
The same record therefore answers the needs of many groups at once. That is why a well-designed passport separates data by layer and differentiates access to it. We expand on this in Layered DPP data access.
From scattered data to a single record
The biggest job in creating a passport is usually not the publishing itself but gathering data from many places and bringing it into a consistent form. Layers help plan that work, because they break a large problem into smaller, manageable parts.
Once each layer is organised and assigned to an owner in the company, keeping the passport current over time becomes routine, rather than a fresh project at every change.
Key takeaways
- The data scope depends on the sector, but a pattern of five information layers recurs.
- The layers are: identity, responsible operator, composition, environment and traceability.
- This is a helpful framing, not a rigid legal list — the fields are set by the delegated act.
- Composition and environmental data are often hardest, as they come from the supply chain.
- Not all layers are public — access is layered.
See how CyfroPass lets you organise every data layer and build a Digital Product Passport without writing code. Visit cyfropass.pl and turn scattered documents into one record.