DPP in 2028: What Apparel Brands Need to Build Before the Deadline
If you work in sourcing, sustainability, or compliance at an apparel brand, you've probably heard the timeline by now: the EU's Digital Product Passport registry went live in July 2026, the textile-specific delegated act is expected in 2027, and mandatory compliance for apparel realistically lands in 2028, maybe stretching into early 2029.
That timeline is accurate. It's also misleading — because it makes 2028 sound like the moment the work starts. For most brands, it's the moment the work needs to already be done.
The deadline isn't the hard part. The data is.
DPP compliance isn't a software installation you schedule for next year. It's a data problem, and it's a bigger one than most teams realize until they're inside it.
A usable digital product passport requires structured, verified data on fiber composition, supplier-level traceability, and end-of-life information (care, repair, recyclability) — for every SKU, across every category you sell into the EU. In May 2026, the EU's Joint Research Centre published the first complete specification of what that data needs to look like across ten apparel categories: t-shirts, shirts, sweaters, jackets, pants, dresses, leggings, socks, underwear, swimwear, and textile accessories.
Most brands don't have this data centralized today. It exists — if it exists at all — scattered across supplier spreadsheets, mill certifications, PLM systems that don't talk to each other, and institutional knowledge that lives in a handful of people's heads. Turning that into structured, passport-ready data is a multi-year infrastructure project, not a quarter-long compliance sprint.
That's the gap between "2028 is when this becomes mandatory" and "2028 is when I need to already be compliant." The brands that will be ready are the ones treating this as a supply chain data project starting now, not a legal deadline to react to later.
What "ready" actually looks like
Being DPP-ready isn't a single milestone — it's a set of capabilities a brand needs operating well before any enforcement date:
Supplier data collection that actually works. Not a one-time survey, but an ongoing process that captures the right fields, at the right granularity, and keeps up as suppliers and materials change.
A system of record for product-level traceability. Data that lives in one place, is queryable, and doesn't depend on someone remembering which spreadsheet is current.
Clear ownership of data accuracy. When a supplier changes a material or a mill, someone needs to own updating that record — otherwise passports go stale the moment they're issued.
A delivery mechanism for the consumer-facing passport itself — QR code, NFC, or whatever the eventual standard settles on — that pulls from accurate backend data rather than a static, one-time snapshot.
A category-by-category plan that maps to the ten apparel categories the JRC has already specified, starting with whatever share of your EU-bound volume is largest.
None of this is exotic. All of it takes longer to build than most teams initially budget for.
What we're seeing with brands who started early
We work with apparel brands building exactly this kind of infrastructure, and the pattern we see consistently: brands that start early treat DPP as a supply chain and data governance initiative with a compliance outcome, not a compliance initiative with a data problem attached. That distinction changes who owns the project, how it's resourced, and how long it actually takes.
A practical starting point
If your team hasn't started, here's a reasonable place to begin, in order:
- Audit — For each SKU or category, how complete is your existing product data? Where does it live, and who maintains it?
- Prioritize — Which categories and markets carry the most EU-bound volume? Start there, not with your full catalog.
- Pilot — Build the full data pipeline, end to end, for one category before trying to scale it across your entire line. You'll learn where the real friction is faster than any planning exercise will tell you.
- Evaluate partners deliberately — If you're looking at DPP software or infrastructure vendors, ask them directly how they handle supplier data collection at scale, how they keep records current as your supply chain changes, and how their approach maps to the JRC's category-level specifications. Those answers tell you more than a product demo will.
The takeaway
2028 is a real deadline, but it's not the one that matters most for planning purposes. The brands that are ready when the delegated act takes effect will be the ones who started treating this as infrastructure work in 2026 — not the ones who wait for a final rule before opening a project plan.
If you're mapping out what this looks like for your brand, we're happy to talk through what we're seeing across the brands we work with.