Step 2
Roadmap to compliance
A six-stage plan from scoping to live operations. Stage lengths are order-of-magnitude for a mid-size manufacturer with one product family in scope. SMEs and single-SKU lines can compress; multi-category portfolios will stretch.
Scope your product portfolio
Typical effort: 2–4 weeksInventory product families against adopted and in-scoping delegated acts. Flag the earliest applies-from date per family. Decide whether you will publish a DPP per product model, per batch, or per individual unit.
Deliverables
- Product-family inventory with legal basis and deadlines
- Policy on DPP granularity (model / batch / instance)
Map your supply-chain data
Typical effort: 1–3 monthsIdentify every data point required by the applicable act. For each, identify the authoritative source (which tier of the supply chain, which system, which format). Expect gaps at tier-2 and beyond — this is where most programmes stall.
Deliverables
- Data-point catalogue with source, owner and format
- Supplier questionnaire and NDA template
Pick your data model and carrier
Typical effort: 2–6 weeksAlign on a data model (CIRPASS reference + sector extensions) and choose carriers per product (QR, Data Matrix, NFC, RFID). Battery regulation mandates QR; most other sectors are technology-neutral.
Deliverables
- Data-model decision record
- Carrier policy per product family
Build or buy the DPP service
Typical effort: 3–9 monthsEither integrate with a DPP service provider or build on open-source components. Minimum capabilities: identifier registration, secure publication, layered access control, version history, durable URL resolution.
Deliverables
- Architecture decision record
- Vendor contract or in-house service
Register identifiers and publish
Typical effort: 2–4 weeksRegister GTINs, DIDs or sector-specific identifiers. Stand up the resolver. Publish initial DPPs for a pilot product line. Validate end-to-end scanning by consumer apps and authority tooling.
Deliverables
- Registered identifiers
- Live pilot DPPs
Operate and update
Typical effort: OngoingKeep DPP records accurate over the product lifetime. Propagate changes (recalls, repairs, ownership transfers) within the timelines set by the sector act. Archive retired passports per retention rules.
Deliverables
- Change-management SLA
- Archive and retention policy