Skip to content
Knowledge / Digital Product Passports

Iron and Steel Digital Product Passport Requirements

Iron and steel DPP status, Q4 2026 delegated-act timing, candidate data, CBAM overlap and what manufacturers can safely prepare now.

Status
In official development
Last verified
1 September 2026
Share
LinkedIn X Email
Navigate this page

Direct answer

Iron and steel products do not have a final, generally applicable EU Digital Product Passport requirement today.

Iron and steel are a priority intermediate-product group under the Ecodesign for Sustainable Products Regulation (ESPR). The European Commission currently gives Q4 2026 as the indicative timing for adoption of the iron and steel delegated act. That is a planned law-making milestone. It is not a Q4 2026 compliance deadline.

The category is unusually advanced. The Commission and Joint Research Centre (JRC) have published preparatory work that proposes a detailed steel DPP design, including product identification, technical and material data, substances of concern, carbon-footprint and recycled-content information, origin and traceability concepts, granularity and access rights. Those proposals are important evidence of direction. They are not adopted requirements.

The safe position is therefore:

  • In official development: the iron and steel ESPR measure and DPP design.
  • Required under other law: selected carbon, customs, installation and emissions information for covered imports under CBAM, plus other sector rules where they apply.
  • Not established: the final steel DPP field list, final identifiers, final carrier specification, final model/batch/item granularity, final access matrix and final application date.

If you are preparing now, build around governed product identity, steel grade and classification, existing technical evidence, operator data, current CBAM/ETS information where applicable and evidence provenance. Keep carbon, recycled content, origin, melt-and-pour, facility and access assumptions modular until the delegated act is adopted.

Current regulatory status

QuestionCurrent position
Is a steel DPP mandatory today?Not established as a current generally applicable product-specific DPP obligation.
Is an EU measure being developed?In official development.
Planned delegated-act timingQ4 2026, currently indicative.
Is Q4 2026 a compliance deadline?No. It is the Commission's planned adoption timing.
Final product scopeNot established.
Final field listNot established.
Final identifiersNot established. A persistent UPI is part of ESPR architecture if a DPP is required, but the steel implementation is not final.
Final data carrierNot established.
Final granularityNot established.
Final access rightsNot established.
DPP Registry interactionHorizontal ESPR Registry architecture is established; the steel-specific registration implementation depends on the adopted measure.

The Commission's current iron and steel page says that any DPP requirements will be defined through the relevant product-specific delegated act. It also says the exact information requirements will be defined through the delegated acts and supporting technical specifications.6

That wording matters. The development programme is real and near-term, but the legal content is not final.

Which iron and steel products are affected?

The final scope will be set by the delegated act.

The Working Plan treats iron and steel as an intermediate product priority rather than as one final consumer-product category. That creates a particular policy problem: a rule applied upstream can affect many downstream products and sectors.

The Working Plan therefore calls for careful assessment of downstream consequences. It says options may include setting only information requirements and considering selected final products that contain high quantities of the regulated intermediate product.2

The JRC preparatory study is examining representative intermediate steel products and industry data practices. That is useful for understanding likely architecture, but it does not fix the legal scope.

Do not assume that every object containing steel will receive a steel DPP. Do not assume that every steel-containing downstream product will inherit the same passport design.

Governing EU framework

The horizontal legal framework is Regulation (EU) 2024/1781, the ESPR.1

ESPR does not itself create one universal product-data checklist. Product-specific delegated acts determine whether and how a DPP applies, including the product information to be included and the relevant implementation architecture.

For iron and steel, the first ESPR Working Plan gives the category high priority. It cites significant potential to improve climate, energy, water and air impacts and says ESPR measures are expected to complement existing environmental and climate measures such as the EU Emissions Trading System and the Carbon Border Adjustment Mechanism.2

The steel rule-making process is supported by a JRC preparatory study and stakeholder consultation.67

Key dates and what they mean

Date / periodMeaningLegal effect
18 July 2024ESPR entered into forceHorizontal framework in force. It did not make every steel product require a DPP.
16 April 2025First ESPR Working Plan publishedIron and steel prioritised for a 2026 measure. Official plan, not product law.
March-April 2026Detailed JRC steel preparatory material published and consulted onStrong development evidence, not adopted law.
20 July 2026EU DPP Registry became operationalHorizontal infrastructure milestone, not a steel compliance date.
Q4 2026Current Commission target for adoption of the iron and steel ESPR delegated actIndicative adoption timing, not a compliance deadline.
After adoptionCommission guidance says ESPR product acts will normally have at least an 18-month transitionThe adopted act will control the actual application arrangements.

A planned delegated-act date answers when the Commission hopes to adopt the rules. It does not answer when businesses must comply.

Until the act exists, a precise steel DPP application date should not be manufactured from the Q4 2026 target.

What product information is established today?

There is no final steel DPP dataset today.

There is, however, substantial information already generated in steel value chains and under adjacent regulation. That matters because readiness should begin with data that already has a legal or operational reason to exist.

Existing steel technical and quality information

Steel producers and customers commonly use product grades, designations, dimensions, heat or cast references, chemical composition and mechanical properties in mill test certificates and other technical records. The JRC study explicitly treats these existing practices as an input to possible future DPP design.8

This is useful readiness material. It is not automatically mandatory DPP content.

CBAM data for covered imports

The Carbon Border Adjustment Mechanism is now in its definitive regime. It applies to selected imported goods including iron and steel.910

For covered imports and operators within scope, CBAM can require data including:

  • type and quantity of goods
  • country of origin
  • embedded emissions or default values
  • where actual emissions are used, identification of the installation where the goods were produced
  • operator contact information for that installation
  • verification information.

That is Required under other law, not a steel DPP field list.

This distinction is commercially important. CBAM means some steel businesses already need robust carbon, origin and installation evidence. That creates a strong readiness asset for a future DPP, but it does not prove that the final steel DPP will expose the same data, at the same granularity, to the same audiences.

EU ETS

The Working Plan expressly positions future steel ESPR measures alongside the EU ETS and CBAM.2 EU ETS information is primarily installation and emissions-regime information. It should not be relabelled as product-level DPP data.

What information is in official development?

This is where the steel dossier is more advanced than most developing ESPR categories.

The Commission's current public steel page says information may include:

  • product identification and classification
  • technical and material data
  • circularity information such as recycled content
  • sustainability-related product information
  • documentation relevant to compliance and traceability.6

The JRC's March 2026 steel DPP content proposal goes further. It proposes a structured dataset covering product identification and classification, producer identification and origin, technical and material data, environmental and circularity information and other supporting information.8

The following table records that development evidence without promoting it to law.

Information territoryCurrent DPP statusWhat the evidence says
Product identity / classificationIn official developmentCommission and JRC both treat this as core candidate territory.
Steel grade / designation / technical dataIn official developmentJRC proposes using existing steel documentation and classifications.
Chemical/material compositionIn official developmentProposed in the JRC design; broader technical data may be conditional or voluntary in the proposal.
Substances of concernIn official developmentJRC proposes structured substance information.
Product carbon footprintIn official developmentJRC identifies PCF as a potential regulatory requirement and proposes it in the DPP design.
Recycled contentIn official developmentJRC proposes recycled-content declaration and pre/post-consumer split.
Country of originIn official developmentAppears in the JRC proposal. It is not a final DPP requirement.
Melt-and-pour / production traceabilityIn official developmentAppears in preparatory steel work.
Compliance documentationIn official developmentCommission identifies compliance/traceability documentation as a possible area.
End-of-life / recyclability informationIn official developmentJRC work links material information to circularity and recycling use cases.
Factory/facility informationNot established as a final steel DPP requirementCurrent evidence does not justify publishing a final mandatory facility field.

Are carbon data final DPP requirements?

No.

Carbon is one of the strongest development signals. The JRC proposal includes a product carbon footprint and discusses alignment with EU ETS, CBAM and other methodologies.8

But the delegated act is not adopted. The safe public statement is:

Product carbon footprint is in official development for steel. It is not yet a final steel DPP requirement.

Where CBAM applies, embedded-emissions data can already be required under CBAM. That is a separate legal basis.

Is recycled content final?

No.

The Commission explicitly uses recycled content as an example of information that may be included, and the JRC proposal develops a recycled-content declaration.68

The methodology and granularity remain part of the preparatory process. Treat recycled content as In official development, not as an adopted steel DPP field.

Is factory or facility information final?

No.

The final delegated act has not established a mandatory steel manufacturing-facility field.

Some adjacent systems already work at installation level. CBAM, for example, can require production-installation information when actual embedded emissions are used.9

That is not the same proposition as "the steel DPP requires factory data".

Is origin or provenance final?

No.

Country-of-origin and melt-and-pour concepts appear in the JRC proposal and established steel trade practices.8 CBAM also uses country-of-origin information for covered imports.9

The final steel DPP treatment is Not established until the delegated act is adopted.

Identifiers and data carrier

ESPR's horizontal architecture uses a persistent unique product identifier (UPI) linked to a data carrier.1

That does not establish GTIN, GS1 Digital Link or one universal carrier for steel.

The JRC proposal explores steel-native identification practices. It proposes heat-number-based batch identification as a reference approach and discusses optional item-level serial identification for specific products.8

That is valuable implementation evidence because it shows the steel rule may be designed around existing industrial traceability rather than forcing a retail identifier model.

It remains a proposal.

The Commission's steel page says a DPP will be linked through a data carrier "such as a QR code".6 "Such as" is not a universal QR-only mandate. The delegated act and technical specifications will control the actual carrier requirements.

Prepare: map existing heat, cast, lot, product-number and serial relationships to a stable internal identity model.

Do not hard-code: GTIN, GS1 Digital Link, QR-only architecture or item-level serialisation as if already required.

See Barcodes and Product Identifiers: What You Need and Product, Operator and Facility Identifiers for a DPP.

Granularity

Final steel DPP granularity is Not established.

The JRC proposal is nevertheless unusually specific. It recommends batch-level identification centred on the heat number, with cast/lot as an optional additional batch identifier and item-level identification for specific products where appropriate.8

The same study also recognises that the granularity of environmental data such as recycled content can depend on methodology and chain-of-custody design.

That makes the correct implementation lesson clear:

Build a hierarchy that can represent model/product family, heat, cast/lot and item where needed. Do not freeze the legal passport at one level yet.

See Model, Batch or Item Level for a Digital Product Passport.

Access rights

Final steel DPP access rights are Not established.

The JRC proposal explores a tiered model with:

  • public information
  • information for authorities, notified bodies, customs and the Commission
  • information for actors with a legitimate interest.8

It also flags detailed composition, production-process information, energy data and sourcing information as potentially sensitive.

Again, this is preparatory architecture. It is not a final access matrix.

Do not design the customer experience on the assumption that every steel DPP field will be public.

See Who Can See What in a Digital Product Passport.

Registry interaction

The EU DPP Registry became operational on 20 July 2026.311

The Registry supports the horizontal DPP architecture and stores unique identifiers and mandatory registration metadata. Full passport product data remain decentralised rather than being copied into one central EU product database.311

If the adopted steel act requires a DPP under ESPR, the applicable Registry obligations will form part of that system. The precise steel registration details depend on the final measure.

See EU DPP Registry: Where Passport Data Actually Lives.

What businesses can prepare now

Prepare

Product identity and hierarchy Create a governed relationship between product family, grade/designation, heat, cast/lot and any serialised item.

Operator data Control legal entity names, roles, addresses and identifiers. Do not collapse producer, manufacturer, importer and other economic-operator roles into "brand".

Classification Maintain product and customs classifications with versioning and evidence.

Existing technical evidence Structure mill test certificate data, technical specifications, conformity references and supporting documents so that values can be traced to their source and scope.

CBAM information where applicable For covered imports, treat country of origin, installation, operator and embedded-emissions evidence as current compliance data with its own legal basis.

Environmental evidence provenance If you calculate PCF or recycled content now, record methodology, boundary, period, facility/product scope, verifier and version. That will survive regulatory change better than a single unqualified number.

Machine-readable exchange Make key product facts exportable from governed systems rather than recoverable only from PDFs and emails.

Watch

  • adoption of the iron and steel delegated act
  • final product scope
  • carbon-footprint methodology
  • recycled-content methodology and chain of custody
  • heat/batch/item granularity
  • origin and melt-and-pour treatment
  • substances-of-concern fields
  • access tiers
  • carrier and identifier rules
  • interaction with CBAM, ETS, construction rules and other downstream regimes.

Do not build around yet

  • Q4 2026 as a compliance deadline
  • universal GTIN
  • universal GS1 Digital Link
  • a QR-only system
  • mandatory item-level passports
  • mandatory factory address
  • mandatory public carbon data
  • mandatory recycled content for every covered product
  • complete public supply-chain disclosure.

Open questions and regulatory dependencies

  1. What exact steel products will be in scope?
  2. Will the adopted measure impose only information requirements, performance requirements or both?
  3. Which proposed DPP fields survive the impact assessment and consultation?
  4. What carbon-footprint methodology and verification rules will be final?
  5. What recycled-content calculation and chain-of-custody method will be final?
  6. Will heat number become the regulatory UPI implementation, or will another scheme be selected?
  7. Will different steel products use batch and item granularity differently?
  8. Which origin, melt-and-pour or production-route data will be mandatory?
  9. What will be public, restricted or authority-only?
  10. How will the steel DPP reuse or align data already required by CBAM, ETS and downstream product law?
  11. What application date and transition arrangements will the adopted act set?

How we know

ActivateDigital separates legal status from development evidence.

The current position is based first on ESPR and the Working Plan, then on the Commission's live iron and steel DPP page and current DPP implementation roadmap. The JRC steel material is used to explain the direction of travel, but every proposition drawn from it remains labelled as development evidence.

CBAM is treated as adjacent law. Its data requirements are not silently relabelled as DPP content.

Evidence path: plain-English answer → current status → legal/official basis → primary source.

Direct answers

Do iron and steel products currently require a DPP?

A final generally applicable iron and steel DPP obligation is not established today. The category is in official ESPR development.

Why are iron and steel a priority?

The Working Plan identifies large climate, energy, water and air impacts and the strategic importance of steel as an intermediate product.2

What is the current delegated-act timing?

Q4 2026, according to the Commission's current indicative roadmap.36

Does Q4 2026 mean businesses must comply then?

No. It is planned adoption timing, not an application deadline.

What product information is being considered?

Official work covers identity/classification, technical and material data, circularity including recycled content, sustainability information and compliance/traceability. JRC work adds detailed proposals for PCF, recycled content, origin and other fields.68

Are carbon and recycled content final?

No. Both are In official development for the steel DPP.

Is facility information final?

No. Not established as a final steel DPP field. CBAM installation data may already be required for covered imports under separate law.

Is origin final?

No. It appears in preparatory work and adjacent CBAM data, but final DPP treatment is not established.

Are identifiers settled?

No. ESPR's UPI principle is established. The steel-specific identifier scheme is not final.

Is granularity settled?

No. The JRC proposes heat/batch-centred identification with some item-level cases, but the delegated act must settle the legal design.

Are access rights settled?

No. The JRC proposes tiers, but the final access matrix is not adopted.

What can businesses safely prepare?

Governed identity, product hierarchy, classifications, technical evidence, current CBAM data where applicable, provenance, machine-readable exchange and flexible access controls.

Keep exploring

The questions this page usually raises next.

Does this reach your products?

Give ActivateDigital one product and it works out which obligations apply from the product's own character, and says which it cannot decide.

Worth sharing?

Help someone else make sense of product passports.

LinkedInXEmail

Primary sources

This is a regulatory information resource, not personalised legal advice. Scope and obligations should be checked against the law applying to the specific product and operator.