{
 "url": "https://activatedigital.ai/knowledge/passport/personal-data-and-gdpr",
 "title": "Digital Product Passports and Personal Data: Where GDPR May Apply",
 "description": "Where personal data can arise around a Digital Product Passport (DPP): product data, customer data, Registry accounts and business processing under GDPR.",
 "territory": "dpp",
 "category": null,
 "direct_answer": "A Digital Product Passport is primarily a product-information system, not a customer database. ESPR says customer personal data must not be stored in the DPP without explicit consent.",
 "last_verified": "2026-09-03",
 "verified_label": "Last verified",
 "datePublished": "2026-09-03",
 "dateModified": "2026-09-03",
 "legislation": [],
 "primary_sources": [],
 "glossary_terms": [
  "https://activatedigital.ai/knowledge/glossary#delegated-act",
  "https://activatedigital.ai/knowledge/glossary#digital-product-passport",
  "https://activatedigital.ai/knowledge/glossary#dpp-registry",
  "https://activatedigital.ai/knowledge/glossary#economic-operator",
  "https://activatedigital.ai/knowledge/glossary#espr",
  "https://activatedigital.ai/knowledge/glossary#gdpr",
  "https://activatedigital.ai/knowledge/glossary#implementing-act",
  "https://activatedigital.ai/knowledge/glossary#resolver"
 ],
 "watch": [],
 "decisions": [],
 "alternates": {
  "html": "https://activatedigital.ai/knowledge/passport/personal-data-and-gdpr",
  "markdown": "https://activatedigital.ai/knowledge/passport/personal-data-and-gdpr.md",
  "json": "https://activatedigital.ai/knowledge/passport/personal-data-and-gdpr.json"
 }
}