My supplier does not provide the data — what can I do?
The obligation to provide data does not rest with you alone
If a supplier fails to provide the requested data, responsibility for the digital product passport does not automatically disappear from the manufacturer or importer — but that responsibility does not stand in isolation. The ESPR (Regulation (EU) 2024/1781) distinguishes between the manufacturer, who must have the passport drawn up and ensure it is linked to the product, and other actors in the supply chain, who are themselves obliged to make relevant information available. A supplier who refuses or does not respond thereby violates not only an agreement between two trading partners, but possibly also an obligation that flows directly from the regulation itself. This changes the conversation: it is then not only about "can you provide this", but about a legal obligation that rests on the supplier itself.
Who this applies to and who it does not
This topic concerns the relationship between a manufacturer or importer and the parties further down the chain — raw material suppliers, manufacturing facilities, fabric producers — insofar as they fall under a product category for which a delegated act is in force. It does not concern general business information that has nothing to do with the digital product passport, and not about how a contractual dispute between two companies is settled — that is civil law territory, and the ESPR does not regulate that. Also important: as long as no delegated act has been published for clothing and textile products, the legal obligation under Article 38 for that product category does not yet exist. The regulation itself is already fixed, but its application to textiles is still awaiting that elaboration.
When this takes effect, and what applies until then
A fixed date for clothing and textile products is not currently set. What is certain: in the work plan for 2025-2030, a delegated act for textiles is expected in 2027, with clothing containing eighty percent or more textile fibres being the first category. Only once that act is published does the moment arise when the obligations under Article 27 and Article 38 for this type of product become concrete, including the obligation for supply chain actors to provide relevant data. Until then, there is no legal deadline on which a supplier can rely to avoid delivery, but there is also no legal enforcement mechanism to compel delivery specifically for textiles. Once the date is known, it will be stated here.
How this is addressed in practice
The first step is to check whether the product for which data is needed already falls under a published delegated act — for clothing and textiles, this is not yet the case, which means that the legal obligation under Article 38 is not yet applicable there. If it is, it is useful to document the request to the supplier in writing: which data has been requested, and when. The supplier can then be directed to the own obligation that follows from Article 38, making clear that this is not a favour but an obligation that the regulation itself imposes on that party. If a supplier subsequently still fails to comply, two parallel courses remain: the course of purchasing terms or the supply contract, in which agreements about data provision are often already included or can still be added, and the course of your own accountability as manufacturer or importer. The latter means: the efforts made to obtain data are documented — when was what requested, and what was the response. This is relevant because responsibility for the passport according to Article 27 remains with the manufacturer, even if a link in the chain does not cooperate.
The legal basis: Article 27 and Article 38 ESPR
Article 27 of the ESPR (Regulation (EU) 2024/1781) establishes the obligations incumbent on the manufacturer with regard to the digital product passport, including ensuring that the required information is available. Article 38 of that same regulation specifically addresses other actors in the supply chain and obliges them to provide the information necessary to comply with the requirements of the regulation. Both articles work together in this way: the manufacturer bears the ultimate responsibility for the passport, while the regulation simultaneously imposes an independent supply obligation on other links in the chain.
If you are already in discussion with a supplier about data supply at this moment, you can use these two articles as a starting point for the discussion, and keep your own correspondence on this matter — even if the obligation for clothing and textiles has not yet formally come into force. Once the delegated act for textiles is published, that preparation will count.
What this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 38 (requirements for actors in the supply chain)
- Regulation (EU) 2024/1781 (ESPR), Article 27 (obligations of manufacturers)
The regulation itself is available on EUR-Lex. We provide references for each statement; you do not need to take our word for it.
What you must do concretely
What is expected of you
The obligation lies with the manufacturer, not with the data supplier
Article 27 of the ESPR (Regulation (EU) 2024/1781) places responsibility for the product passport with the manufacturer. For a clothing brand or importer that places products on the market under its own name, this means: the duty to supply the data completely and correctly lies with the company itself, even if the actual information — fibre composition, country of make-up, chemical treatment — must come from a supplier. A company with 10 to 100 employees typically has no in-house production and is therefore dependent on third parties for almost all content. That dependence does not change where the obligation lies. Whoever brings the passport to market bears responsibility for its accuracy.
Actors in the chain have their own supply obligation
Article 38 of the ESPR (Regulation (EU) 2024/1781) describes requirements for actors in the supply chain: parties that have information needed for the passport are obliged to share it with the party assembling the passport. This is relevant for a brand to know, because it means that a supplier who refuses or delays does not escape — there is also an obligation on that side. In practical terms, this changes little about the brand's position in the short term: the passport must be produced, and the brand is the one it will be held accountable for. But it does provide a basis to refer to in the company's own contracts and communications.
Asking questions and recording is part of due diligence
What a company can practically do is ask early and specifically which data are needed, and record that in writing. What data must I request from my supplier of clothing and textiles? describes where that question is concretely about. For an organisation of this size, this is often a matter of one buyer or sustainability coordinator who works with a fixed list per supplier, rather than ad hoc email correspondence. Without that record, it is difficult afterwards to demonstrate what was asked and when.
Where things go wrong in practice
The supplier does not respond, and there is no contractual leverage. Many purchasing contracts with suppliers outside the EU were drawn up before the product passport became an issue and contain no provision for data delivery. Without such a provision, there is little ground to wait for something for which no agreement exists.
The data arrives, but too late for your own planning. A brand that wants to bring a collection to market discovers that the fibre composition or certificate is only available after production — while the passport must already be in place at the time of sale.
The product is made at multiple manufacturers and no one feels responsible for the whole. For a garment where the fabric, dye and make-up are with different parties, each party can refer to the next. my garment is manufactured by multiple manufacturers, who supplies which data addresses how that distribution works in practice, and why the brand itself must take control.
The supplier provides a certificate, but that certificate does not cover what is needed. A GOTS or OEKO-TEX certificate is submitted as "evidence", while it is unclear whether that certificate covers the correct period, batch or claim. can I use my GOTS or OEKO-TEX certificate as evidence in the product passport describes where that tension lies.
The brand adopts the supplied data without verifying it, and later discovers that it is incorrect. That risk is greater when importing from outside the EU, where there is less direct visibility into production conditions. What does the product passport mean if I import clothing and textiles from outside the EU? describes that situation specifically.
What you can record
- A written request per supplier, specifying exactly which data are needed and for which product or which collection. This is the basis for later demonstrating that a timely and concrete request was made.
- A contractual provision on data supply, included in the purchase contract or as an addition to it. How do I record the supply of passport data in my purchasing contract? describes what such a provision can consist of, including deadlines and consequences of non-delivery.
- A record of correspondence: when was what requested, what was the response, and what follow-up steps were taken. This is particularly relevant when a supplier consistently delivers late or incompletely.
- A fixed procedure for checking supplied data, so that what is received is not automatically accepted as correct. How do I verify whether my supplier's data is correct? describes how that check can look in practice.
- Agreements on audits or inspections at the supplier, for situations where data is repeatedly incomplete or unreliable. must I have my supplier abroad inspected for the product passport goes into when that is a reasonable step.
- An overview of which manufacturer supplies which part of the product, when production is divided among multiple parties, so that if one party fails, it is clear which data is missing and from whom that data should come.
This documentation does not change the fact that the brand itself remains responsible for the passport. What it does do is build a substantiation of its own efforts, for the moment when a supplier still does not deliver.
This is not legal advice. This page provides general information about the regulations that this platform covers. We are not familiar with your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-08-22. Is something wrong? Let us know — corrections are given priority.