Put your own brand on it and you stop being the retailer.
In law, most retailers are distributors: they make products available on the market without creating them, and their Digital Product Passport duty is to verify rather than to author. That is the easy part, and it is covered in depth on our distributor page. The harder part is what retail does that pure wholesale does not — private label, shelf and label expectations, marketplace listings, and onboarding hundreds of new lines a season from suppliers who may never have heard of the ESPR.
Last updated:
In one line: a retailer selling third-party brands has the lighter distributor duty to verify, but the moment a product carries your own name or trademark you generally take on the manufacturer's obligations for it — private label is where retail DPP risk actually lives.
Own brand flips you into manufacturer duties
This is the point worth acting on. EU product law has a long-standing principle: place a product on the market under your own name or trademark and you are generally treated as its manufacturer, whoever physically made it. Your private-label range is not a procurement decision with a branding upside — it is a regulatory position change.
Practically, for own-brand lines you inherit the full set of manufacturer obligations: assembling the passport data, ensuring its accuracy, keeping it current through supplier and spec changes, publishing it via the data carrier and keeping it accessible for the regulated lifetime. And if the private-label goods come from outside the EU, you are simultaneously the importer. Most retailers of any size are running all three positions at once — distributor on branded goods, importer on direct sourcing, manufacturer-equivalent on own label — and the first useful exercise is simply to classify every range accordingly.
Where the passport meets the shelf
Retail is where the passport becomes physical, and that raises questions no upstream operator has to answer.
The carrier must survive retail handling. Price guns, security tags, shelf-edge repackaging and returns processing all cover or destroy QR codes. If a customer or inspector cannot scan it, the passport is not accessible.
Staff will be asked about it. Consumers scan codes. Expect questions about materials, repairability and origin, and expect the answers to come from the passport rather than from the packaging copy.
Consistency across channels. A product's passport data and its listing claims should not disagree. Contradictions between a passport field and a marketing claim are exactly the kind of thing a complaint gets built on.
Returns and re-shelving. Goods coming back need their carrier checked before they go out again.
Marketplaces and online listings
Selling through marketplaces adds a layer. Platforms increasingly enforce compliance at listing level, because they carry their own obligations to identify traders and act on non-compliant offers. The realistic expectation is that passport data becomes a listing requirement — a field to populate, with suspension as the enforcement mechanism — well before any authority contacts you directly.
Two consequences for retailers. First, structured passport data is more valuable than a PDF: you will be asked to supply it into forms and feeds, at scale, across marketplaces. Second, a marketplace suspension does not care whose fault the missing data was; it removes your revenue while you chase a supplier. Build the data position before the requirement, not after the takedown.
What to demand from a supplier before you onboard a product
Retail onboards new lines constantly, which makes this a template problem rather than a case-by-case one. Put the following into your supplier pack and range-review process:
Named responsible EU operator for the product, with a contactable address.
Passport status and expected date for the product group, with a commitment to deliver passport data before first delivery once the group is covered.
The underlying data, not just a link — materials, composition, repairability and substance information in a form you can re-use, especially for own-brand lines where you are the author.
Change notification — a contractual duty to tell you when components, suppliers or specifications change, since your passport has to follow.
Cost allocation — who bears the cost of non-compliance, delisting or withdrawal.
For branded goods you are verifying someone else's work — see the distributor checklist. For own-brand you are producing it, and a free readiness check is the quickest way to see how much of your existing supplier documentation already maps to passport fields.
Frequently asked questions
Are retailers manufacturers or distributors under DPP rules?
Usually distributors: you make products available without creating them, so your duty is to verify that a compliant passport exists and is accessible. The exception matters more than the rule — own-brand and private-label products generally put you in the manufacturer position.
Does private label really give us manufacturer obligations?
Yes. Placing a product on the market under your own name or trademark generally makes you its manufacturer in EU product law, regardless of who produced it. For DPP purposes that means authoring and maintaining the passport, not merely checking one.
A supplier says their passport is coming later. Can we list the product?
Once the applicable delegated act obliges a passport for that product group, making the product available without one is not a position you want to be in. Before that point it is a commercial judgement — but write the delivery commitment into the supply agreement now rather than renegotiating under deadline.
What if the QR code on a product is damaged or covered?
Then the passport is effectively inaccessible, which is the thing the carrier exists to prevent. Treat carrier integrity as a shelf-readiness check: do not cover it with price or security labels, and check it on returns before re-shelving.