Glossary Updates12 new terms added to the glossaries · October 2, 2026, 22:44 CEST
AI TechDocKnowledge

Glossary · DPP in the company: ownership and trust

Updated

DPP access rights

Also known as: passport access rights, DPP access levels, tiered access

DPP access rights are the rules that define which audience may see or change which part of a digital product passport — typically the public, restricted users such as repairers and recyclers, market surveillance and customs authorities, and business partners. The delegated act sets the legal minimum; the company decides and documents the rest.

  • EU
  • DPP
  • Data governance

In one sentence

DPP access rights define who may see or change which passport data: the public, repairers and recyclers, authorities and business partners.

Example

A furniture passport shows material composition and care instructions publicly, disassembly instructions to registered repairers, and the full compliance documentation only to authorities.

How it applies

  • Audiences: Public information for consumers; restricted information for repairers, recyclers and other parties with a legitimate interest; authorities with access to what they need for enforcement; business partners along the value chain with contractually agreed access.
  • Who decides: The delegated act prescribes access for some data. For everything else, the DPP owner decides together with legal, security and the data owners, and records the reasoning.
  • Write access: Access rights also govern who may change passport data. Changes should go through DPP change control, not direct edits.
  • Reviews: Review access when the product, the delegated act, a supplier relationship or the audience changes. An access model set once at launch drifts out of date.
  • Standards: EN 18239:2026 addresses access rights management. It is a final standard but not cited in the Official Journal, so it gives no presumption of conformity.

Compared with the USA, Canada and China

Traceability data in the USA, Canada and China is mostly shared with authorities and trading partners, not with the public, so tiered access is simpler there. The EU passport's mix of public and restricted layers is new for most companies.

Read more on AI TechDoc Press

The in-depth analysis behind this entry, in the AI TechDoc Press newsletter. Subscribe for free