Traceability Is DPP's Most Important Prerequisite

The DPP Is Only as Good as the Data Behind It

Every conversation about Digital Product Passport implementation eventually arrives at the same point: the technology is not the hard part. The hard part is the data. And the hardest data to obtain — the data that determines whether a DPP is genuinely informative or a compliance formality filled with approximations — is supply chain data.

Where was this garment made? Where did the cotton come from? Who processed the fabric? What facility dyed it? What chemicals were used at what stage? These questions are not new. They have been asked by sustainability teams, audit organizations, and sourcing managers for years. What is new is that the EU's Ecodesign for Sustainable Products Regulation (ESPR) is turning them into mandatory disclosures — and connecting compliance directly to the quality of the answers.

A DPP platform can be technically perfect — fully compliant with GS1 Digital Link, equipped with a functioning resolver, capable of serving differentiated data to every stakeholder category. If the supply chain data it contains is incomplete, inaccurate, or missing entirely, the DPP fails its fundamental purpose. Traceability is not a prerequisite for DPP technology. It is a prerequisite for DPP compliance.

What Traceability Means in the DPP Context

Supply chain traceability is a spectrum, not a binary state. In the DPP context, it spans several levels of depth:

Tier 1: Final Assembly

The CMT (Cut, Make, Trim) facility where the garment was assembled. This is the most widely available level of supply chain data — most brands know their Tier 1 factories, and many already disclose them voluntarily. For DPP purposes, Tier 1 data must be structured at the facility level: name, location (city, country), and ideally a standardized facility identifier.

Tier 2: Material Processing

The facilities that processed the raw materials before assembly — dyehouses, finishing mills, weaving or knitting facilities, yarn spinners. This is where traceability gaps typically begin. Many brands have only partial visibility into Tier 2, relying on their Tier 1 factories to report upstream suppliers — which they do inconsistently, and with varying accuracy.

Tier 3 and Beyond: Raw Material Origin

The country — and ideally the specific source — of raw material origin: where the cotton was grown, where the wool was shorn, where the synthetic fibres were produced. This level of traceability requires either direct sourcing relationships with raw material producers or robust traceability mechanisms (physical tracing, isotope testing, or certified chain of custody) that most brands do not yet have in place for all materials.

The DPP data requirements for textiles span all three levels. Country of origin of raw materials and names of processing facilities are not aspirational disclosure targets — they are mandatory DPP data fields. Brands without traceability below Tier 1 will have data gaps in their DPP that cannot be filled by platform capability alone.

The Scale of the Traceability Gap

The textile industry's traceability gap is well documented. Supply chains for most garment categories involve four to eight processing stages between raw material and finished product, spread across multiple countries, often involving sub-contractors not directly contracted by the brand. At each stage, data visibility typically degrades.

A common pattern: a brand has full visibility of its Tier 1 CMT factories (100% known), partial visibility of its fabric mills (perhaps 60–70% known at the facility level), limited visibility of dyehouses and finishing facilities (perhaps 30–40% known), and minimal to no direct visibility of yarn spinners or fibre origins (often unknown beyond country level).

This pattern reflects how the industry has historically structured its sourcing relationships — buying finished or near-finished goods rather than managing raw material supply chains directly. The DPP's supply chain disclosure requirements are, in effect, a regulatory mandate to restructure those sourcing relationships around data transparency rather than transaction efficiency.

The most effective investment a brand can make today for DPP readiness is not selecting a DPP platform — it is mapping its supply chain below Tier 1 and establishing structured data-sharing relationships with the facilities that make up that map.

How Traceability Data Feeds DPP Requirements

Supply chain traceability data feeds directly into multiple DPP data categories — not just the supply chain category itself:

Supply Chain Information (Direct)

Supplier names, facility locations, production stages, and country of origin data populate the supply chain data category directly. Without facility-level Tier 2 and Tier 3 data, this category will be incomplete at enforcement.

Material Composition

Accurate component-level fibre composition data — the type of breakdown DPP requires, going beyond the overall garment composition on the care label — is most reliably obtained from the mills and processors that handle the material, not reconstructed from design specifications alone. Traceability to the material processor enables composition verification.

Environmental Performance

The manufacturing location and process type data obtained through supply chain tracing — combined with publicly available emission factor datasets — is the starting point for indicative product impact calculation. Without traceability data, even proxy-based environmental impact estimation is unreliable.

Chemical Compliance

Knowing which dyehouse or finishing facility processed a fabric is essential context for REACH compliance documentation. Chemical compliance records are only meaningful when they can be linked to specific processing steps — and that linkage requires knowing which facility performed each step.

Circularity Information

End-of-life guidance and recyclability assessments depend on accurate material composition data — which in turn depends on traceability to the point in the supply chain where material decisions were made.

Building Traceability: The Practical Path

For brands with limited sub-Tier-1 visibility, building traceability is a multi-year process. The practical path involves several parallel workstreams:

Supply Chain Mapping

The first step is systematically documenting the facilities involved in each product's production journey — starting with what is already known (Tier 1) and extending progressively upstream. This mapping is done product by product, not at the brand level, because different products in the same range may pass through entirely different supply chains.

Effective supply chain mapping requires direct engagement with Tier 1 suppliers — asking them to disclose their own suppliers and processing partners. Many brands find this conversation easier than expected when framed in terms of regulatory compliance rather than audit pressure. Suppliers who understand that the brand will face compliance consequences for missing upstream data have an incentive to provide it.

Supplier Data Agreements

Traceability data collection needs to be formalized in supplier relationships — not left to voluntary disclosure. Purchase order conditions, supplier codes of conduct, and onboarding requirements should include explicit obligations to provide facility-level supply chain data at the level of detail DPP requires. This gives sourcing teams the contractual basis to require data that sustainability teams requesting it informally may lack.

Standardized Data Collection

Ad-hoc data collection — different questionnaires for different suppliers, manual entry of responses into spreadsheets — produces inconsistent, hard-to-use data. A standardized data collection framework, with consistent field definitions and a structured submission format (portal-based or API-based), produces data that can be directly loaded into a DPP-ready system without extensive manual processing.

Certification as a Traceability Shortcut

For some supply chain stages, certified chain-of-custody schemes (such as GOTS, GRS, or equivalent) provide a form of traceability verification that substitutes for facility-level disclosure. A material certified under GOTS throughout the supply chain provides verified assurance about processing standards and chemical use without requiring the brand to independently document every processing facility. Certification-based traceability has limitations — particularly for the specific facility data DPP requires — but it is a useful complement to direct data collection, especially for deeper supply chain tiers where direct tracing is most difficult.

Progressive Deepening

Brands should not wait until they have complete end-to-end traceability before beginning DPP data collection. Begin with what is known — Tier 1 data — and progressively extend upstream. A DPP that contains complete, verified Tier 1 and Tier 2 data with documented gaps at Tier 3 is significantly more compliant (and more useful to downstream actors) than a DPP that waits for perfect data before being populated at all.

Traceability Investment Pays Back Beyond DPP

One important reframe for brands hesitant to invest in traceability infrastructure: the value of supply chain visibility extends well beyond DPP compliance. Brands with strong supply chain traceability are better positioned to:

• Manage supply chain risk — understanding where materials come from and which facilities process them is foundational to identifying exposure to forced labour, environmental violations, or geopolitical supply disruptions
• Respond to due diligence requirements — the EU Corporate Sustainability Due Diligence Directive (CSDDD) and similar regulations in Germany and France require documented supply chain due diligence that traceability data directly supports
• Substantiate sustainability claims — the Green Claims Directive requires that environmental claims be verifiable. Claims about sourcing, processing, or material origin can only be verified if traceability data exists to substantiate them
• Engage buyers with confidence — retailers and B2B customers increasingly require supply chain transparency as a procurement condition. Brands with traceable supply chains can respond to these requests systematically rather than manually for each buyer relationship
• Optimize sourcing decisions — visibility into where materials come from and how they are processed enables more informed decisions about supplier selection and development

The investment in traceability infrastructure for DPP compliance is not a compliance cost that disappears after 2028 enforcement begins. It is a supply chain capability that compounds in value across multiple regulatory and commercial dimensions.

Where to Start Today

Brands beginning their traceability journey for DPP purposes should prioritize in this order:

1. Complete your Tier 1 supplier registry. Ensure every CMT facility involved in your production is documented with consistent naming, facility-level location data, and — where available — a standardized facility identifier. This is your baseline.
2. Request Tier 2 disclosure from your Tier 1 suppliers. For each Tier 1 factory, ask them to disclose the fabric mills, dyehouses, and finishing facilities they use for your products. Frame this as a regulatory compliance requirement — which it is — rather than a voluntary disclosure request.
3. Prioritize your highest-volume products. Start traceability mapping with the products that represent the largest share of your units placed on the EU market. These are both your highest compliance risk and the products where data investment has the greatest scale benefit.
4. Establish a structured data collection process. Whatever tool or platform you use, ensure supplier data is collected in a consistent, structured format that can be loaded directly into a DPP-ready system. Avoid creating new data silos in the process of solving the traceability problem.

Frequently Asked Questions

Is Tier 1 traceability sufficient for initial DPP compliance?

Tier 1 traceability alone will not satisfy the full DPP supply chain data requirements, which include upstream processing stages and country of origin of raw materials. However, starting with complete, structured Tier 1 data and progressively extending upstream is a valid and practical approach. The alternative — waiting until full end-to-end traceability exists before populating any DPP data — will leave brands with nothing ready at enforcement. Document gaps transparently and show active progress toward completing upstream data.

Can brands use industry-average data where supply chain traceability is incomplete?

For internal decision-making and indicative impact calculations, yes — industry-average proxy data is appropriate and useful. For DPP consumer-facing disclosures, proxy data should be clearly labelled as estimated or indicative rather than presented as verified supply chain data. The specific rules for how proxy data may be used in published DPPs will be detailed in the Delegated Acts, but the general principle under the Green Claims Directive is that unsubstantiated claims — including implied precision in data that is actually estimated — create liability.

How does traceability relate to the EU Corporate Sustainability Due Diligence Directive (CSDDD)?

CSDDD requires in-scope companies to conduct and document due diligence on human rights and environmental risks in their supply chains. This requires knowing who is in the supply chain — which is the same data that DPP supply chain traceability requires. Brands building traceability infrastructure for DPP compliance will find that the same supplier mapping, facility registry, and data collection processes also form the foundation of their CSDDD due diligence documentation. The two obligations share a data infrastructure, even if their specific requirements differ.