what fine can I receive if I don't have a product passport for my steel
The penalty amount has not yet been determined
There is no concrete penalty amount yet for the absence of a product passport for steel, because the sanction rules for this still need to be established by each Member State. The ESPR (Regulation (EU) 2024/1781) does require Member States to establish effective, proportionate and dissuasive sanctions, but the level and form of these are determined by the Netherlands itself in national legislation. That national implementation does not yet exist, so naming an amount would be guesswork. What is already established is the broader system within which market surveillance and enforcement take place: this is regulated in Regulation (EU) 2019/1020.
Who this applies to, and who it does not
This question is particularly relevant for parties responsible for placing steel products on the market: manufacturers, importers and parties selling steel under their own brand. Who exactly bears this responsibility is not always self-evident — who is responsible for the steel product passport set that out, and anyone in doubt about whether they actually qualify as a manufacturer or importer will find more information in am I an importer or manufacturer according to the ESPR.
For distributors and traders who only resell steel without placing it on the market under their own name, the responsibility is different — they have their own, more limited obligations, such as checking whether a passport is present rather than drawing it up themselves. For sales via a marketplace or from a manufacturer outside the EU, responsibility also shifts; this is not a matter of penalties but of who is required to act at all. This page is therefore not about who must act, but about what can happen if they do not.
When sanctions will apply, and what applies until then
There is no date yet on which sanctions for the absence of a product passport for steel will actually take effect, simply because the underlying obligation itself has not yet been established. The ESPR works with delegated acts per product group, and for iron and steel that act does not yet exist. As soon as it is published, a concrete obligation with an effective date will emerge, and only after that can enforcement and sanctioning actually take place.
Until then, there is no obligation to have a digital product passport for steel, and therefore no penalty for its absence. However, the broader market surveillance of Regulation (EU) 2019/1020 has already been in place for some time for product safety and conformity in the general sense — that framework does not change, but the specific requirement for the product passport will be added on top of it as soon as it comes into force.
What this means for practice
Anyone already engaged with this subject is well advised to first determine what role they themselves play in the chain, as this determines which obligation will apply later and thus which sanction risk is relevant. A manufacturer or importer bears a different responsibility than a trader who only resells — that difference is described in what obligations does a distributor or trader of steel have.
After that, it is worthwhile to look at what can practically already be arranged, even without the legal obligation being established yet: what data is already available on the origin, composition and processing of the steel, and who within the organisation should keep track of that. Anyone wondering whether this can be done with existing staff or is better outsourced will find more information in do I need extra staff for the product passport or can I outsource it. For anyone already dealing with CBAM reporting, it is also practical to look at the overlap between that reporting and the data that will later be needed for a product passport — that saves double work, see how do I combine my CBAM reporting with the product passport.
It is also important to know that the risk does not only lie in the absence of a passport, but also in its content: who is liable if incorrect information is included is a question that equally deserves preparation, and this is addressed in who is liable if there is incorrect data in the product passport. And anyone who wants to know what practically happens in the meantime if nothing is done will find a broader overview in what happens if I have no product passport for my steel.
Based on this: Article 40 ESPR and Regulation 2019/1020
The obligation for member states to establish sanctions in case of infringement of the ESPR follows from Article 40 of Regulation (EU) 2024/1781, which concerns the prevention of circumvention and degradation of performance and the broader enforcement of the regulation. This article requires that sanctions be effective, proportionate and dissuasive, but leaves the concrete implementation — amounts, categories, procedures — to the member states. The Netherlands must therefore establish those national rules itself, and this can only be done properly once the delegated act for steel is also in place, because that determines what exactly is required.
Furthermore, Regulation (EU) 2019/1020 is relevant because it establishes the general framework for market surveillance and product conformity in the EU, including the powers of market surveillance authorities to monitor and take action. Anyone who wants to know which authority in the Netherlands will concretely fulfil that monitoring role for the product passport can find more information about this in which supervisory authority checks the product passport in the Netherlands.
Anyone wishing to make preparations at this moment would be best advised to start by mapping out their own role in the supply chain and the available product data, and to keep track of developments regarding the delegated act for steel — as soon as it is known, the concrete date and content of the obligation will appear here.
What this is based on
- Regulation (EU) 2019/1020 (market surveillance and product compliance)
- Regulation (EU) 2024/1781 (ESPR), Article 40 (prevention of circumvention and degradation of performance)
The regulation itself can be found on EUR-Lex. We provide references for each statement; you do not have to take our word for it.
What you must concretely do
What is expected of you
The question "what fine applies to the absence of a product passport" cannot be answered with an amount at this time. The ESPR (Regulation (EU) 2024/1781) leaves the establishment of sanctions to the EU member states. The Netherlands must therefore establish its own sanctions regime, and this does not yet exist. What is already in place is the framework within which market surveillance and enforcement will take place: Regulation (EU) 2019/1020. That regulation governs how market surveillance authorities may monitor products and what measures they can take if a product does not meet the requirements — independent of the question what monetary amount will ultimately be linked to it.
For a company with between 10 and 100 employees, it is more practical to look at what is already established than to wait for a fine schedule that does not yet exist.
Ensuring that the product has a passport before it is placed on the market
The obligation to ensure that a product passport is present rests with the person who places the product on the market. Who exactly that is varies depending on the situation: a manufacturer, an importer from outside the EU, or sometimes a distributor selling under its own brand. A company of this size is well advised to determine for each product line who in the supply chain fulfils that role, as this determines who must have the passport drawn up and who is accountable for it. This is precisely where many companies already run into problems before market surveillance is even discussed — see who is responsible for the product passport for steel?.
Determining whether you are a manufacturer, importer or something else
The obligations arising from the ESPR differ by role. A company that sources steel from a country outside the EU and sells it under its own name can be classified as an importer or even as a manufacturer for those products, with the corresponding obligations. This distinction is not always self-evident and deserves a separate assessment — see am I importer or manufacturer according to the ESPR?.
Do not allow the passport to be manipulated or circumvented
Article 40 of the ESPR (Regulation (EU) 2024/1781) requires prevention of circumvention and of deterioration of performance that would otherwise be visible in the product passport. Specifically, this means that a company must not manipulate the "improvement" of data without this reflecting the actual composition or performance of the steel. For a production company, this particularly concerns quality assurance: the data supplied for the passport must correspond to what is actually produced and delivered.
Cooperation with market surveillance
Regulation (EU) 2019/1020 grants supervisory authorities powers to request documentation, inspect products and require corrective measures. For a company of this size, this means there must be someone who knows where the underlying data for the product passport come from and who can demonstrate this upon request. Which supervisory authority will do this in the Netherlands in practice and how these inspections will proceed is discussed on which supervisory authority checks the product passport in the Netherlands.
Where things go wrong in practice
An importer assumes that the foreign manufacturer remains responsible. Once steel from outside the EU is imported and the manufacturer has no contact point in the EU itself, the role of "responsible party" may shift to the importer itself, even if the importer does not explicitly agree to this. This is set out further on my manufacturer is located outside the European Union — who regulates the product passport then?.
A trader sells steel under its own brand name without realising that this entails a different role. Applying its own brand to a product manufactured elsewhere may, under the ESPR framework, lead to manufacturer obligations. Anyone who overlooks this may miss not only the product passport but also the associated responsibilities — see I sell steel under my own brand — what obligations do I incur?.
A wholesaler assumes that only the manufacturer has to do something, and not itself. A distributor or trader has its own, more limited obligations, such as checking whether a product passport is present before the product is resold. Failure to do so may make the distributor itself subject to market surveillance — see What obligations does a distributor or dealer of steel have?.
Sales via an online marketplace are treated as "ordinary" sales. Sales via a platform raise specific points of attention about who must provide which information at the time of offering, before any physical delivery takes place — see what does the product passport mean if I sell steel via an online marketplace?.
Data in the product passport no longer match the actual batch of steel. This can happen due to an error in data submission, due to a change in the production process that has not been updated in the product passport, or due to insufficient coordination between production and administration. Who is responsible for this is a separate question that is independent of whether a fine is imposed — see who is liable if there is incorrect data in the product passport.
What you can document
- An overview per product line of who in the supply chain is designated as manufacturer, importer, distributor or brand owner, and on what basis that role has been determined.
- The underlying source files used to compile the product passport, including the date of submission and who submitted the data.
- Correspondence with the manufacturer or importer concerning the accuracy of the submitted data, especially when the manufacturer is established outside the EU.
- An internal arrangement on who within the company is responsible for keeping passport data up to date when production processes change.
- A decision on whether to outsource the compilation and management of product passports, and the arrangements made with an external party in this regard — see also do I need extra staff for the product passport or can I outsource it.
- For companies that also report under CBAM: an overview of where the data flows for CBAM and for the product passport overlap, to prevent duplication and contradictory figures — see how do I combine my CBAM reporting with the product passport.
Once the delegated act for steel has been published and the Netherlands has established a sanctions regime, this article will be supplemented with the specific amounts and deadlines. Until then, documenting roles, sources and arrangements is the most concrete step a company can take itself.
This is not legal advice. This page provides general information about the legislation that this platform deals with. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, verified by a human on 2026-09-05. Is anything incorrect? Let us know — corrections are given priority.