ferropas.eu

How do I verify that my supplier's data is correct?

Reliable measurement methods, not personal assessment

The ESPR does not prescribe how a purchaser must verify data from their supplier themselves, but it does establish where that data must come from. Article 39 of the ESPR (Regulation (EU) 2024/1781) determines that data contained in a product passport must have been generated using test, measurement or calculation methods that are reliable, accurate and reproducible. Article 40 supplements this with a prohibition: a product, or the software or algorithms within it, must not be designed in such a way that performance during measurement is more favourable than in normal use, and performance must not deteriorate over time in a manner that circumvents the stated requirements. For those receiving data from a supplier, this means that the source of a figure — which method, which standard, who conducted the measurement — is the starting point. Not the gut feeling that a value sounds "logical".

Directed at the manufacturer, not the purchaser

Article 39 and 40 are directed at the person who tests, measures or calculates the product and subsequently places it on the market: in practice the manufacturer or importer of the iron or steel semi-finished product. The steel trader, the metal processor or the construction company that receives the passport is not subject to this obligation — that party is a recipient, not a compiler. These articles also do not instruct a purchaser to have laboratory tests repeated themselves, and they do not function as an arbitrator when two parties disagree about a measured value. What also does not follow from this: which specific standard for iron and steel must be used. That will be laid down per product category in delegated acts that do not yet exist for this sector.

No fixed entry date yet

A fixed date on which these requirements for iron and steel will apply is not yet established. What is established: the ESPR itself, with Articles 39 and 40, has already entered into force, but the concrete product rules — including any standards for test and measurement methods specific to iron and steel — still have to be laid down via a delegated act. According to the European Commission's work programme for the period 2025-2030, the first delegated act is expected in 2026, with obligations coming into effect at a later date thereafter. Until that act is in place, there are no mandatory product passports for iron and steel, and therefore no legally prescribed checkpoints for the data within them.

What to watch for when receiving data

In practice it comes down to a few steps to follow in logical order. First: ascertain which test, measurement or calculation method underlies a given figure, and whether this can be traced back to a standard, certificate or test report rather than to a bare figure without explanation. Then: assess whether that substantiation is traceable — is there a document being referred to, or does it remain a claim. Next, it is worth paying attention to signals that align with what Article 40 seeks to prevent: a value that is noticeably more favourable than comparable products, without a clear technical explanation for it. Also practically: keep the supporting documents from your supplier separately alongside the passport itself, because ferropas.eu's ten-year hosting of the passport concerns the passport itself, not automatically the source documents that the supplier has provided. And if in doubt about a specific case: ask your supplier or consult the official regulation text, rather than making a judgment yourself.

The basis: Article 39 and 40 ESPR

That data in a digital product passport must be based on a verifiable method follows from Article 39 of the ESPR (Regulation (EU) 2024/1781), which sets requirements for the reliability, accuracy and reproducibility of test, measurement and calculation methods. That data must not be artificially presented in a favourable manner or deteriorate over time follows from Article 40 of the same regulation, which prohibits circumvention and degradation of performance. Both articles are formulated generically and apply to products in general; how they apply concretely to iron and steel depends on the product-specific delegated act that is still to follow.

If you are already working with a supplier, you can now ask on the basis of which method or standard the specified values have been determined and keep that substantiation. Once the delegated act for iron and steel has been published, this will be supplemented with which standards and control points are specifically prescribed in it.

What this is based on

The regulation itself can be found on EUR-Lex. We provide references for each statement; you do not have to take our word for it.

What you must concretely do

What is expected of you

Complying with the test, measurement and calculation methods in Article 39

Article 39 of the ESPR (Regulation (EU) 2024/1781) provides that the data in a product passport shall be established in accordance with established test, measurement and calculation methods. These methods shall be developed per product group in delegated acts — for steel this has not yet been published. In practical terms, for a company with 10 to 100 employees, this means that a data point such as the recycled content or a CO2 value is not simply a figure that a supplier passes on: there must be a method behind that figure by which it has been determined. Those receiving data can therefore ask on the basis of which method a figure has been calculated, even if a definitive method for steel has not yet been established.

Preventing circumvention and degradation of performance

Article 40 of the ESPR concerns the prevention of circumvention and degradation of performance: it is not the intention that a product shows different properties during a test than during normal use, or that a manufacturer allows the performance of a product to deteriorate once it has been approved or certified. For a metal processor or construction company that purchases semi-finished products, this means that a data point that has been established at one point in time — for example, at the first delivery of an alloy — does not automatically continue to apply to subsequent deliveries. The underlying thinking of Article 40 is that the actual, used performance corresponds to the stated performance, and this is something that a customer must remain vigilant about in practice, even with a fixed supplier.

Verifying for yourself that the supplied data is plausible

There is nowhere in the ESPR an obligation for the recipient to verify or certify supplier data themselves. What does follow from it — via the methods of Article 39 and the starting point of Article 40 that performance must be real — is that a company has an interest in being able to assess supplied data: does the value correspond to what is customary for this type of steel, can the origin of the data be traced, and is it clear who has supplied which part of the passport. For a company with 10 to 100 employees, this is usually not a separate control team, but a standard step when receiving a delivery: a quick look at the supporting documentation alongside the invoice and delivery note.

Where things go wrong in practice

A supplier provides a figure without supporting documentation. A percentage of recycled material arrives, but not the calculation method on which it is based. Without that information, it is not possible to see whether the figure has been determined according to a method that complies with Article 39, or whether it is an estimate.

Data does not change, while the production process has been modified. A supplier changes, for example, the melting route or the percentage of scrap, but the passport remains unchanged. This touches precisely on what Article 40 seeks to prevent: that an once established performance becomes disconnected from the actual, current production.

Data from different suppliers are combined without explanation. In the case of a composite semi-finished product, figures from multiple batches may appear side by side without it being clear which part comes from whom. For those dealing with this, further information on the approach to this is available at how do I combine data from different suppliers in one passport.

Data from a country outside the EU are difficult to verify. When importing steel from outside the Union, there is often no direct way to verify the underlying measurement method; background information on this is available at how do I know if data from my foreign supplier is correct.

A supplier refuses to provide supporting documentation by invoking an NDA. Confidentiality and the provision of substantiated data are sometimes set against each other, while with the right agreements a workable form can be found for this — see can I agree on an NDA and still comply with the passport.

What you can document

  • The requested supporting documentation per data point. Which values are requested and which method or standard applies to them — an overview of this is available at Which data must I request from my steel supplier?
  • A contractual agreement on the provision and updating of data. Recording when data is delivered, in what form, and what happens if the production process changes — how this can be included in a purchase contract is set out in How do I record the delivery of passport data in my purchasing contract?
  • A fixed procedure for what to do in case of missing or incomplete data, including the point at which this is followed up with the supplier — see My supplier does not provide the data — what can I do?
  • An internal log of data received per delivery, with date, supplier and the corresponding evidence, so that data can be traced back later
  • A short internal checklist for whoever enters the data, containing the question of whether a value is plausible given previous deliveries from the same supplier or the same type of steel

This is not legal advice. This page provides general information about the legislation that this platform deals with. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.

Written with AI based on the sources above, checked by a human on 2026-08-22. Is something not right? Let us know — corrections are given priority.