how do I combine data from different suppliers in one passport
Multiple suppliers, one passport per product
Combining data from multiple suppliers in one passport is fundamentally a matter of maintaining proper traceability: every piece of data in the passport must be traceable to the actor that provided it. With a steel semi-finished product this occurs frequently — the rolling mill provides the material composition, a coating company provides data on surface treatment, and the trader or processor assembling the end product adds their own data on origin or processing. The passport that results is one document or one dataset, but the data within it remains linked to who provided it and on the basis of which method it was determined.
For composite products, not for the assumption of liability
This question arises particularly with products assembled from parts of different origin, or with a semi-finished product that has been processed by multiple links in the chain before reaching the end user. It concerns the technical and administrative combining of data: which piece of data comes from whom, and how that data together forms one coherent whole. It is not about assuming responsibility for the accuracy of what another party has provided. Whoever incorporates data from a supplier in the passport is not automatically liable for errors that supplier has made — but will be called to account if the passport as a whole is incorrect or incomplete. This distinction is relevant when drawing up agreements in the purchase contract on which party supplies which part of the data and at what point.
No fixed date yet, but a fixed order of obligations
There is no definitive date yet on which this obligation for iron and steel takes effect. That must emerge from a delegated act per product group, and that does not yet exist for steel. What is already fixed is the system: the ESPR itself regulates in Article 38 what is expected of actors in the supply chain, and the delegated act per product group will later supplement that with the concrete data requirements for steel. Until that act exists, there is no legal obligation to combine data from multiple suppliers in a passport — but it may be practical to determine now which supplier provides which piece of data, so that the chain does not have to wait for this later. More on that order and what a delegated act exactly entails, is on the page about it.
How this is tackled in practice
The first step is to find out which part of the product comes from which party and what data goes with it — a steel producer supplies different data than a galvaniser or a trader who repackages or processes material. Next, it is important to establish the method by which each piece of data was determined, because test, measurement and calculation methods may differ per supplier and this must remain recognisable in the passport rather than being merged into one apparently uniform figure. After that, it is a matter of determining which data must in any case be requested from the steel supplier so that there is no gap in the passport at the moment the data from different parties are combined. When one of the suppliers is outside the EU, it is worth examining what that means for the reliability of the supplied data, before that data is placed alongside that of a European supplier in the same passport. Finally, it is advisable to check the data from each supplier individually for accuracy before the passport is assembled — errors that only become apparent after combining are harder to trace back to the source.
Where this follows from: Articles 38, 10, 39 and 40 of the ESPR
Article 38 of the ESPR (Regulation (EU) 2024/1781) sets out the requirements for actors in the supply chain and forms the basis for the idea that each party supplying data is responsible for their own part of the information. Article 10 of the ESPR describes the requirements for the digital product passport itself, including that the passport must represent the data of the product as a whole, even if that data comes from multiple sources. Article 39 of the ESPR concerns test, measurement and calculation methods, which is relevant once data from different suppliers — possibly determined using different methods — end up together in one passport. Article 40 of the ESPR finally focuses on preventing circumvention and deterioration of performance, which relates to situations where combining data from multiple links could give a distorted picture of the product as a whole.
If you are already working with multiple suppliers at this time, it is best to start by drawing up an overview of who supplies which data and by which method it was determined — that overview is the starting point for every subsequent step, from contractual arrangements to inspection.
What this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 38 (requirements for actors in the supply chain)
- Regulation (EU) 2024/1781 (ESPR), Article 10 (requirements for the digital product passport)
- Regulation (EU) 2024/1781 (ESPR), Article 39 (test, measurement and calculation methods)
- Regulation (EU) 2024/1781 (ESPR), Article 40 (prevention of circumvention and degradation of performance)
The regulation itself can be found on EUR-Lex. We provide references for each statement; you do not have to take our word for it.
What you must concretely do
A construction company that has a beam rolled from steel supplied by one supplier, coating applied by a second party and the whole thing processed by a third party, ultimately receives one product with one passport. The question that arises: whose data goes into it, and who is responsible if something is not correct? The ESPR (Regulation (EU) 2024/1781) assumes a chain of actors each supplying their part, not one party making it all up.
What is expected of you
Do not rewrite data from earlier links in the chain
Article 38 of the ESPR (requirements for actors in the supply chain) describes that actors in the supply chain keep the information they receive from a previous link available for the next link. For a company with 10 to 100 employees, this practically means that data on the origin and composition of steel coming from the rolling mill are not overwritten or reformulated once the material undergoes further processing. The information travels along, and what is added is new information about the company's own processing step — not a repetition or interpretation of what another party has already established. Which data exactly is needed to keep that chain complete is described on which data must I request from my steel supplier.
One passport, multiple sources
Article 10 of the ESPR (requirements for the digital product passport) describes that the passport contains the information relevant to the product in question, regardless of how many parties have contributed to its creation. For a processing company, this means that the passport of the final product is not automatically a sum of separate sub-passports, but a compiled set of data in which the origin, composition and processing of each link can be traced. Who takes responsibility for this compilation and how it is practically built up is something that is still viewed differently in the sector; what is certain is that the origin of each data point must remain traceable.
Align measurement methods with each other
Article 39 of the ESPR (test, measurement and calculation methods) describes that data included in the passport has been determined according to the methods prescribed for the product in question and the property in question. When two suppliers have determined the same property — for example a mechanical strength value — in a different way, data is created that cannot simply be placed side by side in one passport. For a company that combines semi-finished products from different rolling mills or smelters, this means that the comparability of the underlying measurement method is a point of attention, not only the outcome of the measurement itself.
No data that obscures actual performance
Article 40 of the ESPR (prevention of circumvention and degradation of performance) describes that it is not permitted to present a more favourable picture than the actual performance justifies, either through the composition of data or through the way a product is configured. When combining supplier data, this means that a favourable value from one link in the chain must not conceal an unfavourable value from another link. For a company engaging multiple suppliers, this is particularly relevant to the way partial results are combined into a single figure for the final product.
Where things go wrong in practice
A first recurring situation is that a processing company receives a fully completed data document from one supplier and only an invoice with a material code from another. The passport of the final product is then compiled from a complete and an incomplete part, without this being recorded anywhere.
A second situation: two suppliers use a different unit or test method for what appears to be the same property on paper. The values are placed side by side without anyone checking whether they are actually comparable — resulting in a passport that is internally inconsistent.
A third situation arises when importing from outside the EU: part of the steel comes from a European supplier with a complete passport, another part from a supplier outside the EU with documentation in a different format. How the two relate to each other in one final passport is then a question that is not automatically answered; see also what does the product passport mean if I import steel from outside the EU.
A fourth situation: a supplier provides data under a confidentiality clause, and the processing company is uncertain how this relates to the obligation to pass data on to the next link in the chain. This is particularly relevant for composite products in which multiple suppliers have a share in the final formulation or alloy; see can I agree on an NDA and still comply with the passport.
A fifth situation arises when one of the suppliers, after processing the material, modifies or supplements data without feeding this back to the company compiling the final passport. The result is a passport that is already outdated at the moment of publication.
What you can document
- An overview per supplier of which data have been received, in what form, and at what point — so that for a combined passport it remains clear which part comes from which link in the chain.
- The test method or measurement standard that applies to each piece of received data, recorded separately alongside the value itself, so that comparability between suppliers can be verified afterwards. See also how do I check whether my supplier's data are correct.
- Agreements with each supplier on the form and timing of delivery of passport data, ideally recorded in the purchase contract; a starting point for this is found in how do I record the supply of product passport data in my purchase contract.
- A fixed procedure for the moment when the end product changes form through processing, and what that means for the passport created at that point — explained in what happens to the passport if I process steel into a different product.
- A log of corrections: when a supplier modifies previously supplied data, what the modification involved and whether it has been incorporated into an already compiled passport.
- A fixed contact point per supplier for questions about missing or unclear data, so that there is no need to search again for who is responsible for what every time an issue arises.
This is not legal advice. This page provides general information about the legislation that this platform deals with. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, verified by a human on 2026-09-05. Is anything incorrect? Let us know — corrections are given priority.