The mistake in short
The most common mistake with the digital product passport for iron and steel is not creating it, but neglecting it afterwards. Companies put together the passport once, link the QR code to the batch or semi-finished product, and assume that settles it. As soon as something changes — a new supplier for a sub-batch, an adjustment in the alloy, a different heat treatment, or simply a merger or name change at the manufacturer — the passport remains unchanged while reality has already shifted.
You usually do not notice the consequence immediately. Only when a customer, an auditor or a supervisory authority compares the data in the passport with the physical product does it become clear that the information no longer matches what was actually delivered. At that point it is difficult to explain that the passport was once correct, because the regulation asks for information that follows the product, not a snapshot from the past.
Why this happens so often
The cause usually lies not in unwillingness, but in the way companies have embedded the passport in their processes. During the first creation there is attention, time and often an external party involved. After that the task disappears into a drawer: there is no fixed moment at which someone checks whether the data is still correct, and there is often no one person designated to monitor this. In smaller companies that responsibility implicitly lies with whoever happened to arrange the first passport, without this being documented for the years to come.
A second cause is that changes in the chain do not always reach the same person as changes in the passport. A buyer knows that the supplier has been switched, but does not realise that this also affects the passport. Anyone who discusses this with the software supplier does well to explicitly ask how changes in the chain are implemented in existing passports, not just how new passports are created.
What actually goes wrong
The most common problem is a mismatch between the unique identification code of the passport and the current composition or origin of the product. This does not only affect your own administration, but also the parties further down the chain who rely on the accuracy of that data for their own purchasing or processing. An outdated passport can also conflict with other obligations that already existed, such as traceability requirements around product safety: if a batch is recalled, the information in the passport must match what was actually delivered.
Another point where things go wrong is the host of the passport itself. If a company stops working with a software supplier or switches platforms, the QR code on previously delivered steel sometimes continues to point to a passport that is no longer maintained. By making agreements in advance — who hosts the data for ten years, and what happens when you switch — you prevent a passport from ending up in a digital no man's land over time. how the data in a passport are maintained provides a picture here.
How to prevent this
The core of the solution is simple to state, even if implementation requires discipline: link the updating of the passport to the moments when you are already recording something in your company. A new purchase order, a change in delivery terms or an adjustment in the production process are natural triggers to also check the passport. Establish who within your organization is responsible for this, even if it is one person doing this alongside other tasks.
It helps to determine in advance which changes do and do not require an update to the passport; not every internal administrative change affects the data prescribed by the regulation. For companies that are uncertain whether their current procedures are sufficiently organized, a brief scan that shows where you stand a first point of reference, without this being a statement about your specific situation.
Overlap with existing obligations
Because the digital product passport does not stand alone, it is wise not to view updating it separately from obligations that already existed, such as file-keeping around product safety or agreements that were already in purchase contracts. When supervising authorities conduct inspections, they look at the totality of what a company can demonstrate, not at the passport as an isolated document. An overview of how these subjects are related can be found in the knowledge base with explanation per situation.
For the precise obligations and the location in the official text, it is advisable to consult the EUR-Lex text itself, or in case of doubt about your own situation to consult a lawyer or the competent supervisory authority. Answers to frequently asked questions about the passport in practice are compiled on the frequently asked questions page.
Start with an overview
Anyone who wants to know whether their own passport still aligns with the current situation does not need to go through everything manually right away. The free quick-scan provides a first indication in a few questions of where attention is needed, and the knowledge base helps to see exactly what is at stake per topic.