Short answer
If a supplier does not provide the data needed to compile a digital product passport, that passport cannot be completed. That affects not only the supplier itself: everyone who moves the steel or semi-finished products further along the chain also needs that data to be able to meet their own obligations. Without complete data, there is no valid passport, and that can have consequences for the point at which you are permitted to trade, pass on or process the product.
Which consequences that entails in practice depends on the role you yourself have in the chain. The regulation distinguishes roles such as manufacturer, importer and distributor, and links different obligations to them. Whoever is designated as a 'responsible person' bears responsibility for the passport itself; whoever only passes it on must above all be able to demonstrate that a valid passport exists. In the knowledge base where we explain per situation which role fits which obligation that distinction is elaborated further.
Why suppliers do not always provide data
In practice, missing data delivery is usually not unwillingness. Smaller producers and traders outside the EU are sometimes not yet aware of the obligation, or do not know which data exactly are being requested. It also happens that a supplier has the data but not in a form that matches what a digital passport requires — think of analysis certificates that are not linked to a traceable batch, or CO2 data that only exist on paper.
That means that missing data does not automatically point to a problem with the supplier alone. It can also result from unclear agreements about who provides which data, in what format and at what point in the purchasing process. That is precisely where contracts and purchasing terms play a role: whoever establishes early on in the process which data are needed prevents the question from only arising once the passport is already mandatory.
What practically happens if data are missing
If you yourself are responsible for the passport and the underlying data are missing, the product cannot enter the market with a valid passport once the obligation becomes effective. In inspections, supervisory authorities look in particular at whether a passport is available, whether the data in it are correct and whether the QR data carrier is accessible. What a supervisory authority does in a specific case and what consequences that has cannot be predicted in advance; that depends on the situation and the competent supervisory authority in the EU country in question.
If you are not the responsible person but do trade in the product, a missing passport can mean that you cannot resell the product to customers who are themselves inspected, or that a customer withdraws for that reason. That is not a fine, but it is a commercial risk that is often felt sooner than a formal sanction. With a brief scan that shows in a few questions roughly where your situation stands you get a first indication of whether this is relevant for your products.
What you can do about it now
The most practical time to arrange this is at the next order, not at the first inspection. Set out in your purchasing terms which data a supplier must provide, in what form, and what happens if those data are missing or incorrect. Ask your software supplier whether the system you use automatically flags gaps in data, so that a missing certificate does not come to light only at delivery. Answers to questions that frequently come up in this connection are collected on the page with frequently asked questions about the passport in practice.
It also helps to know how the data that goes into a passport is technically retrieved and verified — that is also what determines what goes wrong if a link in the chain fails to deliver something. On the page that shows where the information in a passport comes from that process is described.
What is not yet established
The exact date on which these obligations take effect is not yet fixed. The European Commission is working on a delegated act that is expected to be published in 2026; the obligations themselves are expected to come into effect approximately eighteen months after that. As soon as that date is officially set, it will be updated on our site. For the implications in your own specific situation — with your suppliers, your products and your role in the chain — a lawyer or the competent supervisory authority is the appropriate party to consult.
Would you first like to get an impression of where you roughly stand, without immediately committing to anything? Do the free quick-scan or browse through the topics that are closest to your situation.