Digital Product Passport for Cosmetics: Why Transparency Matters Before Regulation Does
DPP for cosmetics isn't yet an ESPR obligation, but the case is strong anyway: consumers want proof of what's in their products, not just claims on the label.
Cosmetics is not currently a priority product group under the ESPR Working Plan, so there is no confirmed delegated act or mandatory deadline. The real driver is consumer demand for verified ingredient transparency, not regulation. A cosmetics DPP would likely cover identifiers, ingredients and substances, safety and conformity, environmental footprint and packaging, and circularity, largely structuring data that already exists under the EU Cosmetics Regulation. Brands piloting this now gain a head start whenever a delegated act eventually arrives.
Cosmetics are not yet named as a priority product group under the EU's Ecodesign for Sustainable Products Regulation (ESPR). There is no confirmed delegated act, no fixed compliance deadline, and no legal obligation today. And yet the case for a cosmetics Digital Product Passport is arguably stronger than for almost any other category, because it isn't primarily a regulatory story. It's a trust story.
Why Cosmetics Is Different From Other DPP Categories
Every other product vertical covered on this site (batteries, textiles, furniture, electronics, steel) sits somewhere on a confirmed ESPR or sector-specific timeline. Batteries have a finalized delegated act applying from 18 February 2027. Textiles, tyres, and aluminium have indicative 2027 timelines. Furniture and mattresses follow in 2028-2029.
Cosmetics appears in none of the European Commission's published ESPR Working Plan 2025-2030 priority lists. That does not mean cosmetics products are permanently excluded from ESPR's scope. In principle, ESPR applies to nearly all physical products placed on the EU market, with exemptions limited to food, feed, and medicinal products. It means cosmetics has not yet been selected for a product-specific delegated act, so there is no confirmed data field list and no enforcement date to plan against.
For a brand deciding whether to act now, this changes the calculation. This is not a countdown to a legal deadline. It's a bet on where consumer expectations and retailer requirements are heading, ahead of any EU mandate forcing the issue.
The Real Driver Isn't Regulation. It's the Question on the Bottle.
Ask most cosmetics buyers what they actually want to know before putting a product on their skin, and the answer isn't "is this ESPR-compliant." It's simpler and harder to satisfy: what exactly is in this, where did it come from, is it safe for me, and can I trust the claims on the label.
The cosmetics industry has a structural transparency problem that predates any EU regulation. Ingredient lists (INCI) are legally required but written in a format most consumers can't parse. Sustainability claims on packaging (natural, clean, cruelty-free, reef-safe) are largely self-declared, with no standard verification behind most of them. Greenwashing accusations in the beauty sector have become common enough that regulators outside the DPP framework, including under the EU's Green Claims Directive, are separately tightening rules on unsubstantiated environmental claims.
A cosmetics DPP addresses this directly. Instead of a consumer trusting a marketing claim on a box, they scan a QR code or NFC tag and see the underlying data: verified ingredient origin, safety documentation, and sustainability information tied to that specific product, updated over its life rather than frozen at the point of printing.
What Data Would a Cosmetics DPP Actually Contain?
Because no delegated act exists yet, there is no confirmed attribute list the way there is for batteries or textiles. But the same recurring data blocks used across other categories give a reasonable, evidence-based picture of what a cosmetics DPP would likely need to cover, based on existing cosmetics regulation (the EU Cosmetics Regulation, EC No 1223/2009) and the general ESPR data themes.
Identifiers & Product Data
Unique product identifier and batch/lot number
Manufacturer or responsible person under the Cosmetics Regulation
Product category and formulation type
Ingredients & Substances
Full INCI ingredient list, machine-readable rather than print-only
Origin and sourcing of key or contested ingredients (palm oil derivatives, mica, certain preservatives)
Allergen declarations beyond the current legal minimum
Presence of substances of concern, cross-referenced against restricted substance lists
Safety & Conformity
Cosmetic Product Safety Report reference (already required internally under EU Cosmetics Regulation, rarely exposed to consumers)
Certifications: organic, cruelty-free, vegan, dermatologically tested, and who verified them
Environmental Footprint & Packaging
Packaging material composition and recyclability
Carbon footprint of formulation and packaging where calculated
Water usage and biodegradability data for rinse-off products
Circularity & End of Life
Refill availability and take-back or recycling programs
Packaging disposal instructions by material type
Consumer Engagement Data
Unlike more purely regulatory categories, cosmetics DPPs commonly extend into content that has no compliance function at all: usage tutorials, routine builders, and personalized recommendations. This is optional, but it's a big part of why early cosmetics DPP pilots (see below) treat the passport as a marketing asset, not just a compliance file.
Brands Are Already Moving, Without Waiting for a Mandate
Several cosmetics and beauty groups have piloted digital product passports ahead of any legal requirement, treating transparency as a competitive differentiator rather than a compliance cost. Industry coverage from beauty trade events in 2025 and 2026 has highlighted brands using QR-code-linked passports to expose full ingredient stories, sourcing detail, and usage content, explicitly framing it as a way to build trust with a generation of buyers who research before they purchase.
This voluntary, early-adopter pattern matters strategically. When a delegated act for cosmetics eventually arrives, whether that happens in 2029, 2030, or later, brands that already have structured, verifiable product data in place will face a far smaller lift than those starting from a blank sheet. The data collection work, not the QR code itself, is what takes time: mapping ingredient origin across multi-tier suppliers, digitizing safety documentation, and getting environmental data into a consistent, machine-readable structure.
Where to Start If You're a Cosmetics Brand
Audit what you already have. Cosmetic Product Safety Reports, INCI lists, and supplier certificates already exist for regulatory reasons. Most of a DPP's ingredient and safety data is a structuring exercise, not new data collection.
Identify your transparency gaps. Where do sustainability claims on your packaging currently lack a verifiable source? Those are the highest-risk areas for greenwashing scrutiny and the highest-value areas to fix first.
Engage suppliers on origin data. Ingredient sourcing, especially for palm-derived or mineral ingredients, is typically the hardest data to get to Tier 2 or Tier 3 depth. Start those conversations now rather than under deadline pressure.
Pilot on one product line. Choose a flagship product, build the full data set, test a QR or NFC carrier, and use the pilot to identify what breaks before scaling across a portfolio.
Structure data so it's reusable. Whatever format you choose now, prioritize machine-readable, standards-aligned data (aligned with GS1 Digital Link where possible) so it transfers cleanly if and when a formal delegated act is adopted.
DPP Pro's Data Readiness Assessment tool currently covers batteries and textiles, the two categories with confirmed or estimated delegated act data structures. Cosmetics will be added once a delegated act gives a confirmed attribute list to assess against. In the meantime, the data blocks outlined above give cosmetics brands a solid, evidence-based starting point for internal audits.
The Bottom Line
Cosmetics doesn't need an ESPR deadline to justify a Digital Product Passport. The pressure is already coming from the other direction, from consumers who want proof, not just claims, before they put something on their skin. Brands that treat this as a trust exercise now will be the ones with usable, structured data whenever a delegated act eventually catches up.