Toys DPP: Build Digital Product Passports with GoodsTag

A Digital Product Passport is a structured, machine-readable data set that stores verified product information about a toy. Under the Toy Safety Regulation (EU) 2025/2509, it is created per toy model before the toy is placed on the market and holds the toy's identity, the responsible operators, the EU laws and standards it complies with, the CE marking and the allergenic fragrances it contains, reachable through a data carrier on the toy or its label.

From 1 August 2030, when the Toy Safety Regulation applies. It entered into force on 1 January 2026. The Commission will set the passport's technical requirements by delegated act, which must apply at least 18 months after it enters into force, and will publish guidelines for SMEs by 1 August 2029.

Yes. The regulation has no separate declaration of conformity for toys: the passport takes its place. Where a toy also falls under other EU law that requires a declaration of conformity, for example on radio equipment, cybersecurity or artificial intelligence, the passport can carry that information too and then counts as that declaration.

The CE marking, the type, batch or serial number, the warnings, the instructions and safety information, and the manufacturer's name and postal and electronic address. The passport can hold the address only where putting it on the toy or the packaging is not feasible. Warnings must be clearly visible before purchase, also online, with a minimum text and pictogram size.

On the toy or an affixed label, or, where that is not possible, on the packaging or accompanying documents. It must be clearly visible to the consumer before purchase, including in online sales, and online marketplaces must let sellers show it. Operators must give distributors and marketplaces a digital copy of the data carrier on request within 5 working days.

Before placing a toy on the market, the operator uploads its unique product identifier and unique operator identifier to the EU registry set up under the ESPR and receives a unique registration identifier. For imports, the declarant gives customs that identifier, and customs check it against the registry before releasing the toy for free circulation, automatically through the EU single window.

From 1 August 2030, toys may not contain substances classified as carcinogenic, mutagenic or toxic for reproduction, endocrine disruptors, substances toxic to specific organs, respiratory sensitisers or certain skin sensitisers, subject to limited derogations. Intentionally added PFAS and listed bisphenols are banned, and allergenic fragrances above 10 mg/kg must be named on the toy and in the passport.

For 10 years, also if the operator becomes insolvent, and a back-up copy must be held by a DPP service provider. Access must be free of charge, and consumers may not be asked to register or give a password. GoodsTag stores passports and their back-up so they stay available over that period.

GoodsTag features an API-first architecture that integrates with your existing enterprise systems, including ERP, PLM, PIM, test laboratory and supplier databases such as SAP S/4HANA. Data synchronization is event-driven and supports global GS1 standards like EPCIS 2.0 and GS1 Digital Link for real-time traceability.

The technical delegated act for the toy passport has not been adopted, so no platform can claim full compliance with it today. GoodsTag builds on what the regulation already sets: a passport per model with the Annex VI content, a data carrier linked to a persistent unique identifier, open and interoperable formats without vendor lock-in, free access without registration, and a back-up copy. Its data models are configurable, so the technical rules can be mapped as soon as they are defined.