The EU registry

I'm Daniel Carlman, and this is DPP Academy. Today: the EU registry.

ESPR required the Commission to set up a registry by 19 July 2026. The implementing rules were adopted on 16 July, and the Commission launched the registry on 20 July, with a testing environment.

The registry stores at least the unique identifiers. For products to be released for free circulation, also the commodity code. And the identifiers of passport batteries. Product-group acts can add more.

What it does not hold is the passport itself. The passport is kept by the economic operator, or by a service provider. The registry keeps the identifiers and the registration details.

Who uploads? The economic operator placing the product on the market. It is first verified, for example with a qualified electronic seal. The registry checks the submission automatically, and returns a unique registration identifier. That is not proof of compliance.

The Commission, national authorities and customs have access. Once the registry is connected to the customs systems, customs may release a product for free circulation only after checking its registration identifier and commodity code against it.

Separately, ESPR requires a public web portal, where people can search and compare passport data, within their access rights.

And service providers? Independent third parties, authorised by the operator to handle passport data. The back-up copy must sit with one, and it may not sell or reuse the data beyond that service unless the operator agrees. The Commission can set requirements for them in a delegated act.

I'm Daniel. See you in the next episode.

Next time: the CEN standards. This is not legal advice.