Who sees what

I'm Daniel Carlman, and this is DPP Academy. Today: who gets to see what in a passport.

ESPR itself does not decide who sees what. For each product group, the delegated act sets which actors can access which data, and who may create or update it.

The regulation lists who must have free and easy access, based on those rights: customers, repairers, recyclers, authorities, and even civil society organisations and trade unions.

Some data is public. The manufacturer's name and contact details, for example, go on the public part of the passport, where applicable.

Writing is restricted as well. The right to add or change data follows the access rights. And the passport must protect data integrity, security and privacy, and prevent fraud.

The European standard EN 18239 describes how. Public data can be read without logging in. Controlled data needs authentication, with access by role, down to each data element, and every access logged.

Batteries show it in practice. Model data, like material composition and carbon footprint, is public. Dismantling information is for people with a legitimate interest, and the Commission. Test reports, for notified bodies, market surveillance and the Commission. And the individual battery's state of health is for people with a legitimate interest only.

A legitimate interest means a defined purpose. Repairers, remanufacturers, second-life operators and recyclers doing their work. Or the purchaser, making the battery available to energy aggregators.

I'm Daniel. See you in the next episode.

Next time: the EU registry. This is not legal advice.