ESPR Compliance for Australian Brands.
Everything you need to know.

ESPR stands for the EU Ecodesign for Sustainable Products Regulation. It is a regulation passed by the European Union that replaces and significantly expands the previous Ecodesign Directive. It came into force in July 2024 and its product requirements begin rolling out from 2026.

The core principle of ESPR is simple: over time, products sold into the EU will carry verifiable, machine-readable information about its sustainability, materials, repairability, recyclability, and lifecycle. This information is stored in a Digital Product Passport (DPP) — accessed via a QR code on the physical product.

ESPR is not optional. It is not a certification. It is a market access requirement — products without a valid DPP will be refused entry into EU markets.

Any Australian brand that sells physical products into EU member states is affected. It does not matter whether you sell direct-to-consumer, through wholesale, via Amazon EU, or through EU retail partners — the requirement applies to the product, not the channel.

The regulation is being rolled out by product category, with the first categories already confirmed. If you sell any of the following, you need to act now:

A Digital Product Passport (DPP) is a structured digital record attached to a specific physical product — not a product model, but an individual physical unit. It contains verified, machine-readable data about that product's materials, origin, manufacturing process, repairability, recycled content, and end-of-life instructions.

It is accessed via a GS1 Digital Link QR code printed or attached to the physical product. When scanned, it resolves to the product's DPP data — which can be read by EU customs systems, retailers, recyclers, and consumers.

The DPP must remain accessible for the full lifecycle of the product — which under ESPR means the expected lifetime of the product, typically 10 or more years. The exact duration is set per product category in the delegated acts. This is why DPPs need to be anchored to permanent infrastructure, not a proprietary platform that could be shut down.

A valid DPP under ESPR must:

Be attached to a unique identifier that conforms to the GS1 Digital Link standard — this is the QR code format mandated by the regulation. Standard QR codes pointing to a website do not comply.

Contain all data fields required for the product's category — the specific fields vary by product type but typically include materials composition, supplier details, carbon footprint, repair information, and recyclability data.

Be stored on infrastructure that guarantees accessibility for the full expected lifetime of the product — typically 10+ years depending on category. EU regulators can and will audit this. A DPP hosted on a startup's server does not satisfy this requirement.

Comply with EU product liability requirements — which for non-EU brands typically means ensuring your EU importer or distributor has proper authorised representative arrangements in place. In many cases your EU distribution partner handles this. Worth confirming early.

The specific data fields required vary by product category, but the following are required across all categories confirmed so far. Australian brands should audit their existing product data against these fields now.

This is where many brands get it wrong. ESPR does not just require a QR code. It requires a QR code that conforms to the GS1 Digital Link standard — a specific URI syntax developed by GS1, the global standards body that manages barcodes and product identification.

A standard QR code pointing to your website does not comply. A QR code pointing to a URL with a GTIN encoded in GS1 Digital Link format does comply. The difference is technical but non-negotiable.

GS1 Digital Link also matters beyond compliance. Sunrise 2027 is the GS1 goal for retail checkouts to scan 2D codes such as GS1 Digital Link QR codes alongside the familiar 1D barcode. Brands that move to GS1 Digital Link can use one code for both the product passport and the checkout.

A GS1 Digital Link URI follows this structure:

The GTIN (14-digit product identifier) must be issued by GS1. The serial number makes each physical unit unique. The resolver domain is where the QR code points — this can be the GS1 public resolver or, with DeStore, your own brand domain. Brand-hosted resolvers mean every scan lands on your turf, not a generic GS1 page.

All three components — resolver, GTIN, and serial — are required for full ESPR compliance.

ESPR enforcement is handled by EU member states' market surveillance authorities. The consequences for non-compliant products are serious:

ESPR compliance for Australian brands comes down to five steps. The good news: with the right infrastructure partner, steps 1 through 4 can be completed in 48 hours.