Regulatory position: ESPR framework in force; product-specific measures continue to develop.View status

Compliance preparation · governance and evidence

A passport record is not proof of compliance.

Build a source-linked preparation process covering applicability, roles, evidence, data quality, access, versioning and ongoing review.

Compliance is determined against applicable law and product-specific requirements. A readiness score, generated record, persistent URL or QR asset cannot substitute for a verified legal and technical assessment.

Core preparation controls

Applicability

Sourced decisions

Record product, jurisdiction, market and actor-role decisions with assumptions, sources, status, owner and review date.

Ownership

Clear accountability

Assign responsibility for data, evidence, approval, publishing, corrections, access and regulatory monitoring.

Evidence

Traceable support

Link each material claim or field to controlled source information and maintain version history.

Assurance

Testing and review

Test data quality, access control, passport resolution, versioning, retrieval, corrections and private-data exclusion.

Operate a controlled lifecycle

  • Collect from authorised, identifiable sources.
  • Validate structure, completeness, provenance and applicable rules.
  • Approve through role-based review.
  • Publish a whitelisted public snapshot.
  • Correct without destroying the prior audit history.
  • Monitor product, supplier, evidence and regulatory changes.
  • Retain and retire records according to verified requirements and policy.

Claims the platform should never make without evidence

  • That a readiness score certifies legal compliance.
  • That a QR code is universally DPP-compliant.
  • That one passport schema satisfies every product group.
  • That developing product rules and dates are final.
  • That installing a privacy or security plugin proves regulatory compliance.
  • That an AI-generated answer is authoritative law without supporting sources.

Primary and authoritative sources

Source links are provided for verification. Scope, consolidated versions and later measures should be checked again before implementation or reliance.

Regulatory disclaimer. This content provides general diagnostic and preparation information. It is not legal advice, certification or regulatory approval. Requirements may differ by product category, jurisdiction, market and supply-chain role and may change over time.

Turn guidance into a measurable readiness plan.

Assess current capability, identify priority gaps and receive deterministic next actions.

Start free assessment