who is responsible for the passport if I produce in multiple EU countries
The legal entity placing the product on the market is responsible
The obligation for the digital product passport lies with the manufacturer as a legal entity, not with a physical establishment or production location. If a company produces in multiple EU countries under the same legal entity, that legal entity bears responsibility for all products it places on the market, regardless of which factory or country the aluminium was rolled, cast or extruded in. Where different legal entities are involved — for example, a parent company with independent subsidiaries in multiple countries — the obligation lies with the entity that actually places the specific product on the market. This is the entity that, according to Article 27 of the ESPR (Regulation (EU) 2024/1781), bears the obligations of manufacturers.
Who this applies to and who it does not
This question is particularly relevant for companies with multiple production facilities within the EU, or with a structure of parent and subsidiary companies each operating in a different country. The core rule is simple: look at who places the product on the market, not where it is made. An aluminium profile extruded in a German factory owned by a Dutch company and sold from the Netherlands falls under the obligations of that Dutch company as a manufacturer. If the same profile is sold through an independent German subsidiary, that subsidiary is the manufacturer for that specific product.
This does not apply to the situation where aluminium is sourced from outside the EU and is only imported by one of the establishments. In that case, not Article 27, but Article 29 of the ESPR applies, concerning the obligations of importers. Who has precisely which role is described on the page Am I an importer or manufacturer according to the ESPR?. Also, if a company sources aluminium from a third party and sells it under its own brand, the responsibility changes: this is detailed on I sell aluminium under my own brand — what obligations do I incur?. Distributors and traders who make no changes to the product and do not sell it under their own name have a different, more limited role, described in What obligations does a distributor or trader of aluminium have?.
When this will apply
A fixed date on which the product passport becomes mandatory for aluminium semi-fabricates is not yet set. The ESPR itself is in force, but the concrete obligation for a product group such as aluminium arises only with a delegated act that sets out the details: which data, which product categories precisely, and from which date. According to the European Commission's work plan for 2025-2030, that delegated act for aluminium is expected in 2027. Until that act is published, no concrete obligation applies to aluminium semi-fabricates on the basis of Article 9 of the ESPR (Regulation (EU) 2024/1781), which forms the general basis for the digital product passport. Once the date is confirmed, it will be stated here.
How a company with multiple establishments handles this in practice
First, make clear which legal entity applies to whom: a company with factories in multiple EU countries under one legal entity has one responsible party; a group with independent subsidiaries per country has several, each responsible for the products they place on the market themselves. This distinction determines where the data for the passport will come from and which party will be held accountable in an inspection.
After that, it is advisable to check whether all facilities record the same data in the same way — alloy composition, origin of raw materials, recycled content percentage. Differences between factories in how data is recorded will later lead to differences in the passports of products that appear identical to the customer. If aluminium is traded or processed between facilities before the final product reaches the market, it is useful to determine in advance which facility actually places the end product on the market — that facility then bears responsibility for the passport, even if the material has passed through another facility. If a company changes supplier for one of its facilities, this may also change who supplies the data; this is detailed on what must I arrange for the passport if I change supplierAnd because incorrect data in the passport can lead to liability, it is particularly important for companies with multiple facilities to document which facility is responsible for which data — see who is liable if there is incorrect data in the product passport.
The basis: Articles 27, 29 and 9 of the ESPR
The obligations of the manufacturer are set out in Article 27 of the ESPR (Regulation (EU) 2024/1781): those obligations rest with the legal entity that places the product on the market. If the aluminium is sourced from outside the EU, similar obligations shift to the importer under Article 29 of the same regulation. The general legal basis for the digital product passport itself — what information it must contain and how it must be accessible — is set out in Article 9. None of these articles links the obligation to a production location; they link it to the legal entity that bears responsibility for placing the product on the market.
Those who are not yet certain which role applies to their own company will find a general overview on Who is responsible for the product passport for aluminium?. In addition, it is practical for the company to already inventory which facility places which products on the market and what data about them is already available, so that when the delegated act is published, no time is wasted on determining the company's own business structure.
What this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 27 (obligations of manufacturers)
- Regulation (EU) 2024/1781 (ESPR), Article 9 (digital product passport)
- Regulation (EU) 2024/1781 (ESPR), Article 29 (obligations of importers)
The regulation itself is on EUR-Lex. We refer per statement; you do not have to take our word for it.
What you must concretely do
What is expected of you
A company that produces in multiple EU countries faces essentially the same question as a company with one facility: who is the manufacturer within the meaning of Article 27 of the ESPR (Regulation (EU) 2024/1781)? The answer lies not with the facility, but with the legal entity. The obligations under the ESPR rest with the person who places the product on the market under his name or brand — and that is usually one legal entity, even if that entity operates factories in three countries.
The manufacturer remains a single point of contact, even with multiple factories
In practical terms, this means that a group with facilities in, for example, Germany, Poland and the Netherlands does not need to set up a separate passport process per country if those facilities produce under the same legal entity or the same brand. The obligation under Article 27 to ensure that the product is accompanied by a digital product passport (as described in Article 9) then rests with that one entity, not with the factory hall that happened to have extruded the profile. For a medium-sized company, this often means a choice: one central point of contact for passport data, with each facility submitting production data. Who that central point of contact is depends on how the company is legally structured — this varies by situation and is usually set out in the articles of association or in the way CE marking and other product obligations are currently being fulfilled.
Different legal entities means different obligations
It becomes different once the facilities in different countries are separate legal entities — meaning legally independent limited companies or partnerships that operate under a group name but make their own purchases, produce and invoice independently. In that case, each legal entity can be considered a manufacturer within the meaning of Article 27 for its own production, with its own obligation to supply passport data for what it itself places on the market. A group-wide approach is still possible — one platform, one template, one responsible department — but the legal obligation itself follows the legal entity, not the group logo. This distinction matters when answering questions about who is responsible for the product passport for aluminiumdata responsibility, especially when there is unclear within a group which facility supplies which part of the data.
Sourcing from a facility outside the EU requires a separate process
Some companies with EU facilities also have a production location outside the Union, for example in the United Kingdom, Turkey or further afield. For aluminium coming from that location into the EU, Article 29 of the ESPR applies, not Article 27 — the obligations of importers. That is a different role with different responsibilities: the importer checks whether the passport exists and is correct, but usually does not compile it itself from primary production data. Companies that produce both within and outside the EU are well advised to determine per product stream which role applies — that is a different question from the one addressed on the page Am I an importer or manufacturer under the ESPR but it is closely related to it.
Internal division of tasks must align with the legal obligation
In practice, many groups work with an internal division: the facility in the Netherlands handles purchasing and administration, the facility in Poland handles production, the facility in Germany handles sales. That division makes sense for business operations, but does not automatically cover the obligation under the ESPR. The passport must contain data that matches the actual production process — alloy composition, origin, recycled content percentage — and this data usually originates at the production facility, not at the facility that sends the invoice. A company that centralizes administrative responsibility must therefore also have a way to collect production data from all facilities and link it to the correct product.
Where things go wrong in practice
A number of situations occur in practice more often than expected.
First: a group assumes that because the head office is in the Netherlands, all passport obligations automatically fall there — while the production facility in another country is a separate legal entity that independently places products on the market. It then turns out later that the obligation did not lie where people thought.
Second: in a merger or acquisition, the legal structure changes, but the passport processes are not updated accordingly. The passport still refers to a legal entity that no longer exists, or the new combination has no clear agreement on who supplies the data.
Third: two facilities within the same group produce the same type of profile, but with slightly different alloys or different recycled content percentages, and one passport text is used for both. This results in a passport that is correct for one facility and incorrect for the other.
Fourth: a facility outside the EU supplies semi-finished products to an EU facility of the same group, and no one has established who in that internal flow fulfils the importer role. See also the situation described on My manufacturer is located outside the European Unionwhich can occur within a group as well, not only between independent companies.
Fifth: data is supplied per facility separately to a platform, without central oversight, so that the same product code in two countries is filled in with different data.
What you can document now
- An overview of the legal structure of the group: which locations are independent legal entities and which are part of one entity.
- Per product stream: who produces, who sells under its own name, and whether imports from outside the EU play a role.
- An internal agreement on which location or department collects the passport data and submits it to alupas.eu, including a fixed contact point per product line.
- A template for production data to be completed in the same way by all locations, so that alloy, origin and recycled content are comparable and verifiable.
- An up-to-date list of legal entities and Chamber of Commerce or trade register numbers, to be consulted in case of doubt about who fulfils which role — this aligns with questions that also arise in changing supplier, where the same question about legal responsibility recurs.
- Agreements on liability between group establishments in case of incorrect data, so that in the event of an error it is clear which establishment is the source of the information.
This is not legal advice. This page provides general information on the legislation that this platform covers. We do not know your situation. If in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-09-05. Is something incorrect? Let us know — corrections are prioritised.