What are ESPR and EUDR, and when do they start? Timing and preparation for beginners

For many companies searching for ESPR and EUDR, the first question is simple: "When will this affect us?" Sometimes the question is phrased as "When does ESPR start?", sometimes as "When does EUDR apply?", and sometimes as "When will the Digital Product Passport become mandatory?" These questions sound as if they should have one neat answer. In reality, the timeline is more layered.

For UCVreg's EUDR pathway and early access, see EUDR Software.

The EUDR timeline is more direct. According to the current European Commission page, the entry into application is 30 December 2026 for large and medium operators, 30 June 2027 for micro and small operators, and 30 December 2026 for micro and small operators already covered by the EU Timber Regulation. So the answer to "when does EUDR start?" depends on company size and role, but there is now a very concrete compliance calendar.

ESPR works differently. The Ecodesign for Sustainable Products Regulation entered into force on 18 July 2024 as a framework regulation. That does not mean every product became subject to every requirement on the same day. ESPR creates the legal foundation for more specific product rules that will be developed over time. In April 2025, the European Commission published the first ESPR and Energy Labelling Working Plan. That plan shows which product groups will be prioritised between 2025 and 2030, and where product rules will be developed first.

Any company trying to understand the ESPR and EUDR timeline therefore needs to make one distinction early. EUDR creates a more immediate due diligence obligation tied to application dates. ESPR creates a product data and sustainability requirements landscape that will become concrete product group by product group. One says: from this date, you must carry out due diligence for covered commodities. The other says: prepare your product data for sustainability, durability, repairability, traceability and Digital Product Passport requirements.

First, the short answer: what is ESPR, what is EUDR, and what are they not?

ESPR is the ecodesign framework for sustainable products. It is about how a product is designed, how durable and repairable it is, which information must be shared, which material and environmental performance data must be kept, and how product data infrastructure such as the Digital Product Passport will work. It would be wrong to treat ESPR as just an environmental label or a short sustainability paragraph on a product page. The real issue is making product data more structured, verifiable and publishable.

EUDR is the EU Deforestation Regulation. It focuses on proving that certain commodities and derived products were produced without being linked to deforestation or forest degradation. Cattle, cocoa, coffee, palm oil, rubber, soya and wood sit at the centre of this world. It would also be wrong to treat EUDR as a general sustainability report. EUDR asks a more concrete question: where did this commodity come from, does the land where it was produced carry deforestation risk, and what evidence supports the company's conclusion?

In short, ESPR looks at the product and product data; EUDR looks at origin, supply chain and due diligence evidence. They are not the same thing, but they push companies in the same direction: claims must be supported by structured data and traceable evidence, not scattered documents.

When does ESPR start?

Legally, ESPR entered into force on 18 July 2024. That date matters because the Digital Product Passport, product sustainability information, durability, repairability, recyclability, environmental performance and product data governance are no longer only future concepts. The European Union has created the main legal framework for them.

But when companies ask "when does ESPR start?", they usually mean something more practical: "When will it become mandatory for my product?" To answer that question, it is important to remember that ESPR is a framework regulation. Instead of regulating every physical product in the same level of detail at once, it moves through delegated acts and implementing rules for product groups.

The Commission's 2025-2030 working plan acts as the roadmap. Priority product groups include textiles and apparel, furniture, tyres, mattresses, iron and steel, and aluminium. These are the areas that make companies ask questions such as "when will the Digital Product Passport be mandatory?", "when will ESPR affect textiles?", "what is the ESPR timeline for furniture?", or "will tyres need a product passport?"

The most important timing point is this: even if every detail is not final today, product data preparation should start now. Once product passport requirements or new ecodesign requirements are published, starting from zero will be too late. Product bills of material, material information, supplier data, technical performance, maintenance and repair information, recycling data and published product versions do not become clean overnight.

In other words, the real ESPR question is not only "what is the deadline?" A better question is: "Is our product data ready today for a passport, an authority check or a customer request?" When obligations become specific to a product group, the gap between prepared companies and companies starting from scattered data will widen quickly.

When does EUDR apply?

EUDR is already legally in force, but the application dates for the main obligations have been postponed and updated. The current Commission information points to 30 December 2026 for large and medium operators and 30 June 2027 for micro and small operators. For certain micro and small operators already covered by the EU Timber Regulation, the date is 30 December 2026.

It is risky to read those dates as "there is plenty of time". EUDR readiness is not a form that can be completed in the final week. A company needs to identify covered commodities, map products to suppliers, collect geolocation data for production plots, understand mixing risk in the supply chain, perform risk assessment, manage risk mitigation and build the evidence chain behind a due diligence statement.

The main commodities covered by EUDR are cattle, cocoa, coffee, palm oil, rubber, soya and wood. Some derived products are also in scope. That means the answer to "which products does EUDR affect?" is not always visible in the product name. You need to look at product composition, HS codes, commodity source, supply chain structure and your role in the EU market.

For a coffee importer, the EUDR timeline may be obvious. For a furniture manufacturer, a leather goods seller, a food brand using cocoa, a product group using rubber components or a supply chain using wood packaging, the analysis needs more care. The first step in EUDR preparation is often "are we in scope?" The second is "which product, which supplier and which commodity puts us in scope?"

When will the Digital Product Passport become mandatory?

The Digital Product Passport is one of the most searched ESPR topics. But again, there is no single universal date. ESPR positions the DPP as a digital identity card for products, components and materials. It may include information such as technical performance, materials and their origins, repair activities, recycling capabilities and lifecycle environmental impacts. The exact data fields for each product will be defined through product-specific rules.

That is why the answer to "when will the Digital Product Passport be mandatory?" depends on the product group. Batteries already have a separate regulatory path that creates earlier and more concrete DPP requirements. Under ESPR, product groups will move through the working plan and delegated acts. Preparation pressure is especially visible for textiles, furniture, tyres, mattresses, iron and steel, and aluminium.

The practical message for companies is clear: do not treat the DPP as a QR code page. A Digital Product Passport is really a product data discipline. The QR code or web page is only the visible surface. Behind it, companies need product identity, versioning, material data, supplier evidence, technical documentation, access controls, publication history and verifiable records.

When a customer asks "when will we need a product passport?", the underlying concern is usually "what should we prepare today?" The answer depends on the product group, but the preparation direction is the same: clean product master data, standardise material and component information, link supplier evidence to products, separate public data from authority-only or partner-only data, and test the product passport architecture early.

Why are ESPR and EUDR discussed at the same time?

Because both regulations change an area companies used to manage relatively comfortably: the distance between a claim and its evidence. In the past, many companies could publish a claim on a product page or in a technical file, and collect supporting documents from separate folders when needed. That approach is weakening. The product claim and the evidence behind it now need to be connected.

ESPR makes product data more structured. EUDR makes supply chain origin evidence more defensible. ESPR asks: where is the sustainability and circularity information for this product? EUDR asks: is this commodity deforestation-free, and which plot and risk evidence supports that conclusion? The questions are different, but inside a company they often reveal the same system problem: scattered data, disconnected evidence and weak decision history.

That is why the ESPR EUDR timeline is not only a regulatory calendar. It is also a data maturity calendar. If you do not know which products touch which regulation today, 2026 and beyond may arrive very quickly. If you do not know which evidence to request from which supplier today, trying to persuade suppliers at the EUDR application date may be too late. If your product data is not versioned today, managing the gap between published DPP information and operational records will be difficult.

For beginners: what is going to happen?

Companies will be asked for more product data. This data will not be only marketing copy. It will matter what materials a product contains, how it can be repaired, how it can be recycled, which environmental performance indicators apply, which version was published and who can access which information.

At the same time, supply chain evidence will become more granular. Regulations such as EUDR put origin information and land-level evidence at the centre, especially for commodities linked to deforestation risk. A generic supplier declaration will often not be enough. Questions such as which commodity, which batch, which production area, which risk assessment and which due diligence statement will need clear answers.

Authorities, customers and business partners will also ask for more concrete data. A retailer may ask whether a product is DPP-ready. A customer may ask for deforestation-free evidence for EUDR-covered products. An authority may want to see the source of published product information or the basis for a due diligence decision. Large companies may also push readiness requirements earlier onto their suppliers because they need to manage their own downstream and upstream compliance risk.

This does not mean every company must change everything at once. But the period of waiting until the deadline and preparing a file at the last minute is closing. In the new period, readiness means making product and supply chain data systematic.

What questions should customers ask today?

The first internal question might be "when will ESPR apply to us?" But it should quickly be followed by more practical questions. Which of our product groups resemble the priority areas in the ESPR working plan? Do our products touch textiles, furniture, tyres, mattresses, iron and steel, aluminium, batteries, electronics or other likely regulated areas? Where do we keep material information, technical performance data, repair and maintenance information, recycling data and environmental information for our products?

On the EUDR side, the questions move deeper into the supply chain. Do we use covered commodities? Do our products contain cocoa, coffee, soya, palm oil, rubber, wood, cattle or derived products? Are we the first party placing those products on the EU market, or do we play another role in the chain? Can our suppliers provide plot-level geolocation? Does traceability break down at aggregation, mixing or processing points?

Then comes the harder question: where is the evidence? If the answer is "in emails", "in supplier folders", "in a few Excel files" or "the procurement team knows", readiness has not really started. Real preparation means linking data to products and decisions.

How should companies prepare?

The first step is a scope map. Which products are close to ESPR priority product groups? Which products contain EUDR-covered commodities? Which markets do they enter? What is the company's role in the EU market: manufacturer, importer, operator, trader, brand owner, distributor or supplier? Without this map, timeline discussions remain abstract.

The second step is a data inventory. Where is product master data? Which system holds material and component information? How clean are supplier records? Who owns evidence documents? How are production batches and shipments connected to products? In what format do plot data, geolocation, certificates, risk assessments and approval records exist? These questions may sound tedious, but they are the foundation of compliance.

The third step is an evidence model. Uploading every document is not enough. You need to know what the evidence supports. Does a certificate support a supplier, a product, a specific batch, a specific plot or a date range? Which data supports a risk conclusion? Which product version does a product passport represent? Which evidence set was used for a due diligence statement?

The fourth step is process design. Who enters data, who verifies it, who approves it, and who publishes it? What happens if a supplier sends incomplete data? What happens to an old passport if product information changes? How is a previous due diligence statement preserved if the EUDR risk result changes? These are not only software questions. They are organisational questions.

The fifth step is a pilot. Instead of transforming the entire product portfolio at once, it is healthier to choose one product family or one commodity line. For example, you might pilot a DPP data model for a textile product group, test the EUDR evidence chain for cocoa or coffee, or examine both product data and origin evidence for a wood product. A focused pilot reveals the real gaps faster than a broad theoretical programme.

How does UCVreg prepare them?

UCVreg treats ESPR and EUDR not as two disconnected projects, but as different uses of the same regulatory data foundation. The regulations ask different questions, but they need the same underlying capabilities: product identity, supplier linkage, evidence management, versioning, audit trails and publishable records.

On the ESPR side, UCVreg focuses on structuring product data, managing product profiles, preparing publishable records aligned with Digital Product Passport logic and preserving product information in a versioned way. The current state of a product is not enough. It also matters which data and which version were published.

On the EUDR side, the approach is to make supply chain origin evidence more systematic. Covered commodity, supplier, plot, consignment, risk assessment and due diligence decision should not be kept apart. But it is important to be honest: EUDR compliance is not solved by a software screen alone. Supplier cooperation, legal interpretation, field data quality and the company's risk appetite also matter.

Where UCVreg adds value is in making this complex data manageable. It makes missing fields visible, links evidence to the right records, preserves published compliance artefacts, keeps past decisions traceable and helps the company answer the question: "What did we rely on when we made this claim?" That matters equally for ESPR and EUDR.

When a customer asks "are we ready for ESPR?", "what should we do for EUDR?", "how do we prepare a Digital Product Passport?", "how should EUDR geolocation data be managed?", or "where should product compliance data live?", the answer is not a single document. The answer is a system where product and supply chain data are managed together.

How should the timeline be read?

It helps to think about the timeline in three layers. The first layer is the legal date. ESPR entered into force on 18 July 2024. The first working plan was published in April 2025. EUDR's main application dates in the current timetable are 30 December 2026 and 30 June 2027.

The second layer is product or commodity scope. Under ESPR, it matters when your product group becomes subject to specific rules. Under EUDR, it matters whether you use covered commodities, what your role in the EU market is, and what size category your company falls into.

The third layer is company readiness. This is the most important layer, because the legal date will not help if the data is not ready. Cleaning material data, collecting plot information from suppliers, setting up a risk assessment workflow, linking evidence and versioning published records can take months.

That is why searching for "ESPR deadline" or "EUDR deadline" is a useful starting point, but not enough. The real timeline is the company's data readiness timeline. Today you map scope, tomorrow you identify data gaps, then you collect supplier evidence, then you publish pilot products, and finally you scale the process. This work needs to happen before the deadline.

The most sensible place to start today

The most sensible place to start today is a small but real scope. On the ESPR side, you can choose a product family close to the priority product groups. For that product, extract existing data, identify missing information and decide which data should be public, authority-only or partner-only.

On the EUDR side, you can choose one covered commodity line. For example, a product flow involving coffee, cocoa, wood, rubber or soya. In that flow, test who the supplier is, where production happened, whether plot data exists, how lot information is tracked, where mixing risk appears and which evidence supports which decision.

The purpose of the pilot is not to create a perfect report. The purpose is to see the company's real data gaps and build a scalable model. When regulation arrives, the biggest problem is often not "we did not know what was required"; it is "we had not kept the supporting data in an orderly way."

Conclusion: there seems to be time, but the preparation window is short

When the ESPR and EUDR timelines are read together, the message is clear: the European Union is making product and supply chain compliance more data-driven. ESPR creates the world of product data and Digital Product Passports. EUDR makes origin and due diligence evidence mandatory for commodities linked to deforestation risk.

For EUDR, 30 December 2026 and 30 June 2027 create concrete compliance thresholds. For ESPR, the 18 July 2024 entry into force and the 2025-2030 working plan create the foundation for future product-group requirements. The two timelines work differently, but the discipline expected from companies is similar: know the data, link the evidence, record the decision and preserve the information you publish.

For a beginner, the short version is this: EUDR is the more immediate and direct supply chain due diligence pressure. ESPR is the broader and more gradual product data transformation. Treating either as a last-minute document exercise is risky. Preparation starts by making product and supply chain data structured, traceable and publishable today.

For primary regulatory sources, see the European Commission's ESPR page, EUDR page and the official Regulation (EU) 2024/1781 text.