My supplier does not provide the data — what can I do?
Supplier does not deliver: manufacturer remains responsible
If a supplier does not provide the requested data, this does not change who is responsible for the digital product passport: it remains the manufacturer or importer who places the mattress on the market. The ESPR (Regulation (EU) 2024/1781) places the obligations for the passport with the manufacturer in article 27, but the same regulation also obliges actors in the supply chain in article 38 to provide the information necessary to meet those requirements. A supplier who does not deliver may therefore be in breach of an obligation under the regulation itself — but this does not relieve the manufacturer of the task of compiling the passport. The problem thus does not disappear, but shifts to the question of how the manufacturer obtains or replaces the missing data.
For manufacturers and importers, not for the passport itself
This topic concerns the relationship between a manufacturer or importer of mattresses and the parties from which it sources components, materials or raw materials — foam, springs, textiles, adhesives, chemical substances. Article 38 is written for that link in the chain: suppliers who themselves do not place the end product on the market, but who do have data that the manufacturer needs. It is not about the relationship between a retailer and a manufacturer — that relationship is governed by other provisions on distributors — nor is it about a consumer requesting information. Nor does this say anything about what happens if a competent authority addresses a manufacturer about an incomplete passport; that is a separate matter of compliance and enforcement, not of the mutual relationship with a supplier.
Obligation applies once delegated act is in place
The specific requirements for the passport for mattresses — and thus also the precise data that a supplier should provide — are only established once the delegated act for this product group is published. That date is not yet fixed. According to the ESPR work plan 2025-2030, this delegated act is expected around 2028, but this is a plan, not a commitment. Until that publication, the general framework of the ESPR, including article 38, already applies, but the product-specific obligation to provide certain data on mattresses only arises with that delegated act. Those who are already discussing this with suppliers are doing so in anticipation of an obligation that has yet to be established — sensible as a preparation, but not something a supplier is legally bound to for mattresses specifically at this moment.
What to do if data is not forthcoming
When someone encounters a supplier who does not deliver, this is typically addressed in a few steps. First, it is established which data is exactly missing and why: sometimes that is unwillingness, more often unfamiliarity with what will be required later. After that, it is customary to record this in the procurement relationship — through contractual agreements or additional conditions that oblige a supplier to provide the necessary data in a timely manner, possibly with a sanction included in the contract itself. When a supplier consistently fails to cooperate, it is often a matter of looking at alternative sources: own measurements, test reports from an independent laboratory, or data from another supplier of the same type of material. It is also customary to document attempts to request data — correspondence, requests, responses — so that there is a file should this become relevant later. Only when these avenues have been exhausted and there is still a legal obligation on the table does approaching the competent supervisory authority come into view; what that authority decides in a specific case cannot be predicted and depends on the rules then in force and the circumstances of the file.
The legal basis: article 27 and article 38 ESPR
Article 27 of the ESPR (Regulation (EU) 2024/1781) describes the obligations of manufacturers, including ensuring a correct and complete digital product passport when placing a product on the market. Article 38 of the same regulation addresses actors in the supply chain and requires them to provide the information necessary to comply with the requirements of the regulation. Together, these articles establish that final responsibility lies with the manufacturer, while suppliers have their own, supplementary obligation to cooperate in providing data.
What to do now
If a manufacturer or importer of mattresses encounters a supplier who does not provide data, they can already document this in their purchasing conditions and begin building a file of requests and responses — even though the delegated act for mattresses has not yet been published. Once that act is available, the precise date and specific data that will be requested will be listed here.
Where this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 38 (requirements for actors in the supply chain)
- Regulation (EU) 2024/1781 (ESPR), Article 27 (obligations of manufacturers)
The regulation itself is on EUR-Lex. We provide references per statement; you do not have to take our word for it.
What you concretely must do
What is expected of you
A mattress manufacturer that compiles the product passport is responsible for its completeness and accuracy under Article 27 of the ESPR (Regulation (EU) 2024/1781). This responsibility does not change if a supplier does not provide, provides late, or provides incomplete data. At the same time, Article 38 of the ESPR (Regulation (EU) 2024/1781) also places a role on actors in the supply chain — including the supplier of foam, springs, textiles or other components — in making available the information needed for the passport. What this means in practice for a company with 10 to 100 employees breaks down into a few parts.
The manufacturer remains accountable, even with an unresponsive supplier
A manufacturer that places mattresses on the market cannot hide behind a supplier who does not respond. This is not a matter of anger or unwillingness on the part of a supervisor, but a consequence of how responsibility is established in Article 27 of the ESPR: it lies with whoever places the product on the market. For a medium-sized company, this means that missing data is a problem that requires action, and not something whose consequences automatically fall to the supplier.
Suppliers have a role of their own
Article 38 of the ESPR makes clear that actors in the supply chain are involved in making product information available. This gives a manufacturer a basis to request data, and it also gives the request weight: it is not just a request out of goodwill, but something that fits within how the chain is set up in the regulation. In practical terms, this means that a request for data is best made specific and in writing — which data, and for what purpose. Which data must I request from my mattress supplier? describes what such a request should be about.
The obligation exists regardless of how the contract is drawn up
Whether a supplier provides data depends in practice heavily on what has been agreed on this matter. A company that only looks at what is contractually established after data fails to arrive often concludes that little is on paper. This is not an obligation from the ESPR itself, but rather a practical condition to make the obligation under Article 27 feasible. How do I document the supply of passport data in my purchasing contract? goes into what such an agreement might look like.
Where things go wrong in practice
The supplier responds slowly or not at all. A request for material data disappears in the inbox of a sales department that is not used to this kind of request, and there is no response. Without an established agreement on delivery periods, there is little to fall back on.
The supplier provides data, but incomplete. A composition of the foam arrives, but nothing about the origin of the springs or the types of adhesive used. The manufacturer discovers the gaps only when compiling the passport, as the deadline is already approaching.
The supplier refuses to share data for competitive reasons. Especially with specific foam compositions or coatings, there is a fear that competitors will gain insight into the recipe through the passport. This is a real tension, and it is one of the reasons why can I arrange an NDA with my supplier regarding the data for the passport is a question that comes up more often than you might think.
The data arrives, but no one checks it. A manufacturer assumed that the supplier had provided the correct material codes, and only in a sample check did it turn out that an incorrect raw material code had been passed on. Without a control step, something like this only comes to light late.
The supplier changes, and the old data disappears. A mattress manufacturer switches foam suppliers because the price or delivery time is better, but the data from the previous supplier is not archived anywhere. The passport of previously supplied mattresses is thus suddenly missing support.
What you can record
- An overview of which data is needed per component (foam, springs, textiles, coatings), so that a request to the supplier is concrete and complete in one go.
- A written request with a response deadline, instead of a verbal or loose email inquiry without follow-up.
- A contractual provision on delivering product passport data, included in the purchase contract or as an annex thereto — see how do I record the delivery of product passport data in my purchase contract.
- A documented control step for incoming data, so that errors or gaps are identified before the product passport is compiled — this aligns with how do I check whether my supplier's data are correct.
- An archive per supplier and per delivery, so that data do not disappear when a supplier changes. This is directly relevant if a company is considering changing suppliers; see does the product passport remain accurate if I switch to a different mattress material supplier.
- A confidentiality agreement, if a supplier is reluctant due to confidential recipe or composition, so that data are shared without the supplier feeling that competition-sensitive information is being disclosed.
- A clear assignment of data per component, especially when foam and suspension come from different suppliers — this prevents duplicate or conflicting information in a single product passport, see how do I combine data from different foam and spring suppliers in one passport.
A supplier that delivers nothing is therefore not merely a practical inconvenience; it is a situation in which responsibility for the product passport remains with the manufacturer, while the basis for it lies with another party. Whoever establishes in advance what is needed, when, and what happens if it fails to arrive, is significantly better positioned than someone who discovers this only when the data should already have been received.
This is not legal advice. This page provides general information about the legislation this platform concerns. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, checked by a human on 2026-08-22. Is something wrong? Let us know — corrections are given priority.