DPP for Construction Products: What UK Manufacturers Need to Know
Seventy-two people died at Grenfell Tower in 2017, in part because nobody could readily answer a simple question: what exactly was in the cladding system on that building, and had it been installed correctly?
Nearly a decade on, the regulatory response to that failure is reshaping the construction products industry. The UK Building Safety Act 2022 introduced "golden thread" information requirements for higher-risk buildings. The new EU Construction Products Regulation, Regulation (EU) 2024/3110, which repeals the 2011 regime, gives the European Commission power to establish a construction Digital Product Passport, aligned where possible with the wider Ecodesign for Sustainable Products Regulation. The two regimes are legally distinct, but they point in the same operational direction: significant construction products will increasingly be expected to carry a permanent, machine-readable digital identity holding performance data, installation records, and traceability back to the manufacturer.
For UK manufacturers of insulation, cladding, fire-stopping systems, structural steel, and concrete products, this is not a distant compliance exercise. The groundwork needs to be laid now.
What the Building Safety Act Actually Requires
The Building Safety Act 2022 introduced a new regulatory framework for "higher-risk buildings". For the occupation phase, a higher-risk building is defined as one that is at least 18 metres in height or has at least 7 storeys, and contains at least two residential units. For these structures, the regime creates a duty to maintain a "golden thread of information": a complete, accurate, and accessible record of safety-relevant information about the building throughout its lifecycle.
The golden thread is not just a filing system. The regime requires that building safety information be kept in a structured, accessible format, available to the Building Safety Regulator and to accountable persons (typically building owners or managers). Information should be kept current as changes are made to the building fabric.
For construction product manufacturers, this translates into a concrete operational requirement: the products you supply to higher-risk buildings need to carry sufficient identity and performance information that they can be unambiguously recorded in the golden thread. That means:
- Unique product identification: batch numbers alone are often insufficient; individual serialisation or lot-level traceability supports unambiguous recording
- Verified performance data: fire ratings, structural classifications, thermal performance, and any test certificates digitally attached and retrievable
- Installation records: who installed the product, when, and in which part of the structure
- Maintenance and inspection history: particularly for passive fire protection and structural elements
The direction of travel is "digital by default" information management. Paper records stored in a site office are a poor fit for a golden thread that has to stay accurate and accessible over a building's life.
The New EU Construction Products Regulation and the DPP
On the EU side, the relevant instrument for construction is not the wider Ecodesign for Sustainable Products Regulation (ESPR) but the new Construction Products Regulation (EU) 2024/3110, adopted on 27 November 2024 and published in the Official Journal on 18 December 2024. It repeals the previous Construction Products Regulation (Regulation (EU) No 305/2011) and empowers the Commission to establish a construction Digital Product Passport system, aligned where possible with the DPP under ESPR (Regulation (EU) 2024/1781). The two frameworks are deliberately kept distinct: ESPR and its delegated acts cover product groups such as textiles and steel, while construction products run through the dedicated CPR.
The detailed DPP obligations for construction products are not immediately in force. The Regulation sets the framework, and the specific requirements, product groups, and timing are to be set by the Commission through delegated and implementing acts over a transition period. There is no single blanket "DPP deadline" for all construction products. Manufacturers should treat the precise dates as still to be confirmed and verify them against EUR-Lex as each act is adopted.
A construction DPP is expected to carry information such as:
- Product classification and performance declarations
- Material composition and recyclability data
- Environmental information, including embodied carbon, at product or batch level
- End-of-life instructions and deconstruction information
- Links to third-party test certificates and declarations of performance
The exact data fields will be fixed by the implementing and delegated acts, so this list reflects the framework's direction rather than a final dataset. The DPP is expected to be accessible via a machine-readable carrier: a QR code compliant with GS1 Digital Link is a practical option for physical products. The construction DPP system itself is to be established by the Commission, again through subsequent acts.
For UK manufacturers who export to EU markets or supply projects involving EU-based developers and contractors, alignment with the EU construction DPP is likely to become a commercial prerequisite regardless of post-Brexit regulatory divergence.
DPP Data Requirements by Construction Product Type
The data that belongs in a construction product DPP varies significantly by category. The table below illustrates the kinds of data that map to each product type, drawing on the direction of the new EU Construction Products Regulation and the Building Safety Act golden thread obligations. Treat it as an illustrative planning aid rather than a final regulatory dataset.
| Product Type | Fire Performance Data | Structural Ratings | Installation Tracking | Maintenance Records | End-of-Life Data |
|---|---|---|---|---|---|
| External cladding systems | Reaction to fire class (EN 13501), fire spread test results | Wind load resistance, impact resistance | Installer certification, fixing method, layer sequence | Annual inspection status, any remediation | Recyclability %, disassembly instructions |
| Insulation (PIR, mineral wool, EPS) | Euroclass rating, smoke production class | Compressive strength (if structural) | Location in building, substrate type, fixing method | Condition checks, moisture monitoring | Recycled content %, take-back scheme |
| Passive fire protection (intumescent, firestopping) | Fire resistance period (EI/EW/E), substrate compatibility | N/A | Gap size, penetration type, installer name and certification number | Re-inspection date, any alterations | Product-specific disposal guidance |
| Structural steel | N/A (unless fireproofed) | Grade (S275/S355), yield strength, section reference | Fabricator, erector, weld inspection records | Periodic structural surveys | Steel recycled content, scrap route |
| Ready-mix concrete | Fire resistance class of finished element | Compressive strength class (C25/30 etc.), exposure class | Pour date, location, mix design reference, curing records | Inspection/repair history | Carbonation data, recycling suitability |
This data does not live neatly in any single system. Product data sits with the manufacturer. Installation data sits with the contractor. Inspection records sit with the building manager or owner. The DPP is the mechanism that stitches these data layers together across the full product lifetime, which for a structural element can run to many decades.
Why QR-Based Identity Is the Right Answer for Construction
Construction products face environmental challenges that make many digital identity approaches impractical. A QR code label on cardboard packaging will not survive a building site. An RFID chip embedded in concrete may survive structurally but becomes unreadable once buried behind a finished surface. NFC tags on external cladding face UV degradation over decades of exposure.
The most durable approach combines two layers:
Embedded physical identity: a durable, tamper-evident label (anodised aluminium, ceramic, or laser-etched polymer) applied directly to the product or its installation point, carrying a GS1 Digital Link QR code that encodes the manufacturer GTIN and a unique serial or batch identifier.
Cloud-resident data: the QR code resolves to a cloud-based DPP record that holds the data that cannot be physically engraved, such as performance certificates, installation photos, inspection logs, and maintenance schedules. This record is mutable (new data can be appended) while the physical identity is permanent.
The GS1 Digital Link standard is designed for this use case, where a single QR code can resolve differently depending on who scans it and what context they need. A building manager scanning the same code as a fire inspector can see a different data view from a recycling contractor scanning at end of life. The underlying identity is the same; the presentation layer is role-aware.
This is the kind of infrastructure that BrandedMark provides. The platform issues serialised GS1 Digital Link QR codes, hosts the DPP data record, and controls access by stakeholder role, without requiring manufacturers to build custom integrations. See how we handle industrial equipment identity at scale.
Multi-Stakeholder Access: Who Needs What
One of the distinctive challenges of construction product DPPs, compared with a consumer electronics DPP, is the sheer number of stakeholders who need access to product data across a building's lifetime, each with different data needs and different technical sophistication.
Installers and subcontractors need to confirm product specifications at the point of installation, capture installation photos and measurements, and record their certification credentials against the specific product and location. They are typically working in dusty, wet, and low-light conditions with a smartphone as their primary tool. The interface must be fast, offline-capable, and require minimal data entry. Learn more about how field installers use connected product identity.
Building managers and accountable persons need a consolidated view of all products in the building fabric, upcoming maintenance requirements, and the ability to produce a golden thread report for the Building Safety Regulator without manually assembling records from dozens of contractors. They want a building-level dashboard, not a product-level QR code.
Regulators and fire inspectors need verified, tamper-evident records with full audit trails. They need to be able to confirm that a fire-rated product installed in a corridor is genuinely the product that appears on the approved drawings, not a substituted product with a different fire classification.
Insurers and valuers are increasingly asking for golden thread data as part of building EWS1 assessments and insurance renewals. They need summary-level performance data, not raw installation records.
Recyclers and demolition contractors at end of life need material composition and hazardous substance data to comply with waste regulations and maximise material recovery value.
A construction product DPP platform needs to serve all of these audiences from a single underlying data record, with role-appropriate access controls and presentation layers. This is not a problem that a PDF declaration of performance or a spreadsheet can solve.
The Competitive Landscape
A handful of specialist platforms are positioning for this market. Some, such as Cobuilder, focus on structured product data for construction and its connection to design-stage workflows. Others, such as Provenant (formerly Protokol's DPP platform), publicly position themselves as multi-sector Digital Product Passport platforms that include construction use cases. The category as a whole is still taking shape, and capabilities differ, so manufacturers should evaluate each vendor against their own requirements rather than relying on category labels.
Where BrandedMark aims to differentiate is as a manufacturer-facing product operating system that combines serialised physical identity issuance, post-installation lifecycle management, multi-stakeholder access controls, and GS1 Digital Link support in a single low-code platform. The construction vertical is a natural extension of infrastructure used in adjacent sectors such as industrial equipment, PPE, and durable goods manufacturing.
The First-Mover Opportunity
UK manufacturers who establish digital product identity infrastructure before the construction DPP acts are finalised can position themselves on three dimensions.
Commercial differentiation: specifiers, architects, and main contractors increasingly ask for golden thread-compatible product data on higher-risk building projects. Where that data is requested, a manufacturer that can provide a QR-scannable DPP can answer the requirement directly, while one that cannot has to fall back on PDFs and spreadsheets.
Remediation market access: the UK external wall remediation effort, driven by the Building Safety Act, involves replacing cladding systems on residential buildings across the country. Products specified for remediation projects face close scrutiny on provenance and performance, so being able to produce product-level provenance and performance data on demand directly addresses that scrutiny.
Regulatory readiness: when the construction DPP acts are formally adopted, a manufacturer with existing DPP infrastructure faces more of a data-mapping exercise than a ground-up system build under deadline pressure.
The window to build this capability ahead of the detailed requirements is narrowing. Understanding the EU DPP registry requirements and the broader DPP compliance timeline across product categories can help you prioritise construction-specific implementation relative to other regulatory pressures.
Frequently Asked Questions
Does the Building Safety Act apply to products already installed in existing buildings?
The golden thread requirements apply to higher-risk buildings, covering both new construction and existing buildings in occupation. Accountable persons for existing higher-risk buildings are required to prepare and maintain a safety case, which means gathering information about the existing building fabric. For manufacturers, this creates ongoing demand for product data even for products already installed, particularly where fire safety systems or cladding are under review.
When exactly will EU DPP requirements apply to construction products?
The detailed obligations are not yet fixed. The new Construction Products Regulation (EU) 2024/3110 empowers the Commission to set up a construction DPP system, but the specific product groups, data fields, and timing are to be defined through delegated and implementing acts over a transition period. There is no single confirmed "DPP deadline" for all construction products, so any specific year should be treated as a forecast until the relevant act is adopted. The practical takeaway is to build infrastructure now and verify exact dates against EUR-Lex as each act is published.
How should construction product DPPs handle data that changes after installation, such as inspection results or maintenance records?
This is one of the genuinely novel challenges of construction DPPs compared with consumer product passports. A workable approach is to architect the DPP as an append-only record: the manufacturer populates the base product data at the point of manufacture, the installer appends installation records at the point of fitting, and the building manager or appointed inspector appends maintenance and inspection records over the product's lifetime. The underlying product identity (the QR code and its resolver) remains constant; the data record grows over time. Platforms like BrandedMark support this model through role-based data write permissions, so each stakeholder can add records to a product's history without being able to alter records created by others.
What to Do Now
Construction product manufacturers do not need to wait for the EU construction DPP acts to start building infrastructure. The Building Safety Act golden thread requirements already apply to higher-risk buildings. The commercial demand from specifiers and contractors is already real. And the lead time for implementing serialised product identity across a manufacturing line, covering label printing integration, QR code issuance, and data platform setup, typically runs to a few months rather than a few weeks.
The practical starting point is not a full DPP for every product in your range. It is picking the two or three product lines most exposed to higher-risk building projects, typically fire-rated products, external wall systems, or structural elements, and establishing digital identity infrastructure for those lines first. From that foundation, extending to full DPP coverage as the construction DPP acts arrive is an incremental exercise rather than a crisis response.
BrandedMark handles the full stack: GS1 Digital Link QR code issuance, durable label formats for harsh environments, cloud-resident DPP data management, multi-stakeholder access controls, and readiness for the evolving EU construction DPP requirements. The platform is used by manufacturers in adjacent sectors such as industrial equipment, PPE, and field-serviced equipment, where the same combination of harsh physical environments and long product lifespans applies. A good product registration software layer helps ensure that the DPP is not just a compliance artefact, but a tool that integrates with installer workflows and building management systems.
The construction industry has spent years arguing about who is responsible for building safety. Digital product identity does not resolve that argument, but it helps ensure that when the question is asked, the answer is there.