Article 22 · Commission Implementing Regulation (EU) 2026/1778

Contents

Article 22Responsibilities of the Member States#

1.Where Member States create an interconnection with the registry, they shall be considered the respective owners of their information systems, including any components developed by Member States for the interconnection. Member States shall be responsible for the establishment, development, availability, monitoring, updating, maintenance and hosting of the components used to access the registry under their responsibility.

2.Member States shall ensure an appropriate level of security of the national components used to access the registry, in accordance with Union law. Member States shall inform, without undue delay, the Commission of changes and updates to the components under their responsibility that may affect the functioning, availability and reliability of the registry.

3.Member States may process the data from the registry. Where the Member States process data obtained from the registry, such data shall be processed in accordance with Union law.

4.When processing personal data for the purposes of carrying out their duties defined in Union law or under national law in compliance with Union law, Member States shall be regarded as controllers as defined in Article 4, point (7), of Regulation (EU) 2016/679.

5.Member States shall be responsible for any data processing activities carried out within their sphere of control, including:

(a)managing the registration and onboarding of competent national authorities and where relevant, customs authorities, through the designated national administrator as referred to in Article 7(2);

(b)ensuring that any data processing taking place within their sphere of control is performed in accordance with Regulation (EU) 2016/679;

(c)withdrawing a user’s rights of access to the registry in case of unauthorised or incorrect access to the registry.

Defined terms · 18

Show every defined term

authentication token
means a token that securely transmits information about successful authentication and is used to prove authenticated sessions or delegated access between applications and the digital product passport information system;
controlled vocabulary
means a structured and authoritative set of standardised terms with defined meanings with a view to ensuring consistent representation of data attributes across digital product passports;
data exchange model
means a structured framework through which data can be exchanged between different systems and platforms;
data model
means a structured framework that organises elements of data, standardises the structure, determines how they relate to one another, and identifies the entities, their attributes and the relationship between those entities;
digital product passport
includes the battery passport established by Article 77 of Regulation (EU) 2023/1542.
hash of the version of the digital product passport
means the output generated from the relevant electronic data using a cryptographic algorithm from the relevant version of the digital product passport;
identity verification process
means the process by which a natural person or legal person provides evidence of identity and, where applicable, of establishment;
log system
means an automated system that records and stores information on all operations and interactions carried out in the registry;
login credentials
means a set of unique identifiers, such as a username and password, that enables a user to verify its identity in order to authenticate themselves in the registry;
massive data download
means the retrieval of an exceptionally large or complex dataset - typically ranging from terabytes to petabytes in scale - which exceeds the processing or storage capabilities of conventional tools or a single local machine or interferes with monitoring safeguards.
registry
means the information system established and maintained by the Commission in accordance with Article 13 of Regulation (EU) 2024/1781;
semantic conformity
means the extent to which the data contained in a digital product passport comply with the applicable semantic specification, in that:
semantic interoperability
means the ability of information systems and the organisations that support them to exchange data in such a way that the meaning of exchanged information is mutually understood and unambiguously interpretable by all parties, regardless of the underlying technology or jurisdiction;
semantic repository
means a collection of data models and semantic definitions that are composed of a structured and logically interrelated set of terms and their meanings specifying the core elements of the digital product passport, the definitions of names or vocabularies, the data elements and the ontology associated with specific data in order to ensure common understanding across all users, and cross-lingual interpretation used for digital product passport validation and for linking the registry data with the digital product passports;
semantic specification
means any artefact published in the semantic repository, including ontologies, data models, controlled vocabularies, and code lists, together with their versioning metadata and provenance information;
value chain actor
means a natural or legal person, other than the economic operator, that performs activities in the value chain of a product requiring a digital product passport and its registration in the registry, such as a repairer, refurbisher, remanufacturer or recycler;
verified economic operator
means an economic operator that has successfully completed the identity verification process in the registry in accordance with Article 4;
verified value chain actor
means a value chain actor that has successfully completed the identity verification process in the registry in accordance with Article 5;