Built for Compliance. Billed Accordingly.
You identify the minimum data set the first enforcement window requires. You find a way to assemble it — through a project, a platform, an implementation team working against a deadline. The passport exists. The QR code resolves. The auditor sees the record.
At some point in that process, someone notices that the investment required to build the minimum was not materially smaller than building something worth considerably more.
This is the compliance trap. Not non-compliance. Not greenwashing. A subtler problem of building the right infrastructure for the wrong purpose — and paying for it accordingly.
The case for reframing the investment has been implicit across the preceding articles in this series. The data infrastructure a credible DPP requires — governed, product-specific, maintained across the supply chain — is worth considerably more than compliance. An organisation that knows its products at the depth a passport demands has built a capability that reaches into sourcing decisions, into sustainability claims, into the operational foundations of circular business models. The compliance piece is the easiest thing to do with that capability. It is also the least interesting.
What separates organisations that capture that value from those that don't is not the technology they chose or the budget they committed. It is the question they started with.
The capability question — what would it mean to genuinely know our products — points the investment toward something that does not have a completion date. It points toward an organisation that is measurably different from the one that started: one that can answer a sourcing question, a claims challenge, an investor inquiry from the same underlying data foundation.
The compliance question — what do we need to produce, for whom, by when — points the investment toward an output. A document, a data record, a regulatory submission. The output has a completion date. When the date passes, the project closes.
Both questions lead to a DPP. They do not lead to the same organisation.
This is not a theoretical distinction. Accenture's research across more than a thousand companies in fifteen countries found that organisations in the top 10% for supply chain maturity achieved 23% higher margins and 15% better shareholder returns than their peers. The investment gap between high and low maturity organisations was not the differentiator. The capability gap was.
Across industries, maturity scores increased more than 50% between 2019 and 2023 — yet the cross-industry average sits at 36%, and consumer goods lower still at 31%. The investment happened. The maturity did not follow. This is the cost of building for outputs rather than capability — of commissioning implementations without the governance, the shared definitions, and the organisational habits that make technology compound rather than depreciate.
The DPP is arriving into that gap. Organisations that approach it as a capability investment will begin to close it. Those that approach it as another output-oriented project will widen it.
What that capability unlocks is worth naming directly, because it has been present across this series without being fully named.
Better sourcing decisions. An organisation with verified, product-specific material data can see its supply chain in a way that cost-and-lead-time sourcing cannot. It can identify concentration risk before a disruption makes it visible. It can evaluate a new supplier on data quality as well as commercial terms — because it knows what data quality is worth.
More defensible claims. The Green Claims Directive found that 59% of sustainability claims in the market were vague, misleading, or unverifiable. An organisation whose claims rest on a governed data foundation does not need to manage that bar as a constraint. The data is there. The claim follows from it. The legal and reputational exposure that attaches to an unsubstantiated claim does not.
Circular operations. Resale, repair, rental, take-back — these are not business models an organisation can enter without knowing its products at depth. The data infrastructure a passport requires is not separate from the infrastructure circularity demands. It is the same investment, made once, serving both.
None of those outcomes are available to the compliance build. They are available to the capability build.
The organisations that will navigate the full DPP trajectory — through the first enforcement window and the deeper requirements that follow — without rebuilding at each phase are the ones that decided, early enough to matter, that the investment was for something larger than the deadline in front of them.
That decision is still available. The window is closing. Those making it now are building toward something durable. Those making it later, under enforcement pressure, are buying a compliance document at the same price.
The bill is the same either way. What it buys is not.
Michael Shea is a digital excellence advisor, non-executive director, and leadership coach working with organisations navigating the human and technical dimensions of digital transformation. He hosts The Aeolian Discourse and writes at The Aeolian.