How do you go from a draft to a published passport?
How a small team collects, reviews and publishes a useful first passport, and keeps it current afterwards.
DPP Shield editorial team · Updated:
Start with one product whose identifiers you control, create a draft passport, request the missing data from suppliers, validate the record against the rules for its category, review exactly what the public will see, and have an accountable person publish it. Later edits create a new version while the published one stays live.
Step 1: Which product should you start with?
Pick a product with a stable identifier, such as a GTIN, and documentation you can reach. A first passport is as much about building the team's routine as about the product, so avoid the most complex item in the catalogue.
Create the product, choose its category, and create a draft passport. Assign an owner for each missing field.
Step 2: How do you collect supplier data?
Ask suppliers for specific facts and documents, not for "everything you have". Name the material, component or batch and the period the evidence must cover.
Check that each answer refers to the right item before it enters the passport. Answers and their documents stay linked to the request, so the source of every value can be traced later.
Step 3: How do you validate the record?
Run validation against the rule pack for the product's category and markets. Findings marked as blocking must be resolved before publication; warnings are for review.
Remember what the result means. A bundled rule pack is a readiness check, not a legal assessment. Only a pack reviewed and approved by a second administrator produces a legal-assessment result, and even then responsibility stays with your organization.
Step 4: What should you check before publishing?
Open the public preview and read it as a stranger would. Confirm that confidential values are redacted and that nothing reveals more than you intend: by default exact substance concentrations and per-line material masses are shown as ranges and shares.
If a blocking finding cannot be resolved but publication is still justified, request an override. A second person must approve it, the approval covers that exact version and markets, and it expires.
Step 5: Publish, then keep the passport current
An owner or admin publishes, confirming their second factor if one is enrolled. Then attach the passport to its carrier: a QR code or DataMatrix encoding a GS1 Digital Link.
When facts change, edit the passport. The edit creates a new version while the published release keeps answering scans, and the new version replaces it only after it passes the same gate. If the product is recalled, the passport stays public with a recall notice.