Article 20 — Technical design and operation of the digital product passport

1. The digital product passport shall be fully interoperable with other digital product passports required by other Union law in relation to the technical, semantic and organisational aspects of end-to-end communication and data transfer. 2. All data included in the digital product passport shall be based on open standards, developed with an interoperable format, and shall be, as appropriate, machine-readable, structured, searchable and transferable through an open interoperable data exchange network without vendor lock-in. 3. Consumers or other end users, economic operators, competent national authorities and customs authorities, the Commission and other relevant actors shall have access on the basis of their respective access rights in accordance with Union law to the digital product passport free of charge. 4. Consumers shall not be requested to register or provide a password to access the digital product passport. 5. The digital product passport shall be stored by the economic operator responsible for its creation or by digital product passport service providers. 6. Where a new digital product passport is created for a toy that already has a digital product passport, the new digital product passport shall be linked to the original digital product passport or passports. 7. If the digital product passport is stored pursuant to paragraph 5 of this Article or otherwise processed by digital product passport service providers pursuant to Article 19(13), those digital product passport service providers shall not sell, re-use or process such data, in whole or in part, beyond what is necessary for the provision of the relevant storing or processing services, unless specifically agreed with the economic operator placing the toy on the market. 8. Data authentication, reliability and integrity shall be ensured. 9. Digital product passports shall be designed and operated so that a high level of security and privacy is ensured and fraud is avoided. 10. Economic operators shall not track, analyse or use any usage information for purposes other than what is absolutely and strictly necessary for providing the information on the digital product passport online. In particular, personal data related to the customer shall not be stored in the digital product passport without the explicit consent of the consumer or other end user in compliance with Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council.