The project described in this presentation has examined the potential for a Digital Product Passport to inadvertently disclose personal ID information. The premise explored is that seemingly ‘non-personal’ or ‘product’ data can reveal personal data about users. We explore the implications of this for personal ID.