The PPWR has applied since 12 August 2026. Teams that prepared early are now running the process. Teams starting late do not need a different plan. They need the same plan, run in order and without delay.
This guide is written for CFOs and their teams. The biggest risk is not only a missed requirement. It is fragmented ownership: of responsibilities, of evidence, of decision logic. A structured plan keeps the workflow, the audit trail and management visibility in one place.
Our PPWR checklist covers the obligations one by one. This page is the execution plan: what to do, week by week.
Key takeaways
- The PPWR applies. Since 12 August 2026, preparation is catch-up, not planning ahead.
- Fragmented ownership of responsibilities, evidence and decisions is the main compliance and operational risk.
- A central evidence architecture plus operational controls is what makes management and audits workable.
The six-week plan
Weeks 1-2Map the key risks, the responsible owners, the relevant data sources and the critical evidence gaps.
Weeks 3-4Put the needed controls in place, start recurring evidence capture, begin role-based reviews.
Weeks 5-6Check coverage with KPIs, fix the weak points, standardise the audit trail for integrity and traceability.
Starting late changes the urgency, not the order.
A workflow leadership can trust
- Scope and priorities. Agree which entities, processes and requirements come first.
- Evidence architecture. Define what evidence proves each PPWR requirement, and who owns each data point.
- Control points and escalation. Define when a compliance risk becomes an executive issue, and how it escalates.
- Continuous visibility. Use dashboards for readiness status, evidence completeness and audit quality.
Keep three layers linked: requirement, control, evidence. That one picture shows what changed and what is still missing.
Where Regtrue fits
- Evidence Center. One place for evidence, with traceability.
- Audit Trail. Change history and the reasoning behind decisions.
- Integrations. Automated data intake from internal source systems.
FAQ
Is this a compliance project or a business project?
Both. Compliance cuts regulatory and reputational risk, and a well-run process improves decision quality across the organisation.
Our data is heavily fragmented. Where do we start?
Start with the highest-risk requirements and their evidence. Build a simple control map first, then automate in phases as capability matures.
Official sources
Run the plan in Regtrue
Regtrue keeps requirements, controls and evidence in one controlled record: packaging register, supplier evidence, honest assessment, declaration of conformity.
PPWR compliance software
Book a walkthrough