DPP Data Carrier Standards — QR Codes, RFID, NFC for Digital Product Passports

The regulation says your product needs a Digital Product Passport. It says the DPP must be accessible via a data carrier attached to the physical item. What the regulation does not say — at least not yet, in most delegated acts — is exactly which data carrier to use. That gap is where implementation teams spend a surprising amount of time.

QR codes get the most attention, and for good reason. But the actual landscape of DPP data carriers includes RFID tags, NFC chips, DataMatrix codes, and hybrid configurations that combine two or more of these on a single product. Each technology has trade-offs in cost, durability, scan distance, data capacity, and compatibility with existing retail and logistics infrastructure. Getting this decision wrong creates rework costs that dwarf the original carrier price.

This piece maps the main DPP data carrier options against real-world product categories, ISO standards that govern each, durability requirements under EU ecodesign rules, and the cases where a dual-carrier strategy is the pragmatic answer rather than the overengineered one.

What a DPP data carrier actually does

A data carrier, in the context of a Digital Product Passport, is the physical or electronic mechanism that connects a product to its digital identity. It is not the DPP itself — the DPP is a structured data set living on a server somewhere. The carrier is the bridge: scan it, and you reach the data.

The EU's ESPR framework, which underpins DPP obligations, specifies that the carrier must be readable by humans or machines throughout the expected product lifetime. For a fast-moving consumer good with a six-month shelf life, that requirement is easy to satisfy. For an industrial textile that must carry a DPP for fifteen years through washing cycles, industrial environments, and multiple ownership changes, it is a genuinely demanding engineering constraint.

The technical backbone connecting carrier to data — the URI structure that resolves to the right DPP endpoint — is standardised through GS1 Digital Link. Understanding the carrier question therefore cannot be fully separated from understanding how the resolver architecture works.

QR codes: the default choice and its real limits

QR codes dominate DPP implementation discussions for three reasons: universal smartphone readability, low production cost, and alignment with GS1 Sunrise 2027 — the retail industry's initiative to make 2D scanning standard at point of sale by January 2027.

The governing standard is ISO/IEC 18004, which defines QR code structure, error correction levels (L, M, Q, H), and module dimensions. For DPP use, the relevant parameters are:

• Error correction level: Level H (30% recovery) is recommended for products exposed to abrasion, moisture, or partial label damage. Level M (15%) is acceptable for protected surfaces.
• Minimum module size: GS1 specifies 0.38mm per module for retail. For industrial and logistics applications, larger modules (0.5mm+) improve readability at distance and under degraded conditions.
• Data capacity: A QR code can encode up to 7,089 numeric characters or 4,296 alphanumeric characters. For a GS1 Digital Link URI, typical length is 50–120 characters — well within capacity.

Where QR codes struggle: high-temperature manufacturing environments (labels can degrade before the product leaves the factory), curved or textured surfaces that distort module geometry, and products that are routinely submerged or exposed to harsh chemicals. A QR code printed on a paper label attached to a pipe fitting is not the same as one laser-etched directly into stainless steel.

Direct Part Marking (DPM) — etching or engraving a QR directly into the product surface — addresses durability concerns but requires a scanner capable of reading low-contrast DPM marks, which is a different hardware profile from a standard area imager. ISO/IEC 29158 governs DPM quality assessment.

DataMatrix: the pharmaceutical standard that industry is borrowing

DataMatrix is a 2D matrix code governed by ISO/IEC 16022. It has been mandatory on pharmaceutical packaging in the EU since 2019 under the Falsified Medicines Directive, and that deployment history gives it a credibility in regulated sectors that QR codes are still earning.

DataMatrix encodes more data in a smaller footprint than a QR code at equivalent module size — a meaningful advantage for small packaging or medical devices where label real estate is constrained. Its ECC 200 error correction algorithm is particularly robust for damaged or partial symbols.

For DPP implementation, DataMatrix is the natural choice for:

• Medical devices and pharmaceutical products where regulatory precedent already mandates it
• Industrial components with small surface areas
• Products where laser or dot-peen DPM marking is used and the smallest possible symbol is required

The limitation compared to QR is consumer readability: most smartphone cameras and native scanning apps do not read DataMatrix reliably without a dedicated app. For B2B-only DPP use cases where all scans happen in controlled industrial environments, this is irrelevant. For products that consumers are also expected to scan for recycling information or repair guides, DataMatrix is the wrong choice.

RFID: the logistics layer that DPP could finally justify at product level

RFID (Radio Frequency Identification) has been used in logistics and retail back-of-house for two decades. EPC Gen2 tags on pallets and cases are standard in major retail supply chains. At the item level, RFID has been slower to penetrate — unit cost per tag and the need for specialised readers have limited adoption.

DPP requirements could shift this calculus. RFID offers capabilities that optical codes fundamentally cannot: bulk reading (hundreds of items scanned simultaneously without line-of-sight), tamper evidence through specialist inlay designs, and in some configurations, write access for updating the tag with lifecycle events.

The relevant standards are ISO/IEC 18000-63 (EPC Gen2 UHF RFID) and GS1's EPC standards for serialised GTINs. The Electronic Product Code (EPC) encoded on an RFID tag maps directly to GS1 Digital Link identifiers — a tag encoded with a serialised GTIN can resolve to the same DPP endpoint as a QR code carrying the same GTIN.

RFID is particularly relevant for the EU Battery Passport and textile DPP categories. A battery installed in an EV will be read by factory automation systems, not a human with a phone. RFID at the item level is operationally superior in that context. Textile recycling facilities are beginning to install RFID gate readers precisely because consumer-facing QR codes are often destroyed or removed before garments reach sorting.

Cost remains the constraint: a passive UHF RFID inlay costs €0.05–€0.20 per unit at volume, compared to near-zero for a printed QR code. For high-value products like electronics or batteries, this is trivial. For a €3 garment, it materially affects margin — which is why the textile DPP delegated act is being watched closely by brands calculating the total compliance cost.

NFC: consumer engagement meets traceability

NFC (Near Field Communication) tags operate at 13.56 MHz and communicate over distances of a few centimetres — distinctly different from the multi-metre read range of UHF RFID. Every smartphone manufactured since approximately 2014 can read NFC tags without an app, using the native OS scanning function.

This makes NFC the most frictionless option for consumer-facing DPP access. A shopper taps their phone to a product and receives the DPP directly — no QR code camera alignment required, no app download, no degraded barcode squinting. For luxury goods, cosmetics, and electronics — categories where consumer interaction with sustainability data is a marketing as well as regulatory goal — NFC has genuine appeal.

ISO/IEC 15693 and the NFC Forum Type standards govern tag interoperability. NFC tags can store URLs, NDEF records, or structured data. For DPP use, encoding a GS1 Digital Link URI in the NDEF record is the recommended approach, consistent with optical carrier standards.

The durability profile of NFC tags varies dramatically by product design. Embedded NFC in a hard product casing (electronics, luxury accessories) is highly durable. NFC inlays in flexible labels applied to fast-moving goods are more vulnerable to mechanical damage. Water resistance ratings (IP67, IP68) apply to some industrial NFC tags and should be specified in procurement for relevant product categories.

Dual-carrier strategies: when two is not twice the cost

Many product categories under active DPP development — textiles, electronics, batteries — have requirements that no single carrier technology satisfies perfectly. A smartphone QR for consumer recycling instructions, an NFC tag for retail staff workflows, and an RFID inlay for logistics tracking represent three different use cases that may legitimately coexist on a single product.

A dual-carrier strategy typically combines:

• QR + RFID: Consumer-facing and logistics-facing in parallel. Common in apparel and electronics retail. The QR code handles consumer scanning; the RFID tag handles inventory and supply chain visibility.
• QR + NFC: Standard readability plus premium consumer engagement. Used in luxury goods and cosmetics. The QR ensures universal compatibility; the NFC provides a frictionless tap experience for engaged consumers.
• DataMatrix + RFID: Industrial and pharmaceutical. DataMatrix for regulatory track-and-trace in manufacturing; RFID for logistics visibility downstream.

The key principle: all carriers on a single product should resolve to the same GS1 Digital Link URI structure, ensuring that scanning any carrier — by any stakeholder — reaches the correct DPP endpoint. The DPP requirements checklist includes carrier specification as a distinct item precisely because misalignment between carriers is a common implementation failure.

ISO standards quick reference

Choosing the right carrier — or combination of carriers — is one of the earliest binding decisions in a DPP implementation. It affects packaging design, manufacturing processes, label procurement, reader infrastructure at all points in the value chain, and the resolver architecture that links physical product to digital data. Teams that lock in a carrier choice without mapping the full stakeholder scan journey typically find themselves adding a second carrier later at higher cost than doing it once correctly.

The resolver side of this equation — how a GS1 Digital Link URI actually routes different scan contexts to the right endpoint — is covered in detail in the GS1 Digital Link guide. If you are at the stage of specifying carrier requirements for a specific product category, our DPP platform supports all major carrier types and integrates directly with GS1's resolver infrastructure.

Frequently asked questions

Does the EU mandate a specific data carrier for the Digital Product Passport?

The ESPR regulation does not mandate a single carrier technology. Delegated acts for each product category specify requirements, and some (like the Battery Regulation) explicitly require a QR code. Other categories leave the carrier choice to the brand, provided the carrier meets durability and readability requirements throughout the product's expected lifetime. GS1 Digital Link encoding is the strongly recommended URI structure regardless of physical carrier type.

What is the difference between a QR code and a GS1 Digital Link QR code?

A standard QR code can encode any text or URL. A GS1 Digital Link QR code encodes a specifically structured URL that contains GS1 product identifiers (GTIN, batch, serial number, expiry date) in a standardised URI format. This structure allows retail POS systems to extract pricing data, logistics systems to extract traceability data, and DPP systems to resolve compliance data — all from the same physical symbol.

How long must a DPP data carrier remain readable?

The ESPR framework requires the carrier to be readable throughout the product's expected lifetime, which varies by category. For textiles, this is the expected useful life of the garment. For batteries and electronics, it covers the operational life plus any relevant end-of-life processing period. Products with long lifetimes often require direct part marking or embedded electronic carriers rather than printed labels.

Can NFC replace QR codes for DPP compliance?

NFC can satisfy DPP carrier requirements in most product categories — it is readable, standardised, and capable of encoding a GS1 Digital Link URI. However, it cannot replace QR codes for retail point-of-sale scanning, which relies on optical readers. For products that must comply with both GS1 Sunrise 2027 (retail POS) and DPP regulations, a dual QR + NFC strategy is often the most practical approach.

What ISO standard governs QR code quality for DPP use?

ISO/IEC 18004 defines the QR code specification. Print quality is assessed against ISO/IEC 15415 for 2D matrix symbols. GS1 application standards further specify minimum module sizes and error correction levels for different application environments. For direct part marking applications, ISO/IEC 29158 (formerly AIM DPM) provides the relevant quality grading methodology.