The Digital Product Passport needs a data carrier. A QR code is the obvious one.
The dates that are actually fixed, with the hedge stated
Battery Regulation (EU) 2023/1542: from 18 February 2027 every battery placed on the EU market carries a QR code linking to required information, and EV, light-means-of-transport and industrial batteries over 2kWh also need a full battery passport. The framework regulation for everything else, ESPR (EU) 2024/1781, phases products in category by category through delegated acts, each carrying a transition period of at least 18 months, with an EU product registry live since July 2026. Which categories follow, and exactly when, is still being settled act by act. OpenQR generates codes and hosts redirects; it does not advise on whether your product is in scope. Check your category's timetable with a source that tracks EU product regulation.
A passport is structured product data: identity, materials, chemistry where relevant, repair and disassembly information, end-of-life handling. Some of it is for consumers, some for recyclers and regulators. None of it lives on the pack. What the pack needs is a data carrier that anyone, with any phone, can scan to reach that data for the specific product in their hand. That is a narrower requirement than it sounds, and it is the only part of the regulation that packaging artwork has to satisfy. The project that matters, building and maintaining the data behind the link, belongs to the product and compliance teams, and it is where the real effort and the real deadlines live.
The regulation does not mandate a symbology, but the arguments resolve quickly in one direction. Every phone in the world already reads QR codes natively from its camera, which no other 2D symbology can claim. Capacity is ample for a URL carrying structured identifiers. And retail is moving its own tills to 2D barcodes anyway, on GS1's timetable for the end of 2027, so the same printed square that serves a regulator can also serve checkout and the shopper. That convergence is why most compliance guidance treats the QR code as the default answer rather than one option among several. See the GS1 Digital Link page for how the identifier itself is structured.
Whatever your category's eventual delegated act says about the data, the pack-side move is the same and it is useful today: one QR code per SKU, printed on the pack, pointing at a product page you control, generated as a dynamic code so the destination can change without a reprint. Today that code serves marketing and customer information. When the category's passport requirements land, the destination is repointed at whatever passport data page the rules require, and no artwork changes. The code that was a product link becomes the compliance carrier by editing a URL. A static code cannot do that, and a pack that sits on a shelf for two years does not care that the regulation moved after it was printed.
Three failure patterns are already visible. Printing a code that points at nothing but a marketing landing page and calling the pack passport-ready: it is not, and the gap will be found by whoever enforces it. Waiting for complete certainty before any code goes on the pack: certainty arrives act by act, and the reprint cycle means the pack in front of you was designed a year ago. And minting a separate compliance code alongside the marketing one: two codes on one pack is confusing artwork, twice the proofs and twice the quiet-zone fights, when one well-chosen destination behind one code does both jobs. Decide the destination architecture once, per product family, rather than per deadline.
A 2026 readiness sequence that costs almost nothing
List the SKUs that sell into the EU
By product family, not by variant, because the artwork architecture follows the family.
Check each family's timetable
Batteries are fixed for February 2027. For everything else, find your category's delegated act status before promising anyone a date.
Stand up the product pages
A stable page per SKU that you control, which is worth having regardless of regulation.
Mint dynamic codes per SKU into the next artwork round
Bulk generator, one row per SKU, SVG at the die-line size. No separate compliance code.
Keep the register
The CSV and manifest are the audit trail of which pack carries which code. Reprints read from it, not from archaeology.
On cost, because it is usually the first question in the meeting: the codes themselves are the trivial line. Static codes are free and unlimited; dynamic codes are free for three and then Pro at £9 a month, which is rounding error next to the artwork change it rides on. The compliance cost is the data page and the product information behind it, and that is a project regardless of which carrier is chosen. Choosing the QR carrier does not add meaningful cost to it; it is the only carrier that does not.