DPPAutomate
NewBattery Regulation 2027 compliance pack is live.Read
DPPAutomate

How to Create Thousands of Digital Product Passports and Unique QR Codes

Creating one DPP is a data exercise. Creating 10,000 is an identity, manufacturing and quality-control exercise. Here is the scalable workflow.

How-ToBy DPPAutomate TeamPublished August 13, 202614 min read
Battery production line issuing thousands of distinct digital product passport records

The short answer

Yes, a company can create thousands of Digital Product Passports without manually authoring thousands of completely different documents. The scalable pattern is to create one approved product or model template, import the variable data for each manufactured item, mint or validate a unique identifier for each item, generate the corresponding QR destination, print or attach the correct code, and record the complete issuance and commissioning trail.

The important distinction is between reusing passport structure and reusing an item identity. You can reuse the model's common technical and sustainability data. You cannot reuse the same item-level identifier and QR destination where the applicable rules require an individual product record. For batteries, this distinction is central: Regulation (EU) 2023/1542 requires a battery passport for each relevant LMT battery, industrial battery over 2 kWh and electric vehicle battery from 18 February 2027. It also requires the passport to be accessible through a QR code linked to a unique identifier attributed to the battery, and the passport contains information specific to the individual battery. Read Article 77 of the Batteries Regulation on EUR-Lex.

This does not mean every future DPP in every product category will always be item-level. Under the ESPR, the applicable delegated act can specify whether a passport is created at model, batch or item level. Article 9 of Regulation (EU) 2024/1781 makes that level a product-group-specific requirement. Treat batteries as the current, fixed-deadline item-level case, and check the delegated act for every other category.

What changes when you move from one DPP to 10,000

At small volume, a team tends to think about fields: materials, carbon footprint, manufacturer, repair information and end-of-life instructions. At scale, the hard problem becomes the relationship between common data, variable data and physical identity.

LayerReusable across a modelVariable for each itemControl question
Product definitionProduct name, specification, materials, approved supplier evidenceUsually little or noneHas the correct model revision been approved?
Manufacturing recordProcess rules and validation rulesSerial number, production date, plant, test resultsCan this exact item be traced to its production evidence?
Passport identityTemplate and access policyUnique product identifier and item recordDoes one identifier resolve to only one intended item?
Physical carrierLabel layout, print settings, human-readable fieldsThe actual QR payload for each itemWas the correct label applied to the correct unit?
Lifecycle stateWorkflow and audit schemaCommissioned, shipped, repaired, repurposed or recycled statusCan a later change be proven without erasing history?

The wrong shortcut is to generate one QR code for a model, copy it onto every unit and call the result an item-level passport. That may be appropriate only when the applicable rule defines the passport at model or batch level. Where the passport is item-level, that shortcut destroys the link between the physical product and its record.

The scalable DPP workflow

The workflow below separates decisions that should happen once from events that must happen for every unit.

1. Define the product model and the applicable level

Start by identifying the legal and operational scope. Record the product category, the applicable regulation or delegated act, the economic operator responsible for the passport, the required data fields, the access tiers and the required level: model, batch or item.

For batteries, build the process around the fixed requirements in Article 77 and Article 13 of Regulation (EU) 2023/1542. For other DPP categories, do not assume that the battery pattern automatically applies. The ESPR requires the relevant delegated act to specify the level and the data carrier arrangement.

The output of this step is an approved passport template, not a QR code. It should contain the common fields, field definitions, source systems, evidence requirements, validation rules and version number.

2. Prepare a clean batch-import file

Do not begin by pasting data into a passport form thousands of times. Prepare a controlled import file or integration payload with one row per physical unit when the passport is item-level.

A practical minimum for a serialized battery import might include:

Field groupExample fieldsWhy it matters
Product identityGTIN or other approved product identifier, model code, product revisionConnects the unit to the correct template
Instance identitySerial number or allocated serial rangeDistinguishes one physical unit from another
Manufacturing contextProduction date, manufacturing plant, production lineSupports traceability and investigation
Compliance evidenceTest reference, conformity record, material or carbon evidence referencePrevents unsupported claims in the passport
Lifecycle dataInitial performance values, status, commissioning dateSupports item-specific and dynamic information
Publication controlTarget market, language, access profile, release statusPrevents premature or overexposed publication

The exact fields depend on the applicable rules and product. A CSV can be a sensible pilot format, but the file must be treated as a controlled data exchange, not as an informal spreadsheet. Validate column names, data types, units, required values, duplicate identifiers and references to evidence before any passport is published.

3. Mint or validate the unique identifier

A scalable system needs an explicit answer to the question: who owns identifier allocation, and how is uniqueness guaranteed? Possible patterns include allocating serial numbers in the manufacturing system, importing a pre-issued serial range, or generating identifiers inside a controlled DPP workflow. Whatever the pattern, the DPP system must reject duplicates and preserve the original allocation record.

When a GS1 identity model is used, a serialized trade item can be expressed as a GTIN plus serial number. GS1 describes the combination of GTIN and serial number as a way to uniquely identify an individual product instance. Its Digital Link syntax can represent that identity in a web URI such as /01/{GTIN}/21/{serial}. See the GS1 Digital Link standard and the GS1-Conformant Resolver Standard.

Do not invent a GTIN, claim that a random UUID is automatically a compliant GS1 identifier, or treat a URL slug as proof of global uniqueness. Confirm the identifier standard, issuing authority, company prefix, serial allocation policy and any required registration or verification process. The DPP implementation should store the source, time, operator and validation result for every identifier.

4. Generate the resolver destination and QR payload

The QR code should carry a stable, resolvable destination that includes or reliably maps to the unique product identity. A resolver then uses that identity to return the appropriate passport view, API representation or other authorized resource.

The QR is not the passport itself. It is the physical data carrier that gives a person or system a route to the passport. The resolver layer matters because you may need to change the destination, access policy, presentation language or linked resource without changing the printed identity. The identifier must remain persistent even when the passport content is updated.

For a GS1 Digital Link pattern, a payload may look conceptually like this:

https://id.example.com/01/09506000151519/21/12345678p901

This is an illustrative syntax example, not a production identifier. Every production payload must be generated from your verified identifier allocation and resolver domain. Before printing, test that the payload is syntactically valid, resolves over HTTPS, resolves to the intended item and does not expose data to an unauthorized audience.

For background on how DPP data carriers connect to persistent unique product identifiers, see Article 10 of the ESPR. The regulation also requires the carrier to be physically present on the product, its packaging or accompanying documentation as specified by the applicable delegated act.

5. Render, print and apply the right code

Bulk QR generation is only half of the physical process. The other half is association control: proving that the label generated for serial A was attached to serial A.

Use a print data set that keeps the item identifier, QR payload, human-readable serial number, model code and label version together. At minimum, the print workflow should support:

  • A deterministic row or job identifier for every label.
  • A preview or preflight check before the print run.
  • A clear separation between approved, printed, applied and rejected labels.
  • Reconciliation of requested labels versus successfully printed labels.
  • Scan verification after application.
  • Quarantine and destruction records for misprints, duplicates and unused labels.

For batteries, Article 13 requires the QR code from 18 February 2027 and says the QR code and labels must be visible, legible and indelible on the battery, or on packaging and accompanying documents where placement on the battery is not possible or warranted because of its nature or size. See Article 13 of the Batteries Regulation. The exact production method, symbol layout and placement should follow the final applicable requirements and your validated packaging process.

6. Commission the passport at the right production event

Issuing an identifier is not the same as commissioning a passport. Define the event that changes a record from reserved or draft to active. It could be a passed end-of-line test, a quality release, a packaging event or the act of placing the battery on the market, depending on your process and legal responsibility.

The commissioning event should capture:

  1. The item identifier and model revision.
  2. The production or quality event that authorized publication.
  3. The source batch and evidence references.
  4. The user, system or line that performed the action.
  5. The timestamp and release status.
  6. The QR payload and resolver response observed at release.

This prevents a common failure mode: thousands of QR codes are printed before the underlying records are complete, then production ships units whose scans return a draft, an empty page or another product.

7. Validate in layers, not only at the end

A high-volume DPP program needs automated validation before, during and after issuance.

Validation layerChecksFailure action
File validationRequired columns, encoding, units, date formats, row countReject the import with an actionable error report
Identity validationDuplicate GTIN and serial combinations, invalid ranges, reused identifiersBlock issuance and quarantine the affected rows
Content validationRequired fields, allowed values, evidence references, access classificationKeep the record in draft or review status
Resolver validationHTTPS response, correct item mapping, expected status and accessBlock release until the resolver passes
QR validationDecode rate, payload equality, print contrast, quiet zone and physical readabilityReprint or quarantine the label job
Line associationScan item and label at the point of applicationStop or divert the line on a mismatch
Post-release monitoringBroken links, unexpected access errors, stale data, revoked recordsOpen an incident and preserve the audit trail

Do not measure success by the number of QR images generated. Measure the number of correct, active and traceable item records that survive a scan from the real product.

How ERP, PIM and manufacturing systems fit together

The DPP layer should have clear source-of-truth boundaries. The ERP may own commercial identity, orders and supplier relationships. The PIM may own descriptive product content and translations. MES, QMS or a battery management system may own manufacturing events and performance measurements. The DPP system assembles the authorized view, validates it and exposes it through the required carrier and access controls.

The integration pattern can be staged:

  1. Pilot: controlled CSV import for one model and a small serial range.
  2. Scheduled sync: periodic exchange for stable model and supplier data.
  3. Event-driven sync: publish changes from ERP, PIM, MES or QMS when a qualifying event occurs.
  4. Reconciliation: compare source counts, passport counts, label counts and shipment counts.

Do not let two systems silently mint serial numbers for the same product family. Choose one allocation authority and make every downstream system consume or validate that identity. The DPPAutomate ERP and PIM integration guide explains the broader mapping and synchronization problem, while the integrations overview is the appropriate place to evaluate connection options. These links describe the integration problem and available product surface; they are not a claim that every connector or manufacturing-system integration is already available.

Updates, replacements and rework

A passport at scale is a lifecycle record, not a static landing page. Regulation (EU) 2024/1781 requires DPP data to be accurate, complete and up to date, restricts update rights by access level and requires data authentication, reliability and integrity. It also says that when a new DPP is created for a product that already has one, the new passport must be linked to the original passport or passports. See Articles 9 to 11 of the ESPR.

For batteries, the regulation is even more explicit about status changes. A battery that has been prepared for re-use, prepared for repurposing, repurposed or remanufactured must receive a new battery passport linked to the original passport or passports. The original identity and history should not be overwritten to make the current state look like the original state. See Article 77(7) of the Batteries Regulation.

Design the workflow around immutable events and controlled current state:

  • Correction: update a factual field with the reason, approver and evidence.
  • Rework: record the rework event, affected fields and new quality release.
  • Replacement: create or link the new identity according to the applicable rules and preserve the relationship to the old record.
  • Recall or withdrawal: change availability or status without deleting the historical record.
  • Repurposing or remanufacturing: create the required new passport and link it to the original.
  • Recycling: retain the required history and close the passport only when the applicable rule says it ceases to exist.

The QR code should continue to resolve to the stable identity. The resolver can present the current authorized state while the audit system preserves the version history.

A commissioning checklist for your first 10,000 units

Before scaling beyond a pilot, confirm each item below:

  • The applicable product rule defines whether the passport is model, batch or item-level.
  • The product template has an owner, version and approval status.
  • Every required field has a named source and evidence rule.
  • One system owns identifier allocation; all other systems validate it.
  • Duplicate and collision tests run before issuance.
  • Each QR payload resolves to exactly one intended record.
  • The print data links serial, payload, model revision and job ID.
  • A physical scan test runs at the point of label application.
  • Misprints and unused labels are quarantined and reconciled.
  • Draft, approved, active, withdrawn and recycled states are distinct.
  • Updates create an audit event rather than erasing the prior value.
  • Rework, repurposing and replacement rules are written before the first incident.
  • Access tiers are tested with representative user roles.
  • ERP, PIM, MES or QMS ownership boundaries are documented.
  • The team can export the passport data and the issuance audit trail.

If the answer to any of these is "not yet," the program is not ready for a full-volume print run. Use the DPP readiness check to structure the gap conversation, then compare the required implementation work with the DPP cost guide.

What to look for in a DPP platform or QR code batch generator

The phrase "bulk QR generator" can describe anything from a simple image script to a regulated production workflow. Compare platforms on the controls around the generator, not only on how fast they create PNG files.

Ask vendors to demonstrate:

  • Template reuse without accidental sharing of item-specific data.
  • A documented identifier model and collision handling.
  • Batch import with row-level errors and repeatable reruns.
  • Resolver monitoring and scan-level verification.
  • Print-job reconciliation and label quarantine.
  • Role-based access and approval workflows.
  • Version history, audit exports and status transitions.
  • Integrations or APIs that match your source systems.
  • A clear data-export and business-continuity policy.
  • A practical pilot path before a full catalogue rollout.

The DPPAutomate platform page, API documentation and free sign-up are verified DPPAutomate routes for evaluating the broader platform and technical starting points. The right choice depends on your product scope, data maturity, manufacturing process and required identifier level.

Conclusion

Thousands of DPPs are manageable when the work is divided correctly: define the model once, allocate one identity per required product instance, import the variable data, generate a resolver payload, print and apply the matching QR code, validate every handoff and preserve the lifecycle history. The QR image is the visible part of the system, but identity governance and production reconciliation are what make the result trustworthy.

For batteries, prepare now for the 18 February 2027 obligation. Build the item-level process around Article 77, verify the QR and label requirements under Article 13, and test the complete path from source data to physical scan. For every other product category, follow the applicable delegated act rather than assuming that all DPPs require the same granularity.

Ready to map your first serialized DPP pilot? Start with the DPP readiness check, review the integration options, or create an account.

Continue through the cluster

If granularity is not yet settled, start with whether you need a separate DPP for every product. Battery teams should also review the QR-code obligation, identifier hierarchy, and model-to-item data architecture.

FAQ

Common questions,
answered.

Quick answers to what readers ask most about this topic.

Talk to a compliance expert
Do I need a different QR code for every product?+

You need a different QR code for every product instance when the applicable requirement is item-level and the QR code is linked to that instance's unique identifier. For batteries covered by Article 77 of Regulation (EU) 2023/1542, the battery passport is accessible through a QR code linked to a unique identifier attributed to the battery. A model-level or batch-level rule can have a different implementation, so confirm the applicable delegated act before generalizing the battery workflow to another product category.

Can I reuse one DPP template for thousands of products?+

Yes. Reuse the approved model template, common data, validation rules, access policy and layout. Create or import the variable item data and the unique identity separately. Template reuse saves authoring work; it does not make every physical item share the same passport identity.

Is a QR code the same thing as a Digital Product Passport?+

No. The QR code is a data carrier. It should provide a stable path to the passport or its authorized resources. The passport is the structured, lifecycle data behind that path, and it must remain accurate, complete and up to date under the applicable rules.

What is the safest way to generate serialized QR codes in bulk?+

Use a controlled pipeline that imports or allocates identifiers, validates uniqueness, generates one resolver payload per item, renders the code with human-readable identity, reconciles the print job and performs a physical scan check at application. Keep rejected, duplicate and unused labels out of circulation and retain the issuance log.

Do all Digital Product Passports have to be item-level?+

No. Regulation (EU) 2024/1781 allows the applicable delegated act to specify model, batch or item level. Batteries have a specific individual-battery requirement for relevant categories from 18 February 2027. Other product categories may follow different levels and data-carrier rules.

What happens if a battery is repurposed or remanufactured?+

The Batteries Regulation requires a new battery passport linked to the original passport or passports when a battery is prepared for re-use, prepared for repurposing, repurposed or remanufactured. The implementation should preserve the original identity and history, create the required new record, update the lifecycle status and keep the relationship auditable.

Should I start with a full ERP integration?+

Not necessarily. A controlled pilot using a small model and serial range can expose identity, data and print-association problems before you build every integration. Once the template, identifier policy and scan workflow are proven, move to scheduled or event-driven exchanges where the operational value justifies the complexity. Use the ERP and PIM integration guide to map the source-system questions.

Share this articleLinkedInX