Sunrise 2027 in the EU
Europe differs from the North American picture in ways that change what you have to decide. A different familiar symbol, a different GS1 organisation in every market, twenty-four official languages, and a set of regulations described as 2D barcode mandates far more often than any of them is one.
Most material on this transition is American, so it talks about the UPC. In Europe the symbol on the pack is usually EAN-13 carrying a thirteen-digit GTIN, where a North American pack more often carries UPC-A and a twelve-digit GTIN. GS1 treats both as globally accepted, while noting that an individual retailer's buying guide may accept only one, which is a question for the retailer rather than a property of the number.
That changes nothing about the shape of the transition. GS1's implementation guideline for 2D at retail describes a voluntary transition and states the initial goal is for retail point-of-sale scanning to be globally capable of reading and processing the GTIN from both linear and 2D barcodes by the end of 2027. It is a capability goal aimed at checkouts, not a rule aimed at brands. The same guideline says linear barcodes will not go away and will coexist with 2D barcodes for as long as there are uses for them, and that a product carrying a retail 2D barcode will need a linear barcode alongside it until point-of-sale scanning is broadly capable. GS1 expects brands to be able to drop to 2D only once adoption is pervasive, which is a later question than 2027. Your EAN-13 is not being retired.
GS1 is federated, operating through national member organisations that are separate, locally governed bodies. GS1 UK describes itself as one of 120 local GS1 membership organisations across 150 countries, and GS1 in Europe describes itself as a regional platform covering 49 countries. For a company selling into several EU markets, the instruction to go and ask GS1 resolves to a different institution in each one.
Identifiers do not need re-licensing country by country. GS1 US puts it plainly: UPC and EAN numbers can be used internationally without registering products with more than one code. You license a prefix once, from the member organisation for the country your company sits in.
Guidance, member services, pilots, data pools and fee schedules belong to each member organisation. A programme name or a price that reached you through a German, French or American source is a question for the organisation in your market, not a fact about it. And a solution provider directory listing is a commercial arrangement, not an endorsement or certification.
The European Union has 24 official languages, and the language of a label is not decided centrally. Under Article 15 of Regulation (EU) No 1169/2011, mandatory food information must appear in a language easily understood by consumers in the member state where the food is marketed, and a member state may, within its own territory, stipulate that the particulars be given in one or more of the official languages of the Union. Nothing in that prevents a label carrying several languages at once.
The pattern repeats outside food. In the Cosmetic Products Regulation, the language of the specified labelling information is determined by the law of the member state where the product is made available to the end user. The EU sets the floor and the member states set the specifics, so there is no single list of languages to hand a packaging team.
On the pack, multi-market language handling is an old problem with known answers. The scanned destination is where it becomes new. One GTIN, one code printed once, and a reader who could be standing in any of 27 markets. A resolver serving a single market can be genuinely simple. One serving the whole Union is not, and a destination built to an international template is exactly where that gets left out.
One boundary is worth naming. What the law requires of a label does not automatically transfer to a web page, and whether a destination is functioning as labelling or as marketing decides which rules bear on it at all. That distinction, and the mechanics of serving more than one language from a single code, are treated on the bilingual packaging page.
If you have solved this for Canada, you have most of the machinery. The Canadian two-language problem is the simple version of this one: two languages, one federal framework, a well-understood set of expectations. The European version keeps the mechanics and multiplies the inputs, so what is missing is a market-by-market answer about which languages your destination owes to whom.
This is where European 2D barcode marketing makes its largest claims. The distinction that does the work is between a framework that will set requirements later, product group by product group, and an instrument that requires something now of a named product group.
| Instrument | What it is | Where it stands |
|---|---|---|
| Ecodesign for Sustainable Products Regulation (EU) 2024/1781 | A framework. Sets requirements, including the Digital Product Passport, through delegated acts. | In force since 18 July 2024. The Commission states there is no general obligation for a product to have a passport. |
| Batteries Regulation (EU) 2023/1542 | A standalone instrument. The obligation comes from the Batteries Regulation, not an ESPR delegated act, though the passport uses the common DPP technical system set up under ESPR. | The Commission timeline gives 18 February 2027 for certain batteries. |
| Wine labelling, Regulation (EU) 2021/2117 | Permits ingredients and the full nutrition declaration to be given by electronic means. | Applies to products produced from 8 December 2023. Stock produced and labelled before then may be sold until exhausted. |
| Tobacco traceability, Directive 2014/40/EU with Regulation (EU) 2018/574 | A supply chain identifier on unit packets, applied by manufacturers and importers. | Operational for cigarettes and roll-your-own since 20 May 2019, extended to other tobacco products on 20 May 2024. |
This is the most overstated claim in the industry, and the correction is not a quibble. The Ecodesign for Sustainable Products Regulation has been in force since 18 July 2024, but it is a framework and does not itself impose product requirements. Those arrive through product-specific delegated acts, and the Commission's own guidance states that under the Ecodesign Regulation there is no general obligation for a product to have a Digital Product Passport. Anyone telling you that your products must have one today, as a blanket statement, is describing something that does not exist yet.
What exists is a schedule of intentions. The first working plan was adopted in April 2025 and names the priority groups: iron and steel, aluminium, textiles with a focus on apparel, furniture, tyres and mattresses. The Commission's indicative timing puts iron and steel around 2026, textiles, tyres and aluminium around 2027, furniture around 2028 and mattresses around 2029. Electronics and ICT products have no dedicated delegated act in this plan. They are picked up through two horizontal measures instead, on repairability around 2027 and on recycled content and recyclability of electrical and electronic equipment around 2029. Those are indicative, they have moved before, and a transition period follows each act before obligations bite.
The data carrier for a passport is specified in the delegated act for each product group rather than fixed in advance, so what symbol carries it has a per-product answer that is mostly unwritten. The supporting EU registry became operational in July 2026, which is infrastructure arriving ahead of the obligations it will serve. The accurate sentence today is that your product group either has a delegated act or it does not, and most do not.
Battery passport obligations arrive under the Batteries Regulation, not under ESPR, and vendor material merges the two constantly. The Commission's timeline gives 18 February 2027 for a passport becoming mandatory for certain batteries, including electric vehicle batteries, light means of transport batteries such as e-bikes, and industrial batteries with a capacity greater than 2 kWh. If you do not make those, it is not your deadline.
EU wine labelling is the clearest real example of European law meeting a scannable code, and it is usually stated loosely. Wine and aromatised wine products produced from 8 December 2023 must carry an ingredient list and a nutrition declaration. Operators may give the ingredient list and the full nutrition declaration by electronic means such as a QR code, while allergenic substances and the energy value stay on the physical label. Wine produced before that date was exempted until stocks were exhausted. Note the verb: the electronic route is permitted, not required.
The attached condition is what catches platforms out. Where the information is given by electronic means, it must not be presented alongside information intended for sales or marketing purposes, and no user data may be collected or tracked. That is the clearest place in this subject where the default behaviour of a typical QR platform is a direct problem rather than a preference, because scan analytics are on by default. The useful question for a wine producer is not whether a vendor supports e-labels, but what it logs and whether logging can be switched off for one line.
Tobacco traceability is real, mandatory and frequently misdescribed. It comes from Article 15 of the Tobacco Products Directive, with the technical detail in Implementing Regulation (EU) 2018/574. Unit packets carry a unique identifier, manufacturers and importers are responsible for applying and verifying it, identifiers are issued by an ID issuer appointed by each member state, and economic operators record and transmit product movements through the supply chain. It became operational for cigarettes and roll-your-own tobacco on 20 May 2019 and extended to other tobacco products on 20 May 2024.
Its audience is enforcement and the trade rather than a shopper. And although the permitted carriers include a Data Matrix, a QR code and a DotCode, a QR code being permitted there does not make that marking consumer-facing or a GS1 Digital Link. The ID issuer per member state is another instance of one obligation administered separately in each country.
Packaging teams usually ask about the Packaging and Packaging Waste Regulation next. Per the Commission it has been in force since February 2025 and applies from August 2026, and its labelling provisions depend on implementing acts and phase in over time. Article 12(1) sets a harmonised material-composition label from 12 August 2028, or 24 months after the relevant implementing act enters into force, whichever is later. That act had not been adopted when this page was reviewed, so 2028 is a floor rather than a fixed date. If someone quotes you a firmer one, ask which implementing act they are counting from.
Across all of them: none makes Sunrise 2027 a mandate, and adopting a 2D barcode does not by itself discharge any of them. Whether one symbol can serve two purposes is product specific. A tobacco unique identifier is a different mark with a different audience, while a wine e-label can in principle share a code with a retail Digital Link if the destination meets the no-marketing and no-tracking conditions. Mostly these are separate obligations competing for space on the same pack, which is an artwork and sequencing question rather than a compliance equivalence. Sequencing is covered on the migration guide.
There is no product you can buy that makes you compliant. The GDPR does provide for certification, under Article 42, against approved criteria and issued by an accredited body or a competent supervisory authority. But Article 42 is explicit that a certification does not reduce the responsibility of the controller or the processor for compliance with the Regulation. A vendor describing a platform as GDPR compliant is using shorthand for something narrower. Ask any vendor, including this one, which article they mean and what they have actually been assessed against.
Whether your scan data is personal data depends on what you collect. Online identifiers and IP addresses are the usual trigger, and the Court of Justice held in Breyer that a dynamic IP address can be personal data in the hands of an operator with the legal means to identify the user. Separately, the ePrivacy rules bear on the device rather than the data: Article 5(3) of Directive 2002/58/EC requires consent for storing information on, or gaining access to information already stored in, a user's terminal equipment, with narrow exemptions for carrying out a transmission, and for storage or access that is strictly necessary to provide a service the user explicitly requested. Strictly necessary is read narrowly and does not cover analytics.
Decide what the destination needs to record before asking who can store it. Ask any vendor what is logged by default, whether that can be switched off per product line, and what reaches a third party. Then take the compliance answer from your own data protection officer or advisor, who is the only party that can give you one.
These assume a relationship spanning more than one country, which is where European readiness conversations go wrong. The general questions about scanner fleets, point-of-sale software and artwork approval are on the Canada readiness page rather than repeated here.
Expect answers to differ by country even inside one retail group.
An honest reference should say where its edges are.
European delegated and implementing acts are the least stable material on this page. Indicative timings in the ecodesign working plan have already shifted, and scopes change between draft and adoption. Every date above reflects what the European Commission or the instrument itself published at the time of review, and the current version is the one on their site.
Whether an obligation catches your product depends on the product group, the activity you carry out and sometimes the member state, and several instruments above apply only to named categories. Nothing here is legal advice, and specific obligations should be confirmed with the relevant authority or an advisor who knows your markets. Language obligations are described as a pattern rather than as 27 national answers, because the national answers are the part a general page gets wrong. Retailer readiness by country we cannot verify at all.
Nothing here implies affiliation with, endorsement by, or certification from GS1, any GS1 member organisation, or any European institution. QRbolt sells a platform for GS1 Digital Link QR codes and so has a commercial interest in this transition, stated plainly because it is the reason to hold this page to not guessing. Related reading: the glossary for the terminology, and the overview for what Sunrise 2027 is and is not.