ferropas.eu

what should I do if the QR code on my steel is damaged

A damaged QR code restores the data carrier, not the passport

A damaged or unreadable QR code on steel is first and foremost a problem with the data carrier, not with the passport itself. The product passport is the dataset that exists somewhere online; the QR code is only the key that gives someone access to it. If the key is lost or unreadable, that does not mean the data has disappeared — the passport continues to exist at the place where it is hosted, only the route to it via this specific piece of steel is closed off. The practical task is therefore: to get a new or replacement carrier on the product that points to the same dataset again.

Who this applies to and what falls outside it

This applies to anyone who physically possesses or resells steel with a QR code: steel traders, metal processors, construction companies. This specifically concerns damage to the carrier itself — a scratched, soiled, weathered or cut-off QR code on a beam, plate or coil. It is not about whether the underlying data is correct or up to date; that is a separate issue concerning the contents of the passport, not the readability of the code. It is also not about whether a product is subject to the passport obligation or not — that question comes earlier in the process and is addressed on the page about whether the product passport applies to this steel. Anyone who still needs to work out what a product passport entails before the question about a damaged code becomes relevant will find that background on the explanation of what a digital product passport is.

When this becomes relevant: no fixed date yet

There is no fixed date yet for when the QR code on steel becomes mandatory, and therefore also not for when the question about a damaged code becomes legally relevant. The ESPR itself (Regulation (EU) 2024/1781) is the framework; the concrete obligations for iron and steel come only with a delegated act that still needs to be published. According to the European Commission's work plan, that first delegated act is expected in 2026, with obligations coming into force at a later point. As long as that act has not been published, there is no legal obligation for a QR code on steel, and therefore no official procedure for what to do in case of damage. As soon as the date is fixed, it will be stated here. Until then, this is mainly a question about getting ahead of the game, not a question about needing a solution now — anyone who still wants to prepare can already look at what is possible now while the rules are not yet definitive on the page about what can already be done while the rules are not yet final.

What to do about a damaged code, in practice

The first thing that matters is to check whether the code still scans at all, even if it looks bad: many QR codes are designed with error correction and remain readable even with minor damage such as scratches or a small amount of dirt. If scanning no longer works, the next step is to find out whether the underlying dataset can still be found via another route — for example via the unique identification code of the product, if that is separately noted on accompanying documentation, a delivery note or in an internal system. Article 12 of the ESPR (Regulation (EU) 2024/1781) stipulates that each passport receives a unique identification code; that code is in practice the second key if the first one (the QR code) no longer works. If that route is also lost, the only option remaining is to contact the party that created or hosted the passport — at ferropas.eu that is the place where the passport is kept for ten years, and a new data carrier can then be created and attached to the product again. For anyone who prefers to test such situations in advance rather than only when actual damage occurs, there is the option to set up a passport and carrier beforehand, before the obligation comes into force, as described on the page about testing a passport before the deadline. For companies with staff who work with this steel daily, it is also worthwhile to determine in advance who within the company recognizes a damaged code and knows where to report it — this relates to the topic of training staff on working with the product passport.

The basis in Articles 11, 16 and 17

The reasoning for this follows from the way the ESPR (Regulation (EU) 2024/1781) distinguishes between the data carrier and the passport. Article 11 describes the technical design and operation of the digital product passport, and assumes a passport that is accessible online via a carrier — the carrier is therefore an access tool, not a storage facility. Article 16 addresses labels and the requirements for them, and Article 17 covers counterfeit labels — provisions that become relevant once there is discussion about the authenticity or recognizability of a label or code on a product. Article 12 regulates the unique identification code, which serves as a second identification tool alongside the physical carrier. None of these articles describes a concrete procedure for "damaged QR code on steel" specifically, because the delegated act for iron and steel has not yet been published; what is now established is the underlying principle that the passport and carrier are separate, and that a second identification tool is provided.

Anyone who encounters this type of question during an inspection is well advised to look at what a competent authority asks in practice, described on the page on what a competent authority asks during an inspection of steel, and otherwise to remember the scenario simply: if the code is damaged, try to scan first, then ascertain the unique identification code, and if that fails, contact the party hosting the passport.

What you must concretely do

What is expected of you

The carrier must keep the passport reliably accessible

Article 11 of the ESPR (Regulation (EU) 2024/1781) sets out requirements for the technical design and operation of the digital product passport, including the data carrier that provides access to the data. A QR code on a steel product or the associated packaging, label or delivery document must be able to continue to provide that access throughout the entire period in which the product is in circulation. For a company with 10 to 100 employees, this means above all a practical concern: steel passes through hands that are not gentle — it is stacked, sawn, welded, stored outdoors, blasted. A sticker or burnt-in code that becomes illegible after a few months does not meet the principle that the data carrier works during the period of use. This is not a matter of "apply a new sticker as quickly as possible", but of choosing in advance a carrier and placement that can withstand the expected use of that specific semi-finished product.

The unique identification code remains the key, even without scanning

Article 12 of the ESPR regulates the unique identification code that is linked to the product and the passport. This code is in principle not exclusively dependent on the QR image itself: the code is information that can also be traced in other ways, for example via batch or order details, a delivery note or the supplier's records. For the practice of a metal processor or steel trader, this means it is sensible not to rely solely on the readability of the code on the product, but also to keep a trail in your own order administration by which a batch or lot of steel remains linked to the correct passport, even when the code on the material itself is no longer readable.

Labelling and recognizability of the passport

Article 16 of the ESPR deals with labels and Article 17 with counterfeit labels. These articles are particularly relevant when, in addition to the QR code, a physical label bearing product information is applied. In practical terms, this means that a company cannot simply replace a damaged label with its own homemade label: the origin and accuracy of what appears on the label remains important, and a replacement label that does not align with what was originally issued can cause confusion or give an incorrect impression about the product's status.

Where things go wrong in practice

The code is applied in a location that cannot withstand the process. A QR sticker on a strip of steel that will later be shot-blasted, galvanized, or heat-treated often does not survive that process. If the placement of the code is not coordinated with the further processing that the semi-finished product must still undergo at the customer's facility, damage is more a matter of when than if.

There is no alternative access route if the code becomes unreadable. When only the physical QR code provides access and no link is established between order line, batch number, and passport, an employee with a damaged code is left empty-handed: there is then no other way to determine which passport belongs to which batch.

During internal processing, the code is lost without anyone noticing. Steel that is cut, remelted into smaller parts, or otherwise processed sometimes loses the carrier without this being consciously recorded. If afterwards no one checks whether the new units can still be traced back to the original passport, a gap in the chain emerges that only comes to light during a later inspection.

A damaged code is replaced with a self-made QR, without it being clear whether it points to the correct, current data. Improvising with your own sticker or your own code seems like a quick solution, but if that code does not correctly redirect to the existing passport, there is a risk that a new, incorrect label is effectively created — with all the sensitivity that Article 17 attaches to counterfeit labels.

There is no agreement with the supplier regarding a replacement carrier. Some companies receive steel with a QR code from the manufacturer or importer, but have no idea who to contact if that code is already damaged upon receipt. The result is delay, and delay upon receipt is harder to remedy than inspection upon dispatch.

What you can document

  • An internal instruction on where and how the QR carrier is applied to different types of steel products, tailored to the processing that the material must still undergo.
  • A record that links batch or order number to the passport, so that a batch of steel remains traceable even without a readable code.
  • A fixed procedure for the moment of receipt: check whether the supplied code is readable, and what to do if it is not, including who should be notified.
  • Agreements with suppliers regarding a replacement or supplementary carrier in case of damage, documented in the purchasing terms or in a separate annex to the contract.
  • An overview of who within the company is responsible for managing passport data, so that a damaged code does not remain unaddressed until someone happens to come across it.

For companies that do not yet have these agreements in writing, it is worthwhile first to look at how do I approach the steel product passport step by step, in which the order of these choices is explained. It is also useful to determine what a supervisory authority asks for during an inspection of steel, because the documentation of traceability is often precisely the aspect that is scrutinized. Companies that already wish to experience how a QR carrier performs in practice may also consider whether already having a test version of the product passport made offers opportunities to test carrier placement and material choice before this is applied on a larger scale.

This is not legal advice. This page provides general information about the legislation that this platform deals with. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.

Written with AI based on the sources above, verified by a human on 2026-09-05. Is anything incorrect? Let us know — corrections are given priority.