must the product passport also work without internet connection
At this point, the ESPR does not provide a clear answer
The ESPR describes the product passport as a digital system that unlocks data via a web portal and a unique identification code, but an explicit requirement that the content must also be readable without an internet connection is not stated in the regulation. Article 10 of the ESPR (Regulation (EU) 2024/1781) sets out the requirements that a digital product passport must meet — such as accessibility, interoperability and the ability to update data — but an offline requirement is not explicitly listed there. The passport is essentially a reference to data that is hosted elsewhere, with the manufacturer or a service provider, and is retrieved via the internet. This is precisely why this question often comes up: a QR code on a steel beam or plate is useless in a place without coverage, and yet this is a realistic scenario in steel trading and construction site practice.
For whom this is relevant, and for whom it is not
This question is particularly relevant for parties who want to consult the passport in locations where there is no or poor internet connection: a construction site in a remote area, a storage warehouse without wifi, a site below ground. For the manufacturer or importer supplying the data, the question is less acute — they operate from an office or production environment with internet connection, and their obligation lies in providing data correctly and completely, not in making it available offline. The subject also does not concern whether the QR code itself works without internet — that code is a physical carrier that is always readable, regardless of connection. It concerns what happens after that code is scanned: whether the underlying data can still be retrieved. That distinction between the carrier and the data is also relevant to the question how the QR code ends up on the steel — the code itself is static, the content it refers to is not necessarily.
No established date yet, so no established requirement yet
There is no date on which this requirement takes effect, because no delegated act has yet been published that concretely specifies this matter for iron and steel. The ESPR itself is the framework regulation; the product-specific details — including possibly requirements for accessibility in situations without connection — still need to be elaborated in a delegated act for this product group. According to the European Commission's work plan for 2025-2030, the first delegated act relevant to iron and steel is expected in 2026, with obligations taking effect thereafter. Until that act is published, it is not clear whether, and if so how, an offline readability requirement will be shaped. What is established is the framework from Article 13 and Article 14 of the ESPR (Regulation (EU) 2024/1781): there will be a central register of product passports and a web portal through which data can be requested — both are basically online services.
What this means in practice
For those already preparing a product passport, the most practical approach is to assume an online-first system and keep the question of offline access separate from the basic design. First, it is about establishing a working link between the physical product and the digital data: this starts with a unique identification code per product and a QR code that consistently refers to it. Subsequently, it is worthwhile to consider how hosting is arranged — a service provider hosting the data can add technology that improves the experience without the ESPR prescribing it, such as a cached or lightly summarized version of the core data that is already provided when scanning, or a page that loads quickly even with a weak connection. This is not a legal obligation, but a design choice that reduces the risk of an unusable QR code on a construction site. For companies considering managing this themselves rather than outsourcing it, it is linking the passport to their own ERP or inventory system a point to note: even then, the underlying dependency on an internet connection to retrieve live data remains, unless a deliberate choice is made for additional offline functionality. As soon as the delegated act for iron and steel is published, that is the moment to check whether a concrete requirement is included after all.
The basis in Articles 10, 13 and 14 of the ESPR
Article 10 of the ESPR (Regulation (EU) 2024/1781) sets out the general requirements that the digital product passport must meet, without mentioning an offline readability requirement. Article 13 of the ESPR (Regulation (EU) 2024/1781) governs the central register in which passports are entered, and Article 14 of the ESPR (Regulation (EU) 2024/1781) governs the web portal through which the data from the passport can be consulted — both articles describe a system that is based on an online connection between scanner and data source. An explicit offline requirement is not found in these articles, and must therefore come from a product-specific delegated act, should one be forthcoming.
Those who wish to prepare for this now would be well advised to get the basic infrastructure in place — unique identification, QR code and hosting — and to continue to follow the question of offline access once the delegated act for iron and steel is published.
What this is based on
- Regulation (EU) 2024/1781 (ESPR), Article 13 (registry of digital product passports)
- Regulation (EU) 2024/1781 (ESPR), Article 14 (web portal for data in the digital product passport)
- Regulation (EU) 2024/1781 (ESPR), Article 10 (requirements for the digital product passport)
The regulation itself can be found on EUR-Lex. We provide references for each statement; you do not have to take our word for it.
What you must concretely do
What is expected of you
The ESPR describes the digital product passport as a system in which data is made available via a data source, retrieved via a unique identification code and a data carrier such as a QR code. Whether the data itself must also be able to be consulted offline is something the text of the regulation itself does not make an explicit statement about in the articles describing the passport and the web portal. What is certain, however, is a number of requirements that relate to the way in which the passport operates technically.
The data must be retrievable via a data source
Article 10 of the ESPR describes the requirements for the digital product passport, including that data must be accessible via a data carrier that refers to a data source. This points to a system that operates on a connection: the QR code itself does not contain data, it only points to where the data is stored. For a metal processor with between 10 and 100 employees, this means in practice that the passport is an online service, not a file stored on the product itself. Those who make agreements about this with a supplier or customer are well advised to establish who manages the data source and how long it will remain accessible — something more can be read about at how long must a product passport remain available.
The register keeps a copy of basic data
Article 13 of the ESPR governs a register of digital product passports at EU level. This register is intended for oversight and contains basic data, not the full passport. For a company placing steel products on the market, this means there are two places where data ends up: the company's own (or outsourced) data source, and the central register. What exactly must be included in that register and who enters it is set out on the page on the register of digital product passports and what you put in it.
The web portal makes data accessible, but does not replace the data source
Article 14 of the ESPR describes a web portal through which data from the digital product passport can be consulted. This portal is an additional access route, not a replacement for the direct link between QR code and data source. For the practice of a trading company, this means that a customer can access the same information in two ways: by scanning the code on the product, or via the portal. Both routes require an active connection to a data source on the internet.
Where things go wrong in practice
A few situations in which the question "does this also work without internet" goes wrong in practice:
A warehouse with poor coverage. Steel is often stored outdoors or in large halls where mobile coverage is inconsistent. A worker on the production floor who wants to consult a passport will then encounter a blank page without it being clear whether that is a problem with the passport or with the network.
Confusion between "the QR code" and "the passport". Some companies think the passport is in the QR code, like a barcode with a product code. That is not the case — the code refers to a data source. Anyone wishing to explore this further will find more explanation at how does the QR code for the product passport get onto my steel.
Assumptions about local storage. A construction company that processes steel for an extended period at a construction site without internet connection sometimes assumes that a PDF or photo of the passport downloaded once is sufficient as proof. Whether that is acceptable as a replacement for the live data source is not something the ESPR text itself makes a statement about.
System that ceases to exist when the company closes. When a manufacturer hosted its own data source and the company shuts down, access to the passport may disappear entirely — with or without internet. That risk is separate from the question of "offline or online", but in practice it is often confused with it. See also what happens to the product passport if a company closes.
Incorrect link with the ERP system. A company that attempts to link the passport to an internal inventory system sometimes runs into the assumption that this link must also work offline because the internal system does. The link to an externally queryable data source is a different layer than internal business operations; more on this at can you link the product passport to an ERP or inventory system.
What you can document
- Agreements with the party hosting or that will host the data source regarding availability and downtime.
- An overview of where in the business process a passport must be consulted without reliable internet connection (for example at a construction site or in a warehouse), so that this risk is known internally.
- Documentation about which identification code belongs to which product or batch, independent of whether it is consulted online or offline — see also how do you give each product a unique identification code and do you register steel per batch or per unit.
- A documented procedure for what happens if a customer or supervisor cannot consult a passport at the time of inspection.
- Technical documentation on the format in which data has been provided, so that in the event of a future requirement regarding offline availability it is clear what is already established — more on this at in what format must data be provided for the product passport.
As soon as the European Commission publishes a delegated act that specifically addresses iron and steel, it may contain a more specific requirement regarding offline availability. Until then, this is a matter on which the framework regulation itself makes no direct statement, and it remains necessary to monitor this page for updates once that clarity is available.
This is not legal advice. This page provides general information about the legislation that this platform deals with. We do not know your situation. If you are in doubt about your own case, consult a lawyer or the competent supervisory authority.
Written with AI based on the sources above, verified by a human on 2026-09-05. Is anything incorrect? Let us know — corrections are given priority.