Most manufacturers book the digital product passport as a pure cost: one more EU obligation, one more system, one more QR code on the label. Yet the DPP has a by-product that marketers have long paid market research firms good money for — and often didn't get even then. Through the passport's QR code, you can finally see what customers do with your product after it leaves the store: where they scan it, when, how often, and exactly what they look at. This isn't theory — it's real usage data, generated automatically with every single scan.
The manufacturer's blind spot: after the sale, the product vanishes from the radar
Think about what you know today about a product once it has left your warehouse. From your wholesaler's order data you can see which country the pallet went to — but not where the end user actually lives. From webshop analytics you can see who viewed the product page — but not whether the item they bought is still in use two years later. Warranty claims tell you something — but only when something breaks.
Traditional channels, in other words, measure only up to the moment of sale. What happens afterwards — the product's real life — is a black box for the manufacturer. That is exactly the black box the DPP opens: under the ESPR regulation, the product passport must be accessible via a data carrier placed on the product, on its packaging or in its accompanying documentation — in practice most often a QR code or GS1 Digital Link; which of the three is required is defined by the delegated act for each product group. In many categories the data carrier will sit on the product itself, so the product carries a connection point back to you for its entire life. Every time someone scans it — in the store, at home, during a second-hand sale, at a repair shop — a data point is created. For free.
But do customers actually scan? The numbers say yes
The first objection is always the same: "Nobody's going to scan it anyway." Reality says otherwise. British fashion brand Nobody's Child is one of the most frequently cited early examples: it rolled out digital product passports across 112 styles and has already recorded more than 20,000 customer QR scans on them — and according to reports, some shoppers walked into the store specifically to try the QR code before buying. The programme earned the brand six industry awards, and following the pilots' success it began extending the rollout across its full range.
And what are scanners looking for? According to a retail survey, around 40% of consumers are willing to scan a QR code specifically for manufacturing details — origin, materials, production process. That means two things at once:
- There is an audience. Scanning isn't the hobby of a few enthusiasts but mass behaviour — especially among younger, more conscious shopper segments.
- The scanner is your most valuable customer. Anyone who takes the trouble to scan the code is an engaged, curious buyer likely to recommend you — exactly the person marketing otherwise spends serious money trying to identify.
From here, the question is not whether the data will exist, but where it lands: with you, on a structured dashboard — or nowhere, because the QR code points to a static PDF with no measurement at all.
Use case 1: a demand map — where does your product actually live?
The geographic distribution of scans is the simplest and perhaps most valuable signal. Distributor invoices tell you that 60% of your product went "to Germany". Scan data also tells you that a quarter of the scans come from Austria and the Czech Republic — meaning your German wholesaler is reselling into markets where you have no presence, no local-language materials and no service partner.
That underpins concrete business decisions:
- Discovering export markets: where there is organic demand, it's worth building direct distribution, local marketing or at least local-language support. (The good news: the passport itself can be multilingual from day one — more on that below.)
- Inventory and assortment planning: the time series reveals seasonality in usage, not just in sales — when the product is taken out, when it's serviced, when it changes hands.
- Channel control: if scans pour in from a country you don't officially ship to, it's either grey imports or an untapped market — either way, you're better off knowing.
Use case 2: the second-hand market and suspicious anomalies
One of the DPP's core purposes is to support the circular economy: when a product is resold, repaired or refurbished, the passport "travels" with it. A side effect is that the second-hand market — until now completely invisible — starts sending signals. If a specific product unit's passport was scanned regularly in Munich for two years and the scans now come from Lisbon, it has most likely changed owners. In aggregate, this shows you which of your models hold their value on the second-hand market — pure gold for pricing and product development.
The same mechanism also works as an alarm system. A few typical anomalies that scan patterns reveal:
| Signal in the scan data | What it may mean | What to do |
|---|---|---|
| The same unique identifier scanned from many distant locations within a short time | Cloned QR code — suspected counterfeiting | Unit-level investigation, preparation of legal steps |
| A wave of scans from a country you don't ship to | Grey imports or unmanaged re-export | Audit of distributor contracts and channels |
| A never-scanned serial number range suddenly becomes active | Warehouse stock hitting the market — possibly stolen goods | Stock reconciliation with your logistics partner |
| A model's scans permanently "move" to another city | Lively second-hand trade | Consider a refurbished programme or official buy-back |
The anti-counterfeiting angle deserves an article of its own — the point here is that without a unit-level passport with unique identifiers (rather than a model-level, shared QR code) these signals blur together. We cover brand protection in detail in our DPP and brand protection article.
Use case 3: content testing — what do they read, and what do they skip?
The passport doesn't just measure at the "scanned / not scanned" level. If your passport is structured into sections — material composition, care, repairability, certificates, recycling — you can also see which sections your customers actually open. It's the world's cheapest focus group:
- If the care instructions are opened most often, it's worth adding a video and richer detail there — and you may even be able to drop the 12-page paper leaflet from the packaging.
- If people study your certificates, your sustainability communication is working — double down on it in your marketing too.
- If nobody opens a section, it's either in the wrong place or badly named — A/B-testable, just like a web page.
The device breakdown (mobile vs. desktop, operating system) then optimises presentation: if 95% of scans come from phones — and they typically do — your passport has to be flawless on mobile, not on the showroom's big screen. That's how mandatory compliance turns into a measurable competitive advantage: your competitor prints the very same QR code on their product too — but won't necessarily learn anything from it.
Privacy done right: aggregated, cookie-free measurement
A fair question: won't this create a GDPR problem? No — if you do it right. The key is that scan analytics watches the product, not the person. It needs no login, no cookie banner, no remarketing pixel and no profiling; aggregated, anonymised measurement is enough: country/city-level geography, device type, timestamp, section viewed.
| Practice | Avoid | The right approach |
|---|---|---|
| Identifying visitors | Storing raw IP addresses, advertising IDs | IP hash (the raw IP address is never stored), used only for deduplication |
| Tracking | Third-party cookies, cross-site tracking | Cookie-free, session-level measurement |
| Geography | Precise geolocation, movement profiles | Country/region-level aggregation |
| Data quality | Counting bots and crawlers | Bot filtering — only genuine human scans count |
| Communication | Hidden data collection | Transparent notice in the passport itself |
Transparency, moreover, is not just a legal minimum but a business interest: surveys show that around 83% of consumers are more willing to share data with a brand that openly explains what the data is used for and how. So a brand that states in a single sentence in the passport that "we compile anonymous, aggregated statistics from scans to improve our products" doesn't just comply — it builds trust. For handling more sensitive data that touches on trade secrets, see our separate article on tiered access.
Do the maths: what would this be worth as market research?
Suppose you sell 50,000 units a year and — conservatively — 5% of buyers scan the passport at least once. That's 2,500 real post-purchase interactions per year, broken down by geography and content, continuously refreshed. A comparable international customer study commissioned from a research firm is a major line item even as a one-off — and it rests on sampling and self-reported questionnaires, not actual behaviour. DPP scan analytics, by contrast, is:
- continuous — a live time series, not a snapshot;
- behaviour-based — measuring what customers actually do, not what they say;
- product-level — broken down by model, even by individual unit;
- and most importantly: its marginal cost is zero, because you have to build the passport anyway.
If you've been planning your passport project purely as a compliance item, this line belongs on the revenue side of the business case. And if you're still at the basics, start with our what is a DPP? overview and the preparation checklist.
How does Veridyn help?
In Veridyn, scan analytics is neither a separately priced module nor a third-party tracking tool — it comes built into every passport:
- Scan analytics dashboard: scan trends over time, country and device breakdowns, with automatic bot filtering — only genuine human scans count, so crawlers don't distort the picture.
- Privacy by default: cookie-free measurement, IP hashing for deduplication (raw IP addresses are never stored), aggregated reports — no profiling, GDPR-compliant.
- QR + GS1 Digital Link: a standards-based data carrier that satisfies ESPR requirements and powers your measurement at the same time.
- Public passport in 24 EU languages: if the scan map reveals a new export market, customers there already read your passport in their own language — no separate translation project needed.
- Developer REST API and webhooks: feed scan data into your own BI system, CRM or alerting workflows.
The best way to see it for yourself: sign up for free, upload a product, print its QR code — and watch live as the first scans land on your dashboard. Prefer to look around first? Click through the live demo, or gauge your starting point with the free DPP readiness test.