ISO/IEC 15459: Data Carrier Standards for ESPR Digital Product Passports
ISO/IEC 15459 is the international standard for unique identifiers used on data carriers — including the QR codes and RFID tags that carry Digital Product Passport links under ESPR Regulation (EU) 2024/1781. Understanding ISO/IEC 15459 is essential for manufacturers designing DPP data carrier systems that will pass EU customs verification from 19 July 2026.
What Is ISO/IEC 15459?
ISO/IEC 15459 is a multi-part international standard that defines the structure and management of unique identifiers for items, consignments, and transport units in supply chains. The standard ensures that every physical item can be uniquely identified globally without ambiguity — a fundamental requirement for the Digital Product Passport system, which must link a specific data record to a specific physical product instance.
The standard is maintained jointly by ISO (International Organization for Standardization) and IEC (International Electrotechnical Commission). It is implemented by issuing agencies — organisations authorised to assign identifier prefixes to manufacturers. GS1 is the largest issuing agency under ISO/IEC 15459, and GS1's GTIN system is the most widely used unique identifier for ESPR DPP implementation.
ISO/IEC 15459 Parts Relevant to ESPR
| Part | Title | ESPR Relevance |
|---|---|---|
| ISO/IEC 15459-1 | Unique identifiers for transport units | Relevant for DPP data at shipment level |
| ISO/IEC 15459-2 | Registration procedures for issuing agencies | Defines how GS1 and other agencies assign prefixes |
| ISO/IEC 15459-3 | Common rules for unique identifiers | Core uniqueness rules for DPP identifiers |
| ISO/IEC 15459-4 | Individual products and product packages | Most relevant — defines unique IDs for individual products |
| ISO/IEC 15459-6 | Groupings | Relevant for batch/lot level DPP data |
How ISO/IEC 15459 Applies to ESPR DPP Implementation
Under ESPR, every Digital Product Passport must have a unique product passport identifier — a code that uniquely identifies the specific DPP record. This identifier must be encoded in the data carrier (QR code or NFC tag) on the product. ISO/IEC 15459 provides the framework for constructing this identifier in a way that is globally unique and resolvable by any compliant system.
The most common implementation path uses GS1's GTIN (Global Trade Item Number) as the primary identifier, combined with a serial number for instance-level uniqueness. This combination — GTIN + serial number — creates a globally unique identifier for each individual product unit, which is then encoded in a GS1 Digital Link URL and printed as a QR code on the product.
Data Carrier Types Under ISO/IEC 15459
| Carrier Type | Standard | Capacity | ESPR Suitability |
|---|---|---|---|
| QR Code (Model 2) | ISO/IEC 18004 | Up to 7,089 numeric / 4,296 alphanumeric | High — preferred for consumer products |
| Data Matrix | ISO/IEC 16022 | Up to 3,116 numeric / 2,335 alphanumeric | High — preferred for small products |
| NFC Tag (Type 2) | ISO/IEC 14443 | Variable — typically 144 bytes to 8 KB | Medium — suitable for high-value products |
| RFID (UHF) | ISO/IEC 18000-63 | Variable — typically 96 bits EPC | Medium — suitable for logistics/supply chain |
| 1D Barcode (EAN-13) | ISO/IEC 15420 | 13 digits only | Low — insufficient for DPP URL encoding |
Unique Product Passport Identifier Requirements
ESPR Annex III, Section 1 specifies that the Digital Product Passport must include a "unique product passport identifier" that complies with the requirements of the applicable delegated act. The identifier must be unique at the level specified in the delegated act — which may be at the product model level, the batch level, or the individual unit level depending on the product category.
For batteries, EU Regulation 2023/1542 (the Battery Regulation) requires a unique identifier at the individual battery level — meaning each battery unit must have its own unique DPP identifier. For most other product categories, the current expectation is that the identifier will be required at the model or batch level, with individual unit serialisation becoming mandatory for higher-risk products.
Issuing Agencies Under ISO/IEC 15459
ISO/IEC 15459-2 defines the registration procedures for issuing agencies — organisations authorised to assign unique identifier prefixes to manufacturers. The registered issuing agencies include GS1 (the largest, covering most consumer products), DUNS (Dun & Bradstreet, used in B2B contexts), CAGE (NATO Commercial and Government Entity code, used in defence), and several industry-specific agencies. For ESPR compliance, GS1 is the recommended issuing agency because its GTIN system is directly supported by GS1 Digital Link, which is the preferred data carrier standard for the EU DPP Registry.
ISO/IEC 15459: Unique Identification for ESPR DPP
ISO/IEC 15459 is the international standard for unique identification of transport units, individual products, and groupings of products. It defines the structure of unique identifiers that can be used in supply chain management and, in the context of ESPR, in the Digital Product Passport. ISO/IEC 15459 identifiers are used alongside GS1 identifiers (GTINs) to provide unique identification at the individual product level — not just the product model level.
The distinction between product model identification and individual product identification is important for ESPR. The GTIN identifies the product model — all units of the same model have the same GTIN. The serial number (encoded in the GS1 Digital Link URL as /21/[serial]) identifies the individual product unit. For products with dynamic DPP data (such as batteries with State of Health data), the individual product identifier is essential — the DPP data for one battery unit will be different from the DPP data for another unit of the same model.
ISO/IEC 15459 Identifier Structure
| Identifier Type | Structure | Use Case |
|---|---|---|
| GS1 GTIN | 14-digit number (GS1 company prefix + product reference + check digit) | Product model identification |
| GS1 SSCC | 18-digit number (extension digit + GS1 company prefix + serial reference + check digit) | Logistics unit identification |
| GS1 SGTIN | GTIN + serial number | Individual product unit identification |
| ISO/IEC 15459 Part 4 | Issuing agency code + unique identifier | Non-GS1 unique identification |
Data Carrier Types for ISO/IEC 15459 Identifiers
ISO/IEC 15459 identifiers can be encoded in various data carriers: QR codes (ISO/IEC 18004), Data Matrix codes (ISO/IEC 16022), GS1-128 barcodes, RFID tags (ISO/IEC 15693, ISO/IEC 14443), and NFC tags. For ESPR DPP purposes, the GS1 Digital Link QR code is the mandated data carrier. However, manufacturers may also use additional data carriers (such as NFC tags or RFID tags) for specific use cases — for example, NFC tags for products where QR code scanning is impractical.
ISO/IEC 15459 Series: The Complete Standard Set
ISO/IEC 15459 is a multi-part standard series that defines the requirements for unique identification of transport units, supply chain management, and individual items. The series consists of eight parts: Part 1 (Unique identification for transport units), Part 2 (Registration procedures), Part 3 (Common rules for unique identifiers), Part 4 (Individual products and product packages), Part 5 (Returnable transport items), Part 6 (Product groupings), Part 7 (Unique identification for returnable transport items), and Part 8 (Grouping of transport units). For ESPR Digital Product Passport compliance, the most relevant parts are Part 4 (individual products) and Part 3 (common rules). These parts define the structure of unique identifiers that can be encoded in data carriers such as QR codes, barcodes, and RFID tags.
Issuing Agency Codes and ESPR Product Identification
ISO/IEC 15459 Part 2 defines the registration procedures for issuing agencies — organisations authorised to issue unique identifiers under the standard. GS1 is the largest issuing agency and its GTIN system is the most widely used product identification scheme in the EU. Other issuing agencies include DUNS (Dun & Bradstreet), CAGE (Commercial and Government Entity Code), and various national identification systems. For ESPR compliance, manufacturers can use any ISO/IEC 15459-compliant identifier, but GS1 GTINs are strongly recommended because they are already embedded in the supply chain infrastructure of most EU retailers and distributors. Manufacturers that do not currently have GS1 membership should apply for a GS1 Company Prefix as the first step in their ESPR DPP implementation.
Data Carrier Selection Under ISO/IEC 15459
ISO/IEC 15459 is carrier-agnostic — it defines the identifier structure but does not mandate a specific data carrier technology. The ESPR regulation and its delegated acts will specify which data carriers are acceptable for each product category. The options include: QR codes (ISO/IEC 18004), Data Matrix codes (ISO/IEC 16022), linear barcodes (GS1-128, EAN-13), RFID tags (ISO/IEC 18000 series), and NFC tags (ISO/IEC 14443). For consumer products, QR codes are the default choice because they can be scanned by any smartphone without additional hardware. For industrial products and components, Data Matrix codes are preferred because they can be marked directly on metal surfaces using laser engraving or dot-peen marking. RFID and NFC are used in applications where hands-free scanning or anti-counterfeiting features are required.
Register Your Digital Product Passport
The EU DPP Registry goes live on 19 July 2026. Register now at Africa's first ESPR-compliant DPP registry.
Register Your Digital Product Passport →ISO/IEC 15459 in the Context of ESPR
ISO/IEC 15459 is a family of standards that defines unique identifiers for transport units, individual products, and groupings of products. The standard is divided into several parts: Part 1 covers unique identifiers for transport units; Part 2 covers registration procedures; Part 3 covers common rules for unique identifiers; Part 4 covers individual products and product packages; Part 5 covers returnable transport items; Part 6 covers groupings; and Part 8 covers groupings of transport units. For ESPR DPP purposes, Part 4 (individual products) is the most relevant.
ISO/IEC 15459-4 defines the structure of unique identifiers for individual products and product packages. The standard allows manufacturers to use their own unique identifier scheme, provided that the scheme meets the requirements for uniqueness, persistence, and machine-readability. The GS1 GTIN (Global Trade Item Number) is one of the most widely used identifier schemes that complies with ISO/IEC 15459-4. Other compliant schemes include the DUNS number (for business entities), the ISNI (International Standard Name Identifier), and manufacturer-specific schemes registered with the ISO/IEC 15459 registration authority.
For ESPR compliance, manufacturers must use a unique identifier that complies with ISO/IEC 15459 or an equivalent standard recognised by the EU. The identifier must be encoded in a data carrier (QR code, NFC chip, or other approved technology) and must be linked to the DPP data in the registry. The identifier must remain associated with the product throughout its lifecycle, including after the product has been repaired, refurbished, or transferred to a new owner.
Frequently Asked Questions
GS1 standards (GTIN, GLN, SSCC) are specific identifier schemes that comply with ISO/IEC 15459. ISO/IEC 15459 is the overarching standard that defines the requirements for unique identifiers, while GS1 is one of the organisations that issues identifiers compliant with this standard. Other organisations (such as DUNS for business entities) also issue ISO/IEC 15459-compliant identifiers.
The ESPR implementing regulations will specify the identifier standards that must be used for DPPs. ISO/IEC 15459 is the most likely reference standard, given its widespread use in supply chain management. Manufacturers who already use GS1 GTINs for their products will be well-positioned for compliance.
Manufacturers may be able to use proprietary identifier schemes if they comply with ISO/IEC 15459 requirements for uniqueness and persistence. However, using a widely recognised scheme (such as GS1 GTIN) is recommended because it ensures interoperability with existing supply chain systems and reduces the risk of identifier conflicts.
The EU product database (EPREL) uses its own identifier scheme for products registered in the database. The ESPR implementing regulations will need to specify how ESPR DPP identifiers relate to EPREL identifiers. It is likely that the DPP will include both the ESPR DPP identifier (compliant with ISO/IEC 15459) and the EPREL registration number.
The ISO/IEC 15459 identifier for a product should remain the same after repair or refurbishment — it identifies the physical product, not its condition. The DPP data associated with the identifier should be updated to reflect the repair or refurbishment. If a product is disassembled and its components are used in other products, new identifiers may need to be issued for the resulting products.