Traceability

# Traceability Traceability is the ability to identify a product and follow its path through the supply chain: who made it, which batch or unit it is, and who handled it at each step. In product compliance, it makes recalls possible and enforcement targeted, and EU law increasingly requires it as a built-in feature of product design. ## Key facts - EU product law requires most products to bear a type, batch, serial or model number allowing identification. - Each economic operator in the chain must be identifiable to market surveillance authorities on request. - Traceability enables precise recalls: affected batches can be targeted instead of entire product lines. - The General Product Safety Regulation and sector legislation set traceability duties for manufacturers, importers and distributors alike. - Digital traceability is growing: unique identifiers, QR codes and digital product passports extend physical marking into structured data. - One-up-one-down traceability, knowing your supplier and your customer, is the minimum in food, pharmaceuticals and many industrial sectors. - GS1 standards provide the global language for product identification, including GTINs, batch codes and serialised identifiers used worldwide. ## The legal core: marking and operator identification The traceability duties in EU product law have two parts. First, the product itself must be identifiable: manufacturers must ensure products bear a type, batch, serial or model number, or another element allowing identification. Where the size or nature of the product prevents marking it directly, the information goes on the packaging or in an accompanying document, following the hierarchy in the legislation. Second, the people behind the product must be identifiable. Manufacturers must indicate their name, registered trade name or trade mark and a postal contact address; importers must add their own details too. Distributors must be able to identify their suppliers and, for business customers, their customers, so authorities can reconstruct the chain. Market surveillance authorities can require any economic operator to identify who supplied them and whom they supplied, and the records to answer must exist before the question is asked. These duties apply across the New Legislative Framework legislation and the General Product Safety Regulation. They are checked visually at borders and during inspections, and missing traceability information is one of the most common findings, because it is easy for authorities to verify and often signals deeper disorganisation. ## Why traceability matters: recalls, enforcement and brand protection The recall case is the clearest. When a defect affects one production batch, batch coding allows the recall to target exactly those units: consumers check their batch number, retailers pull specific stock, and the rest of the product line keeps selling. Without batch identification, the company faces an all-units recall, multiplying cost and alarm, or an indefensible partial recall that authorities will reject. For enforcement, traceability lets authorities act precisely. A Safety Gate alert identifies the product by brand, model and batch, so other member states can find it in their markets and businesses can check their inventory. For brand protection, unique identifiers distinguish genuine products from counterfeits, supporting customs seizures and consumer verification. Insurers and investors also read traceability maturity as a proxy for operational discipline, and strong systems can improve terms in both procurement and coverage negotiations. Traceability also underpins sustainability claims. Recycled content, carbon footprint and due diligence declarations are only credible if the product's materials can be traced to their sources. As digital product passports arrive, the traceability identifier becomes the key linking the physical product to its digital record. ## Identification technologies The workhorse technologies are familiar: barcodes carrying GTINs for product identification at retail, batch and lot codes printed or laser-marked on products and packaging, and serial numbers for individual unit identification of higher-value or higher-risk goods. These satisfy the legal marking duties and integrate with warehouse and retail systems. Serialisation goes further, giving each unit a unique identity. It is mandatory in pharmaceuticals under the Falsified Medicines Directive, with unique identifiers and tamper-evident packaging, and it is spreading to other sectors where counterfeiting or precise recall scoping justifies the cost. RFID and NFC tags add machine-readable, sometimes writable, identification for logistics and consumer interaction. QR codes are becoming the bridge to digital product passports: a code on the product links to a structured data record with compliance, sustainability and traceability information. The [EU Batteries Regulation](/regulations/eu-batteries) already requires QR codes linking to battery passports, and the Ecodesign framework will extend the model. Designing the physical identifier and the digital record together avoids retrofitting later, and it lets a single scan serve consumers, repairers, recyclers and regulators with role-appropriate views of the same underlying data. | Level | Identifier | Example use | |---|---|---| | Product type | GTIN, model number | Retail identification, catalogues | | Batch or lot | Batch code, date code | Recall scoping, quality tracking | | Individual unit | Serial number, unique identifier | Pharmaceuticals, high-value goods | | Supply chain party | GLN, operator identity | One-up-one-down records | | Digital record | QR code, data carrier | Product passports, consumer info | ## Building a traceability system Start with the legal minimum: define the marking for each product, the information it carries, where it is applied and how it survives the product's life. Marking must be durable and legible; a batch code that rubs off in normal use fails the requirement. Validate the marking process in production, including print quality checks and vision systems where volumes justify them, and revalidate whenever packaging or product finishes change. Then build the data layer: record the link between identifiers and production data, including the bill of materials revision, the production date and line, component batches and test results. This genealogy is what makes a recall precise and what authorities expect behind the marking. Enterprise systems should treat traceability data as regulated records with retention matching the product's documentation period, with access controls and audit trails that prove the data has not been altered after the fact. Extend to the supply chain: require suppliers to provide batch-identified components with declarations, record incoming batches against finished product batches, and keep distribution records linking outgoing batches to customers. Test the system with mock recalls, including a full genealogy exercise, and measure the time to identify affected units: hours is the target, days the warning sign. Document each mock recall with its scope, timeline and lessons, so the capability improves with every rehearsal. ## Sector spotlights Food traceability is the most mature system, required by the General Food Law: every food business must be able to identify its suppliers and customers, one step up and one step down, and label products to facilitate this. Pharmaceuticals add serialisation and verification against a central repository. Medical devices use Unique Device Identification (UDI), with device identifiers on labels and in databases. In consumer products, the GPSR's traceability duties are the baseline, with sector legislation adding detail: toys require batch identification, cosmetics require the responsible person and notification, and electrical equipment combines marking with the declaration of conformity. Automotive and aerospace operate the most demanding genealogy systems, driven by safety-critical recall needs. Each sector's system reflects its risk profile, but the direction is common: more granular identification, more digital records and more sharing with authorities. A traceability architecture built on global standards such as GS1 adapts across sectors and markets with the least rework, and it future-proofs the business as new passport and disclosure duties arrive. ## Frequently asked questions What is the minimum traceability information required on a product? Under EU product law, typically a type, batch, serial or model number identifying the product, plus the manufacturer's name and address and, for imports, the importer's details. Sector rules may add more. Where must the traceability marking go? On the product itself first; where size or nature prevents that, on the packaging or in an accompanying document. The marking must remain legible throughout the product's expected life, including under normal wear and handling. What does one-up-one-down mean? Knowing your direct supplier and your direct customer, so the chain can be reconstructed step by step even when no central database exists. It is the minimum traceability model in food law and a practical baseline for other sectors. How does traceability help with counterfeits? Unique identifiers let customs, retailers and consumers verify authenticity against the brand owner's records. Serialisation with verification databases makes fakes detectable at the point of sale or inspection. Do digital product passports replace physical marking? No. The physical identifier remains the legal marking and the key to the digital record. Passports extend what the identifier can convey; they do not remove the duty to mark the product itself durably. How long must traceability records be kept? At least as long as the product documentation retention period, generally 10 years for EU product law, and longer where sector rules or liability considerations require it. Align the retention schedule with the technical file so both survive together. ## Sources - GS1 traceability standards - EU market surveillance framework - EU Safety Gate rapid alert system