concept

GS1 Digital Link Explained

How GS1 Digital Link turns a barcode into a resolvable web address, and why that lets one QR code serve consumers, recyclers and regulators differently.

CirculeID Research6 min read1,299 words

GS1 Digital Link is a standard that expresses a product identifier such as a GTIN as a web URI. Scanning it makes an HTTP request, so a single QR code can return different responses to a consumer, a recycler or a regulator, which is what makes one code serve a whole Digital Product Passport.

What this gives you

How one GS1 identifier serves retail, logistics and the web at once, the URI structure that makes it resolvable, and why it beats a bespoke QR destination.

Key takeaways

GS1 Digital Link encodes a GTIN inside a URL, so a scan becomes a web request rather than a lookup in a private database.
One code can serve many audiences because the resolver decides what to return based on who is asking and what they request.
It is backwards compatible: the same identifier still works with traditional barcode systems at point of sale.
GS1 has set 2027 as the target for global migration to 2D barcodes at retail point of sale, which aligns retail scanning with passport scanning.
Without a resolvable identity layer, a Digital Product Passport becomes a vendor-specific URL that breaks when the vendor changes.

A traditional barcode is a number. Scanning it tells a till which product it is, and nothing else — everything useful lives in a database the scanner already has access to. That model works inside one company and fails completely at end-of-life, when the person holding the product has no relationship with the manufacturer and no access to their systems.

GS1 Digital Link exists to close that gap by making the identifier itself resolvable on the open web.

¿Qué es GS1 Digital Link?

GS1 Digital Link: A GS1 standard that expresses GS1 identifiers — such as a GTIN, batch or serial number — in the syntax of a web URI, so that scanning a barcode performs an HTTP request to a resolver rather than only returning a number.

In practice a Digital Link URI looks like an ordinary URL with the identifier embedded in a structured path:

https://id.circuleid.com/01/04012345678901/21/A7X9K2
                        │  │                │  │
                        │  └─ GTIN           │  └─ serial number
                        └─ application identifier for GTIN
                                             └─ application identifier for serial

A GS1 Digital Link URI. `01` and `21` are GS1 application identifiers, so the structure is machine-parseable rather than a convention.

The path segments are not arbitrary. 01 always means GTIN and 21 always means serial number, which is why any conforming system can decompose the URI without prior agreement with whoever minted it.

Why does this matter for Digital Product Passports?

A passport has to serve audiences with different rights from one physical scan. Printing five QR codes on a product is not viable, and a single code pointing at a single static page cannot distinguish a consumer from a regulator.

Digital Link solves this by moving the decision to the resolver. The code is constant; the response is negotiated.

Step 1
Scan the code
Any phone camera reads the URI. No app required, because it is a normal web link.
Step 2
Request reaches the resolver
The resolver parses the GTIN and any serial or batch from the path.
Step 3
Identify the requester
Anonymous consumer, or a party presenting a verified role credential.
Step 4
Return the right view
Care instructions for a shopper; disassembly and hazard data for a recycler.

The resolver — not the barcode — decides what to return, which is why a single code can serve a consumer and a regulator without exposing one to the other.

What does the resolver do?

The resolver is the piece most implementations underestimate. It is not a redirect table; it is the access-control boundary of the entire passport.

Resolver responsibilities and what goes wrong when each is neglected
Responsibility	What it does	Failure mode if neglected
Parse the identifier	Decompose the URI into GTIN, batch and serial	Codes that only your own systems can read
Authenticate the requester	Establish whether a role credential is presented	Every view becomes public
Select the view	Return the subset of data that role may see	Restricted data leaks, or consumers see nothing useful
Serve content negotiation	HTML for people, JSON-LD for machines	Machines have to scrape a marketing page
Persist	Keep resolving for the product's whole life and beyond	Passports 404 exactly when they matter most

Resolver responsibilities and what goes wrong when each is neglected

That last row is the one with long-term consequences. A passport is most valuable at end-of-life, which may be fifteen years after manufacture. If the resolver lives on a domain tied to a vendor contract, the passport has an expiry date nobody wrote down.

How does it coexist with existing barcodes?

Digital Link does not replace the GTIN; it re-expresses it. The same identifier still drives point of sale, inventory and logistics, which is what makes migration feasible without changing every system at once.

Existing linear barcodes keep working. The GTIN is unchanged, so legacy scanners are unaffected.
A 2D code can carry both roles. A QR or DataMatrix encoding a Digital Link URI can be read by a till for the GTIN and by a phone for the passport.
GS1 has targeted 2027 for global migration to 2D barcodes at retail point of sale, aligning the retail transition with the passport timetable.
Transitional dual marking — a linear barcode alongside a 2D code — is common while scanner fleets are upgraded.

Where does EPCIS fit?

Digital Link tells you which product you are holding. It says nothing about what happened to it. That is EPCIS 2.0, the companion GS1 standard for supply chain events.

How GS1 Digital Link and EPCIS 2.0 divide responsibility in a product passport
Standard	Question it answers	In the passport
GS1 Digital Link	Which product is this, and where is its record?	Identity and resolution
EPCIS 2.0	What happened to it, when, where and why?	Event history and traceability
W3C Verifiable Credentials	Who asserted this, and can I check it?	Evidence and attribution

How GS1 Digital Link and EPCIS 2.0 divide responsibility in a product passport

Together these three answer identity, history and trust — which is a reasonable working definition of what a passport has to provide.

Frequently asked questions

Is GS1 Digital Link the same as a QR code?

No. The QR code is a way of encoding data optically; Digital Link is the standard that defines what data is encoded. A Digital Link URI can be carried in a QR code, a DataMatrix, an NFC tag or an RFID tag — the carrier and the identity standard are separate decisions.

Do I need to be a GS1 member to use Digital Link?

You need GS1 identifiers such as GTINs, which come from GS1 membership, and most companies selling physical products already have them. The Digital Link syntax itself is an open standard, so the practical prerequisite is having identifiers rather than any additional licence.

Will existing barcode scanners still work?

Yes. Digital Link re-expresses an unchanged GTIN, so legacy linear barcodes and the systems that read them are entirely unaffected. Migration normally runs in parallel, with dual marking during the transition period while scanner fleets and point-of-sale systems are upgraded. GS1 has targeted 2027 for global migration to 2D barcodes at retail point of sale.

Who operates the resolver?

Either the brand owner, on a domain they control, or a platform on their behalf. The important consideration is persistence: the passport must resolve for the product's whole life, so the domain and its operation should not be tied to a contract that could lapse.

Can one Digital Link serve both a consumer page and machine-readable data?

Yes, through content negotiation. The same URI returns HTML to a browser and JSON-LD to a client requesting it, and the linkType parameter lets a caller ask for a specific kind of information such as repair instructions rather than a general landing page.

What happens if the resolver is unavailable?

The scan fails and the passport is inaccessible, which is why resolver availability is a compliance concern rather than an operational one. Passports must remain accessible for the product's lifetime, so redundancy and a controlled domain matter more than they would for a marketing page.

Sources

GS1 Digital Link standard — GS1, 2024
EPCIS and CBV standards — GS1, 2022
Regulation (EU) 2024/1781 establishing a framework for the setting of ecodesign requirements for sustainable products — EUR-Lex, European Union, 2024-06