What EU Regulation 2021/2117 actually requires
On December 8, 2023, EU Regulation 2021/2117 came into full force. It applies to every wine sold in the European Union — whether produced in an EU member state or imported from a third country. The short version: every bottle now needs a QR code.
The longer version is more nuanced, and understanding the nuance is where strategy begins.
- Energy value — displayed using the symbol "E" on the physical bottle label, no exceptions
- Allergens — substances causing allergies or intolerances (e.g., sulphites if present above 10 mg/L) must be printed directly on the label
- Standard label requirements — wine name, geographical indication, vintage, ABV, net quantity, lot number, bottler details
- Full ingredient list — all oenological compounds, in descending order by weight
- Full nutritional declaration — carbohydrates, sugars, fats, proteins, salt per 100ml
- Importer and distributor details — localized to the market where the wine is sold
The regulation places two critical restrictions on digital labels:
- The QR code destination cannot contain any information intended for sales or marketing purposes
- No user data can be collected or tracked through the e-label itself
This is where most wineries stop reading and where the strategic opportunity begins.
The restrictions apply to the compliance page — the regulated e-label containing ingredients and nutritional data. They do not prohibit a winery from also using a QR code (or the same scan moment) to offer a separate, consumer-facing experience. The key is structural separation: the compliance content must be distinct from any marketing or engagement layer.
GS1 Digital Link QR codes — the format recommended for EU compliance — are specifically designed for this. A single QR code can route consumers to a structured, regulation-compliant e-label while simultaneously enabling additional digital experiences through separate, clearly delineated channels.
What most wineries are doing — and why it's a mistake
Walk through a trade show in 2024 or 2025 and you'll find a familiar pattern. Winery after winery has added a QR code to their label. They point it at a static PDF or a dedicated compliance page. The ingredients are listed. The allergens are declared. The deadline has been met.
This is understandable. Procurement was dealing with a genuine logistical challenge: update hundreds of labels across multiple SKUs and vintages, create compliant e-label pages, navigate the GS1 Digital Link standard for the first time, and hit a regulatory deadline. When those are your constraints, "meet the minimum" looks like success.
The problem is what comes next. That QR code is now printed on the label. It will ship on bottles for the next vintage. And the next. The production cost of adding a QR code to a label is negligible — once the infrastructure is in place, changing what it points to (or adding a layer on top of it) costs almost nothing compared to reprinting.
Wineries that treated December 2023 purely as a compliance deadline locked themselves into a lowest-common-denominator outcome:
- A QR code that generates zero consumer data
- A scan experience that ends at an ingredients page with no brand presence
- No mechanism to capture the consumer who just opened a £50 bottle of their wine
- No analytics on who is scanning, where, or how often
Meanwhile, the winery spent £200,000+ on that vintage, pays distributors and retailers to move it, and has no idea who's drinking it.
The opportunity hiding inside the mandate
Consider what the QR code on a wine label actually represents from a marketing perspective.
Every scan is a consumer, holding your wine, in a moment of engagement — at a dinner table, at a restaurant, at a gift-giving occasion. This is the highest-intent moment in the consumer lifecycle. The bottle is open. The wine is being consumed. The decision to purchase has already been made, which means you are not competing with anyone in that moment. You have the floor.
For most consumer goods, earning a moment of mobile attention like this would cost several pounds in digital advertising. Wine labels have now been mandated to include a mechanism that delivers exactly this — for free, at scale, on every bottle.
The regulation restricts the e-label itself — the compliance page — from containing marketing content. It does not restrict a winery from offering a separate consumer experience that a consumer can opt into from within a compliant QR experience.
Think of it like a product page with a legal disclosures tab and a brand story tab. The legal tab meets the compliance requirement. The brand story tab is a separate, voluntary experience.
The wineries that understood this early are doing something different. They're using the QR scan as a trigger point:
- The compliance e-label is present and clearly accessible (regulation met)
- A separate brand experience is offered — the winemaker's story, a video, a tasting note, event invitations
- Consumers who engage can optionally identify themselves (entering a digital cellar, signing up for releases, etc.)
- The winery captures first-party data from people who have already proven they drink their wine
This is not a loophole. It is the correct reading of the regulation — one that several major compliance and QR platform providers have confirmed. The mandate created a physical touchpoint. What you do with that touchpoint is still a business decision.
What a compliance QR looks like vs. an engagement QR
The difference in outcomes between these two approaches is not subtle.
- Consumer scans → lands on a plain e-label with ingredients list
- Zero brand presence, no storytelling, no engagement mechanism
- Consumer closes the page. Journey ends.
- Winery data captured: none
- Consumer relationship built: none
- Revenue potential unlocked: none
- Consumer scans → compliance data accessible, brand experience offered
- Winemaker story, origin narrative, AR or video element (optional)
- Light-touch sign-up: "Add to your digital cellar" / "Get release notifications"
- Winery captures: email, scan location, device, timestamp, repeat scans
- Consumer relationship: established, owned by the winery (not the retailer)
- Revenue potential: direct reorder, DTC channel, gifting, event invites
The technical implementation cost difference between these two approaches is small. The strategic outcome difference is enormous. One treats the regulation as an obligation. The other treats it as what it actually is: a mandated consumer touchpoint delivered on every bottle, at the most valuable moment in the purchase journey.
The data you're leaving on the table
The wine industry has a data problem that nobody talks about at trade tastings because everybody has it.
A winery that moves 200,000 bottles a year through a distribution network typically knows the following about its end consumers: nothing. They know which importers take their allocation. They know which retailers stock them. They receive sell-through data that's three months old, aggregated, and stripped of any individual signal.
Meanwhile, a direct-to-consumer brand of comparable revenue would have email addresses, purchase histories, geographic breakdowns, cohort analytics, and a retention marketing engine. The channel through which wine historically moves has systematically stripped wineries of the data that every other consumer goods brand takes for granted.
A winery that deploys an engagement-first QR strategy across a mid-size vintage will, within 12 months, know:
- Which SKUs are driving the most consumer engagement
- Geographic distribution of actual consumption (not distributor territory)
- Scan-to-repeat-purchase conversion rates
- A growing first-party email list of people who drink their wine
- Which wines are being opened as gifts vs. personal purchases (location + time patterns)
None of this requires surveillance. It requires offering something valuable enough that a consumer chooses to identify themselves — a cellar log, release alerts, an event invitation. The conversion rates at this moment, in this context, are materially higher than any cold acquisition channel.
Three action steps wineries can take today
Audit your current QR implementation
Scan every QR code currently on your labels. Where does it land? Is there anything beyond the compliance page? Is there a brand story, a video, an email capture? If not, you are in the majority — but the majority is leaving value on the table. Document what you have and where the gaps are. This audit takes an afternoon and costs nothing.
Separate compliance from engagement in your QR architecture
The regulatory requirement is clear: the e-label must contain no marketing content and must collect no data. Build or procure a compliant e-label platform that satisfies this first. Then, separately, build or procure an engagement layer — a brand experience, a winemaker story, a cellar-entry mechanism — that consumers can access voluntarily. The two must be structurally distinct. This is not difficult, and several platforms exist to handle it. What matters is making a deliberate choice to do it, not leaving the engagement layer as a "phase two" that never happens.
Start collecting first-party data before you need it
The value of a first-party email list compounds. A winery that starts capturing consumer data today will have a meaningful asset in 18 months. A winery that starts in 18 months will have a meaningful asset in three years. Neither will achieve the same position as a winery that treated this as infrastructure, not an afterthought. You don't need a perfect consumer experience on day one. You need a minimum viable engagement mechanism that captures consent and an email address. Build on that foundation. The mandate isn't going away — neither is the opportunity it created.
Maker's Voice does exactly this.
We built the infrastructure that turns a mandated QR code into a consumer engagement channel — winemaker storytelling, AR experiences, a digital cellar, and first-party data analytics. EU-compliant by design, built for wineries that want more than a compliance checkbox.
Book a Demo