QR Code法规与法律考虑
Several regulatory regimes reach QR codes at once. Accessibility law treats a code as insufficient on its own: the Americans with Disabilities Act requires an accessible alternative such as a text URL, an NFC tag or staff assistance for codes in public spaces, and the European Accessibility Act requires the content reached through a code to meet WCAG 2.1 AA. On digital interfaces WCAG additionally requires alt text and a keyboard-accessible route to the same content. Consumer protection law reaches the destination too, since a code placed in an advertisement must lead to content consistent with that advertisement's claims.
QR Code Regulations and Legal Considerations
QR codes are subject to various regulations covering accessibility, consumer protection, data privacy, and industry-specific requirements.
Accessibility Requirements
Americans with Disabilities Act (ADA): QR codes in public spaces must have accessible alternatives. A QR code alone does not meet ADA requirements — provide text URLs, NFC tags, or staff assistance.
European Accessibility Act (EAA): Digital content accessed via QR codes must meet accessibility standards (WCAG 2.1 AA). See the accessibility guide.
Web Content Accessibility Guidelines (WCAG): QR codes on digital interfaces must include alt text and keyboard-accessible alternatives.
Consumer Protection
Truth in advertising: QR codes in advertisements must link to content consistent with the ad's claims. Bait-and-switch (advertising one thing, QR code leading to another) violates consumer protection laws.
Disclosure requirements: If scanning a QR code initiates data collection, this must be disclosed before scanning — not only in a privacy policy.
Terms and conditions: QR codes linking to terms or conditions must be scannable (adequate size, good contrast) to satisfy "reasonable notice" requirements.
Data Privacy
- GDPR: Applies to QR code scan data in the EU
- CCPA/CPRA: California residents' rights apply to QR scan data
- LGPD (Brazil): Similar to GDPR, applies to QR code data in Brazil
- POPIA (South Africa): Data protection for QR-related personal data
Industry-Specific Regulations
| Industry | Regulation | QR Requirement |
|---|---|---|
| Food | FDA labeling, EU FIC | Nutrition info accessible |
| Pharmaceuticals | FDA UDI, EU FMD | Serialised QR codes mandatory |
| Medical devices | FDA 21 CFR | UDI QR codes on devices |
| Alcohol | TTB (US), national laws | Age verification considerations |
| Financial | EMV, PCI DSS | Payment QR security standards |
Key Takeaways
- Accessibility laws require alternatives to QR codes in public spaces
- Consumer protection applies to QR code advertising claims
- Privacy regulations (GDPR, CCPA) govern QR scan data collection
- Industry-specific regulations may mandate QR codes (FDA UDI, EU FMD)
- Legal compliance requires both the QR code and linked content to meet standards