FSMA 204 and the EU DPP Are the Excuse to Finally Fix Your QMS/MES Split

Quality engineer reviewing a non-conformance record on a tablet on the plant floor

Every plant has a version of this story: a nonconformance gets logged in the QMS, someone works the CAPA over the next few weeks, and by the time it closes, the genealogy record in MES has already moved on. The two systems agree on the outcome eventually, more or less, but nobody could reconstruct in real time which specific lots, work orders, or serialized units were actually affected while the investigation was open. That gap has been tolerable for a long time because regulators mostly asked for records after the fact, not live linkage. FSMA 204 and the EU Digital Product Passport rules change that math, and the compliance dates landing across 2026 and 2027 are close enough now that “we’ll clean this up eventually” is no longer a credible plan.

My position: most plants don’t need a full QMS/MES merger to meet this moment. They need to stop treating the QMS-to-MES handoff as a batch export problem and start treating it as an event problem. A smaller number of plants — mostly those with heavy regulatory exposure or genuinely tangled genealogy — will find that a merger is the more honest answer. The trick is knowing which camp you’re in before you sign a systems-integration contract.

Why the old architecture is suddenly a liability

FSMA 204 requires covered entities to capture and be able to produce Key Data Elements tied to Critical Tracking Events — receiving, transformation, creation, shipping — within a short window on request, for foods on the Food Traceability List. The EU Digital Product Passport, rolling out first for categories like batteries and textiles under the Ecodesign for Sustainable Products Regulation, requires a persistent, accessible record tying a specific product to its material composition, compliance status, and — this is the part that hits quality teams — its conformity and repair/recall history over the product’s life.

Neither regulation cares that your QMS and MES were procured five years apart from different vendors for different reasons. Both effectively require you to answer: “for this specific genealogy record, what was the quality disposition, and can you prove it wasn’t shipped while a hold was active?” That’s a question a lot of plants can only answer with a phone call to the quality manager and a few hours of cross-referencing spreadsheets. Under a 24-hour traceability request or a DPP audit, that lag is the failure mode regulators are explicitly trying to eliminate.

What actually needs to live in MES versus QMS

The instinct in a lot of digitalization projects is to ask “should we merge these systems?” That’s the wrong first question. The right one is: which quality events are genealogy-critical and time-sensitive, and which are process-improvement-critical and can tolerate latency?

Belongs in MES, full stop

  • Holds and dispositions tied to a genealogy unit — lot, serial, work order, or container. If a hold doesn’t stop movement in MES in real time, it isn’t a hold, it’s a suggestion.
  • In-process nonconformances that affect routing — scrap, rework, downgrade, or reroute decisions need to be visible to the execution layer the moment they’re made, because MES is what’s deciding what happens to the physical material next.
  • Genealogy-linked deviation flags — anything that needs to travel with the unit through subsequent operations, assembly, or shipping needs to be a first-class attribute of that genealogy record, not a lookup in another system.

Belongs in QMS

  • CAPA investigation workflow — root cause analysis, cross-functional review, effectiveness checks. This is a longer-cycle, document-heavy, audit-trail-heavy process that MES was never built to run well.
  • Supplier quality and audit management — mostly orthogonal to shop-floor genealogy.
  • Training records, document control, change control — classic QMS territory under ISO 9001 or IATF 16949 structures.

The failure mode almost every plant has today is treating the first category like the second: letting nonconformances that should stop material movement sit in a QMS queue that MES doesn’t watch.

Event-driven, not batch — this is the actual fix

The single highest-leverage architectural change most plants can make isn’t a merger. It’s replacing nightly or shift-based batch exports between QMS and MES with an event-driven integration — MQTT Sparkplug B or OPC UA pub/sub where a disposition change fires immediately as a message consumed by MES, rather than waiting for the next ETL cycle. If a quality hold is placed at 10:14 a.m. and MES doesn’t see it until the 6 p.m. batch job, you’ve built a system that’s technically compliant and practically useless during exactly the window regulators care about.

This is achievable without ripping out either system. It requires a defined event schema (what constitutes a hold, a release, a disposition change), a message broker or integration platform capable of guaranteed delivery, and — critically — MES logic that actually acts on the event rather than just logging it. That last part is where a lot of integration projects quietly fail: the message arrives, but nothing in MES actually blocks the next operation from proceeding.

When integration isn’t enough and you actually need to merge

A targeted, event-driven integration is the right call for most plants with a mature MES and a reasonably capable QMS, especially where genealogy is already well-modeled in MES and the ISA-95/ISA-88 structure is sound. Consider a fuller consolidation — sometimes into a unified quality-in-MES module, sometimes into a platform that genuinely spans both — when:

  • Your genealogy model itself is broken or inconsistent across lines, so no integration layer can reliably map quality events to the right unit anyway.
  • You’re facing DPP obligations across multiple product lines with different compliance regimes, and maintaining parallel data models in two systems is generating its own reconciliation burden.
  • Your current QMS has no real API or event capability — it’s forms-and-workflow software adjacent to paper, and any integration would be cosmetic.
  • Audit findings have already flagged genealogy-to-disposition gaps as a recurring nonconformance in your own quality system, which is a strong signal the architecture, not the discipline, is the problem.

A full merger is a significant undertaking — validation, data migration, and retraining all add up, and it’s rarely the fast option even when it’s the right one. Don’t reach for it as a first move. But don’t rule it out to save a budget line if your genealogy foundation is genuinely unsound, because layering event-driven integration on top of bad genealogy just gets you faster, more confident wrong answers.

Start where the deadline actually bites

If you’re covered by FSMA 204, the forcing function is the Critical Tracking Event and Key Data Element requirements — map those first, and you’ll quickly see which quality events need real-time genealogy linkage versus which are documentation exercises. If you’re facing EU DPP obligations, start with the product categories that hit compliance dates soonest and trace backward from what the passport actually needs to expose. Either way, the practical first step is the same: pick one quality event type — holds are the obvious candidate — and get it flowing from QMS to MES as a real-time event before you touch anything else. Prove the mechanism works on the highest-stakes event, then extend it. That’s a more honest use of the next year than a steering committee debating platform consolidation in the abstract.


This article was written with the assistance of artificial intelligence. While we aim for accuracy, the information may be incomplete, out of date, or incorrect, and should be independently verified before you rely on it for any decision. It is provided for general information only and does not constitute professional advice.

Related posts