DPP harmonised standards (EN 18216–18223)

The six published standards, the presumption of conformity, and the two still missing

Technical standards and specifications for the Digital Product Passport

A harmonised standard is a European standard cited in the Official Journal of the EU. The citation is the legal moment: from then on, applying the standard gives a presumption of conformity with the corresponding requirements — meaning a market surveillance authority accepts that you have met the requirement unless shown otherwise.

For the Digital Product Passport that moment has arrived. Commission Implementing Decision (EU) 2026/1736 was adopted on 14 July 2026 and published in the Official Journal on 15 July 2026, citing six CEN-CENELEC standards.

In short

The six cited standards

EN 18216 — data exchange protocols; EN 18219 — unique identifiers; EN 18220 — data carriers; EN 18221 — storage, archiving and persistence; EN 18222 — APIs for lifecycle management and search; EN 18223 — system interoperability.

What the presumption covers

Its scope is conformity with ESPR Articles 10 and 11, to the extent the standards cover them. It is not a general certificate of conformity with the whole regulation.

The two missing standards

The security standards — prEN 18239 on access rights and prEN 18246 on data authentication — were not cited by this decision. They remain at draft stage, and their citation will follow separately.

Horizontal, not product-specific

The six are product-agnostic. On their own they create no obligation for any product group — that comes from the delegated act for the sector concerned.

DPP harmonised standards (EN 18216–18223)

Frequently asked questions

Question Mark Section Supporting Image

No. Harmonised standards remain voluntary. Applying them is the shortest route to the presumption of conformity; you may demonstrate conformity another way, but then the burden sits with you.

No. The standards define how a passport is built. When you must build one is set by the delegated act for your product group.

Check that the platform you choose implements the decisions these standards lock in — GS1 identifiers under EN 18219, QR as primary carrier under EN 18220, durable storage under EN 18221 and REST APIs under EN 18222.

Technical standards and specifications for the Digital Product Passport
Last verified