STANDARDS TRACKERRELEASE SNAPSHOT

Track status. Do not turn a reference into a certification badge.

Version-aware legal and technical standards tracker for Trusted ThingID, with OJEU status, architecture impact, owner and review date.

STATUS RULE

Six DPP standards are OJEU-cited in Decision (EU) 2026/1736; EN 18239 and EN 18246 are separately tracked in this release.

A listed standard means mapped/tracked—not blanket compliance.

REFERENCE ≠ CERTIFICATION
TRACKER

23 tracked references.

Standards tracker
ReferenceOfficial titleAuthorityPublicationStatusOJEULegal effectApplicabilityThingID impactArchitectureImplementationRequired actionOwnerPrimary sourceLast reviewedNext reviewChange
EU 2024/1781Regulation (EU) 2024/1781 — Ecodesign for Sustainable Products RegulationEuropean Union2024-06-13IN FORCEN/ALegal frameworkAll product groups subject to applicable delegated actsDPP regulatory profile; lifecycle; authority boundariesP04TRACKEDKeep product-group applicability explicitDPP Standards Ownerhttps://eur-lex.europa.eu/eli/reg/2024/1781/oj2026-09-012026-10-01Baseline legal framework
EU 2026/1736Commission Implementing Decision (EU) 2026/1736European Commission2026-07-14IN FORCEOJEU PUBLISHEDPublishes six DPP harmonised standardsDPP system requirements under Articles 10 and 11Standards status and public wordingP04/P06TRACKEDUse exact harmonised references; no blanket compliance claimDPP Standards Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01Six standards cited in OJEU
EN 18216:2026Digital product passport — Data exchange protocolsCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsApplicable DPP data exchangeIntegration protocol mappingP04/P06MAPPEDTrack protocol profiles per connectorIntegration Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18219:2026Digital product passport — Unique identifiersCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsIdentifier requirementsIdentifier governance / resolverP03/P04MAPPEDMap official identifier schemes without replacing authorityIdentity Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18220:2026Digital product passport — Data carriersCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsCarrier requirementsQR/NFC/data-carrier experienceP02/P04MAPPEDMap carrier profiles to product-group requirementsExperience Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18221:2026Digital product passport — Data storage, archiving, and persistenceCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsPersistence and storage requirementsRepository / continuity architectureP04/P05MAPPEDAlign retention, backup and persistence profilesData Architecturehttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18222:2026Digital Product Passport — APIs for lifecycle management and searchabilityCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsLifecycle and search APIsDPP APIs / search / lifecycleP04/P06MAPPEDMaintain OpenAPI/AsyncAPI mapping by releaseAPI Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18223:2026Digital Product Passport — System interoperabilityCEN/CENELEC2026HARMONISEDOJEU CITEDPresumption of conformity for corresponding requirementsSystem interoperabilityConnector/conformance modelP04/P06MAPPEDPublish version-specific interoperability evidenceConformance Ownerhttps://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32026D17362026-09-012026-10-01OJEU cited
EN 18239:2026Digital Product Passport — Access rights management, information system security, and business confidentialityCEN/CENELEC2026PUBLISHED / STATUS DEPENDENTNOT IN 2026/1736 ANNEXSupporting reference in this releaseAccess/security where applicablePolicy / disclosure / securityP02/P05TRACKEDDo not present as one of six OJEU-cited standards in Decision 2026/1736Security Architecturehttps://www.cencenelec.eu/news-events/news/2026/en-in-the-spotlight/2026-07-15-dpp/2026-09-012026-10-01CEN-CENELEC lists eight-series; six already OJEU cited
EN 18246:2026Digital product passport — Data authentication, reliability and integrityCEN/CENELEC2026PUBLISHED / STATUS DEPENDENTNOT IN 2026/1736 ANNEXSupporting reference in this releaseAuthentication/integrity where applicableEvidence / cryptographic trustP05TRACKEDDo not overstate harmonised/OJEU statusEvidence Ownerhttps://www.cencenelec.eu/news-events/news/2026/en-in-the-spotlight/2026-07-15-dpp/2026-09-012026-10-01CEN-CENELEC lists eight-series; six already OJEU cited
GS1 Digital LinkGS1 Digital Link URI syntax and resolver ecosystemGS1n/aECOSYSTEM STANDARDN/ASupporting ecosystem mappingProduct identification / resolver integrationIdentifier resolver / data carrierP02/P03/P06TRACKEDValidate exact profile/version in projectIntegration Ownerhttps://www.gs1.org/standards/gs1-digital-link2026-09-012026-12-01Supporting ecosystem
EPCIS 2.0EPC Information Services 2.0GS1n/aECOSYSTEM STANDARDN/ASupporting event interoperabilitySupply-chain event exchangeConnector / semantic mappingP06TRACKEDProject-specific mapping requiredIntegration Ownerhttps://www.gs1.org/standards/epcis2026-09-012026-12-01Supporting ecosystem
ISO/IEC 15459Unique identification — multiple partsISO/IECvariousINTERNATIONAL STANDARDN/AIdentifier referenceWhere relevant under ESPR Annex IIIIdentifier governanceP03/P04TRACKEDMap applicable part/version by identifier schemeIdentity Ownerhttps://www.iso.org/2026-09-012026-12-01Referenced by ESPR Annex III
ISO/IEC 30141:2024Internet of Things (IoT) — Reference architectureISO/IEC2024INTERNATIONAL STANDARDN/AArchitecture referenceConnected thing contextsDevice / integration architectureP05/P06SUPPORTINGUse as supporting architecture reference onlyDevice Trust Ownerhttps://www.iso.org/2026-09-012026-12-01Supporting reference
IEC 63278-1Asset Administration Shell — Part 1IECn/aINTERNATIONAL STANDARDN/ADigital twin / industrial asset referenceIndustrial ecosystem contextsSemantic/integration mappingP06SUPPORTINGProject-specific profile mappingIntegration Ownerhttps://www.iec.ch/2026-09-012026-12-01Supporting reference
IEC 62541OPC Unified ArchitectureIECn/aINTERNATIONAL STANDARDN/AIndustrial interoperabilityIndustrial/IoT integrationConnector / semanticsP06SUPPORTINGMap selected OPC UA profilesIntegration Ownerhttps://www.iec.ch/2026-09-012026-12-01Supporting reference
IEEE 802.1ARSecure Device IdentityIEEEn/aSTANDARDN/ADevice identity referenceConnected devices where selectedDevice identity / certificatesP05SUPPORTINGNot mandatory for passive DPPDevice Trust Ownerhttps://standards.ieee.org/2026-09-012026-12-01Supporting reference
RFC 8995Bootstrapping Remote Secure Key Infrastructure (BRSKI)IETF2021RFCN/ADevice onboarding referenceSelected device onboarding patternsDevice trustP05SUPPORTINGUse only where chosen by implementationDevice Trust Ownerhttps://www.rfc-editor.org/rfc/rfc89952026-09-012026-12-01Supporting reference
RFC 9334Remote ATtestation procedureS (RATS) ArchitectureIETF2023RFCN/AAttestation architectureL3/runtime assurance contextsAttestation / appraisalP05SUPPORTINGProfile selection remains project-specificDevice Trust Ownerhttps://www.rfc-editor.org/rfc/rfc93342026-09-012026-12-01Supporting reference
RFC 9711EAT Media TypesIETF2025RFCN/AAttestation evidence media referenceSelected attestation profilesAttestation evidenceP05SUPPORTINGValidate exact EAT/CWT profile in implementationDevice Trust Ownerhttps://www.rfc-editor.org/rfc/rfc97112026-09-012026-12-01Supporting reference
IEC 62443-4-1/4-2Security for industrial automation and control systemsIECn/aSTANDARD FAMILYN/ACybersecurity referenceIndustrial connected products where applicableSecure development / component securityP05/P06SUPPORTINGApplicability depends on product and deploymentSecurity Architecturehttps://www.iec.ch/2026-09-012026-12-01Supporting reference
ETSI EN 303 645Cyber Security for Consumer Internet of ThingsETSIn/aEUROPEAN STANDARDN/AConsumer IoT security referenceConnected consumer products where applicableDevice securityP05SUPPORTINGApplicability depends on product categorySecurity Architecturehttps://www.etsi.org/2026-09-012026-12-01Supporting reference
EU CRARegulation (EU) 2024/2847 — Cyber Resilience ActEuropean Union2024IN FORCE / TRANSITIONN/AProduct cybersecurity legal frameworkProducts with digital elements where applicableDevice/security governanceP05/P06TRACKEDMaintain product/applicability analysisSecurity Architecturehttps://eur-lex.europa.eu/2026-09-012026-10-01Track regulatory timelines