Six of the eight CEN-CENELEC DPP standards are now cited in the Official EU Journal. Here's what that actually changes — and what it doesn't.

If you've been tracking the Digital Product Passport rollout, you've seen a lot of milestones: the EU Ecodesign for Sustainable Products Regulation (EU ESPR 2024/1781) entering into force, the EU DPP system standardisation mandate, many EU consultations for industry input, and the first product group studies on what data should be contained in their DPPs have been published by the EU JRC.

What happened this month

On 27 May 2026, the EU’s standardisation bodies CEN and CENELEC's under Joint Technical,  Committee 24 (“Digital Product Passport — Framework and System”, published the first set of European DPP system standards.  

• EN 18216 — Data exchange protocols

• EN 18219 — Unique identifiers

• EN 18220 — Data carriers (QR codes, RFID)

• EN 18221 — Data storage, archiving and persistence

• EN 18222 — APIs for lifecycle management and searchability

• EN 18223 — System interoperability

Two remaining standards — covering access rights, information security and business confidentiality — went through formal vote until 16 July 2026 and are expected to be published in September 2026.

The journey to achieving these standards has been remarkable, within a two year timeframe including thousands of review comments from industry, academia, NGOs and other standardisation experts. Eco Wise is proud to have had a small role, having been a liaision to CEN-CENELEC JTC 24 from the very beginning,

Publication alone by CEN CENELEC, the EU’s standardisation bodies, does not mean much operationally. Most of the time standards are voluntary. A published European EN Standard can be bought and implemented, and their success depends on industry uptake on a bottom-up basis. Many standards are not used, whilst some such as ISO 9001 are a massive success, despite their voluntary nature.  

However, in this case, since the EU DPP System standards were requested by the EU commission under EU Standardisation Request M/604, they have the special status once approved of a harmonised standard across all 27 EU countries. Providing a presumption of conformity once approved with the legislative requirements of the regulation under which the standards request was initiated, in this case EU ESPR 2024/1781.

The final step of the approval of standards to be harmonised and providing a presumption of conformity is the publication in the Official Journal of the European Union (OJEU). That citation step is the one that just happened for the DPP standards: the EU Commission has now cited six of the eight standards in the OJEU.

In plain words, the six EU DPP system standards cited above are obligatory to operate a software that can generate Digital Product Passports. Their implementation is mandatory, for any issued DPP to be valid for registration in the upcoming official EU DPP registry. To receive the certificate from the EU that the DPPs are officially registered, to be allowed to place products on the EU market at the point when DPPs become a mandatory condition for selling products into the EU.  

Having harmonised standards available for conformity means less legal ambiguity and lower compliance cost for the organisations that adopt it. It also provides a market signal for manufacturers in selecting DPP service providers, which as part of their DPP system procurement should ask on the implementation status of the 8 EU DPP system standards.  

What the standards actually cover — and what they don't

It's worth being precise here, because this is where a lot of coverage gets muddled. The EN 182x family is horizontal: it defines how any Digital Product Passport is identified, carried on a product, exchanged between systems, stored, and made interoperable — regardless of product type. In other words it defines the EU DPP system and DPP issuing software requirements.  

It does not define anything about the EU DPP data that needs to be contained in the DPP itself. What data a battery, a textile, or a piece of furniture must disclose. Those data requirements come from product-group delegated acts under the ESPR, product-family specific standards under the EU Construction Products Regulation, and other EU product regulations. Developed separately and on their own timelines, batteries first under the EU Battery regulation, with the first full DPP obligation applying from 18 February 2027).

Think of it as the difference between the rulebook for how a passport is structured, printed and read at a border, versus the rulebook for what a specific country requires you to disclose on entry. JTC 24 wrote the first. Technical laws called delegated acts write the second for most products, and for construction products specific product data standards.  

The bigger picture: three tracks moving in parallel

This citation lands alongside three other pieces of the rollout that matter for anyone planning DPP  implementation:

1. The central EU DPP Registry. The EU ESPR 2024/1781 required the Commission to have this operational by 19 July 2026. The Registry does not store passport content — only three data points per entry (identifier, metadata, and weblink information) — meaning the actual passport data stays decentralised with the manufacturer or a designated service provider.

2. Sector-specific product group delegated acts. These set the actual disclosure requirements product by product, on a rolling schedule under the Commission's 2025–2030 ESPR Work Plan.

3. The upcoming EU DPP system secondary legislation. Covering official requirements for DPP service provider certifications, differentiated access to DPPs such as by repairers, recyclers and market surveillance organisations, and horizontal requirements for labelling and inclusion of DPP data carriers on product packaging.

What this means if you're starting to plan DPP implementations now

Any manufacturer will need to evaluate how to issue Digital Product Passports in the future. Two routes are available: do it in-house with your own IT team, or work with a DPP service provider such as Eco Wise that has the architecture and capabilities readily available.  

The setup of a DPP system infrastructure conform to the EN182x series is not a simple task, the EU DPP system standards are intended to provide full interoperability and non-vendor lock-in, with standardised data models, APIs, security protocols, machine readable data, to name a few of the tech technical high-level requirements. The IT specifications under EN 182x are significant, and only experienced IT teams can implement it.

Manufacturers with their own large IT teams need to make a call: do we want to do it in-house or is it much more cost effective to work with an external DPP service provider. To make this decision, a mapping of what is required to setup an EN 1821x series compliant DPP issuing system, and the cost of these implementations is essential. To get the full cost picture. We can help you get up to speed and provide a full mapping.

Manufacturers without their own large IT teams need to have a high-level understanding of the EN 182x series as part of their procurement process. We can also help you get up to speed here, so you can better procure a DPP service provider.

This is exactly the kind of support work — bringing the regulatory and technical information that your team can act on — that we do at Eco Wise.

Our regulation compliance support packages start at just £50/month. Reach out to find out more:

📧 deniz.onar@eco-wise.co.uk

📧 info@eco-wise.co.uk

‍