Harmonised Standards, Cited 15 July 2026

Decision (EU) 2026/1736 — Six DPP Standards, Harmonised

Commission Implementing Decision (EU) 2026/1736, adopted 14 July 2026 and in force since its Official Journal publication on 15 July 2026, cites the first six European DPP standards — EN 18216, 18219, 18220, 18221, 18222 and 18223 (all :2026) — in the OJ. The legal effect: DPP systems built in conformity with them are presumed to conform with the technical requirements of ESPR Articles 10 and 11. Two standards — access rights (EN 18239) and authentication (EN 18246) — are still to come.

Written by Nazrul Islam, Founder, DPPLive · Last updated: 22 July 2026

EN 18219
Unique identifiers
The ID grammar of the whole system: five permitted product-identifier schemes (GS1 Digital Link URI, IEC 61406 Identification Link, W3C DID, RFID/2D identifiers, DOI) and the operator/facility schemes including GLEIF LEI. Identifiers must be globally unique, never reused and stable for the product's life — the rule your GTIN-based UPIDs live under.
EN 18220
Data carriers
QR Code, Data Matrix and RFID (HF/NFC and UHF RAIN) are the permitted carriers, with placement, marking and print-quality rules. At least one carrier must be free to read with an ordinary smartphone, no app required — the reason a care-label QR remains the textile default.
EN 18216
Data exchange protocols
How DPP systems talk to each other: REST over HTTPS with TLS, structured messages, authenticated and tamper-resistant exchange. This is the plumbing standard buyers' systems and registries rely on when they query a passport.
EN 18221
Storage, archiving & persistence
Passports must stay available for the product's lifetime, with archived versions retrievable — what was claimed about a garment in 2027 must still be provable years later. Back-up through a DPP service provider is written into the model.
EN 18222
Lifecycle APIs
The exact API operations a passport system must offer: create, read, update and search, element-level operations, batch handling, versioning queries and registry submission. This is the standard that makes "switch providers without losing your passports" technically real.
EN 18223
System interoperability
A shared data model — container, metadata, and every data element linked to a machine-readable semantic definition — so a passport created on one platform is readable by every other compliant system, registry and surveillance tool.
What "harmonised" actually changes

Article 1 of the Decision does one thing: the references of the six standards "are hereby published in the Official Journal of the European Union". That single act converts them from voluntary best practice into harmonised standards — and under the ESPR, conformity with a harmonised standard creates a presumption of conformity with the requirements of Articles 10 and 11 that the standard covers. Since 15 July 2026, "built to EN 18216–18223" is the recognised way to show a DPP system does what the law demands. The standards were drafted by CEN/CENELEC's JTC 24 committee and first published on 27 May 2026; the citation is the step that gives them legal weight.

Reading It From the Factory Floor

What 2026/1736 Means for a Garment Exporter

No factory will ever open these PDFs — and every factory's passports will run on them. Three practical consequences.

01
"Standards-built" is now a question to ask your provider
The standards are implemented by DPP platforms and service providers, not by factories. What changed on 15 July 2026 is that there is now an official yardstick: a platform either builds to the six cited standards or it explains why not. Put the question in your vendor checklist — see how to choose a DPP provider.
02
Identifiers and QR choices are settled — act on them
EN 18219 blesses the GS1 Digital Link route for product identifiers and EN 18220 confirms the smartphone-readable QR as a compliant carrier. Both are decisions a factory can execute at style level from the moment a GTIN exists — see the GS1 & GTIN guide and the QR code guide.
03
The July 2026 infrastructure week is complete — textiles inherit it
Standards cited (15 July), the registry rulebook adopted (16 July, applying from 6 August), and the registry launched (20 July). The technical world garment passports will enter is built and running years before the Textile Delegated Act (expected late 2026 / early 2027) makes them mandatory. Batteries rehearse it first from 18 February 2027 — see what the battery passport teaches apparel.
The Dates, In Order
  • 27 May 2026 — CEN/CENELEC publishes the first six DPP standards (EN 18216, 18219, 18220, 18221, 18222, 18223)
  • 14 July 2026 — Commission adopts Implementing Decision (EU) 2026/1736
  • 15 July 2026 — Official Journal citation; the Decision enters into force and the presumption of conformity applies
  • 16 July 2026 — Implementing Regulation (EU) 2026/1778 (registry rulebook) adopted; applies from 6 August 2026
  • 20 July 2026 — the Commission launches the central DPP registry and its testing environment
  • September 2026 — CEN's publication window for EN 18239 (access rights) and EN 18246 (authentication), ahead of a further citation decision
  • 18 February 2027 — battery passports mandatory; first product group through the full stack at scale
  • Late 2026 / early 2027 — Textile Delegated Act expected, defining garment DPP data fields
2026/1736 FAQ

Quick Answers

What does it mean that the DPP standards are now harmonised?
+
A European standard becomes a harmonised standard when the Commission cites its reference in the Official Journal of the European Union. Implementing Decision (EU) 2026/1736 did exactly that on 15 July 2026 for the first six DPP standards. The legal effect: a DPP system built in conformity with them is presumed to conform with the technical requirements of ESPR Articles 10 and 11 that the standards cover. Before the citation the standards were available but voluntary best practice; since 15 July 2026 they are the recognised route to compliance.
Does a garment factory need to buy and read EN 18219 or the other standards?
+
No. The standards are engineering specifications for the systems that create, host and exchange passports — they are implemented by DPP platforms and service providers, not by individual factories. The standards are sold by CEN members' national standards bodies; a factory's job is to ask one question of its provider: is the platform built to the six harmonised standards cited in Decision 2026/1736? What a factory does control is the data quality flowing into that system — identifiers, fibre composition, chemicals, footprint figures. See the textile DPP data checklist.
Which DPP standards are still missing from the harmonised list?
+
Two of the eight: EN 18239 (access rights management — who may see which passport data) and EN 18246 (data authentication, reliability and integrity). CEN's publication window for both is September 2026, and the Commission has signalled a further citation decision covering them once published. Until then, the six cited standards cover identifiers, data carriers, exchange protocols, storage, lifecycle APIs and interoperability.
How does Decision 2026/1736 relate to Regulation 2026/1778 and the DPP registry?
+
They are the two halves of the same July 2026 build-out. Decision 2026/1736 (in force 15 July 2026) defines how DPP systems must technically work, by citing the six standards. Implementing Regulation 2026/1778 (adopted 16 July 2026, applying from 6 August 2026) defines how the central registry operates — eIDAS identity verification, registration, the 90-day proof. The registry itself was launched by the Commission on 20 July 2026. Standards for the systems, rules for the registry, and a live registry: the DPP infrastructure textiles will inherit is in place.
Keep Reading

Go Deeper

The registry's operating rulebook — eIDAS verification, 90-day proof, 10-year retention.
Launched 20 July 2026 — what is operational and what has not changed.
The eight-standard family behind the DPP, in plain language.
The identifier route EN 18219 endorses — and how a factory gets one.
Sources & official references
DPPLive's Take

The Yardstick Arrived Before the Obligation Did

Garment exporters now know exactly which technical rails their passports will run on — years before textile passports become mandatory. The winning move is unchanged: clean identifiers, smartphone-readable carriers, and a platform built to the cited standards. DPPLive builds to the EN 1821x series on the factory side, so the question "is your provider standards-built?" has a one-word answer.

Contact Us

Get in Touch.
We Respond Within 24 Hours.

📍
Office
Dhaka, Bangladesh
💬
WhatsApp
+8801727268289
Free DPP Readiness Assessment
Not sure where to start? Answer 15 questions and instantly see your compliance gaps — with a downloadable report. Free, 3 minutes — in English, বাংলা, Tiếng Việt & 中文.
Send Us a Message
DPP Guide Regulation Features Demo 📋 Free Assessment Contact News Blog Events Sign In