The CEN and CENELEC Digital Product Passport standards are a family of six core European standards, numbered across the EN 18216 to 18223 range, that define how a Digital Product Passport works as a system. They are horizontal, which means they set the shared rules for identifiers, data carriers, storage and exchange that every DPP relies on, rather than deciding which data a textile or a battery must carry. The six core standards were published on 27 May 2026 and cited as harmonised standards in the Official Journal on 15 July 2026.
If the European Digital Product Passport is the law, these standards are the engineering manual that makes it buildable. This guide explains what each one covers, in plain language, and what they mean for a brand getting ready.
What are the CEN DPP standards?
The CEN DPP standards are the technical rulebook for the Digital Product Passport, developed by the joint committee CEN/CLC/JTC 24, Digital Product Passport, Framework and System, under European Commission mandate M/604. They translate the requirements of the Ecodesign for Sustainable Products Regulation (ESPR) into a concrete, testable system that every product sector can build on.
Two words explain why they matter. The first is horizontal. These standards define the framework, the plumbing shared by every passport, so a battery passport and a textile passport work the same way underneath even though they carry different data. The second is harmonised. Because the Commission has cited the core standards in the Official Journal, building to them gives a presumption of conformity with the relevant parts of the regulation. In plain terms, following the standard is the accepted way to prove you did it right.
What does each of the six standards cover?
The six core standards each own one part of how a passport works, from the identifier that names a product to the way different systems talk to each other. Here is the family in plain language:
- EN 18216, data exchange. The protocols for moving passport data between systems, so a passport created in one platform can be read and updated by another.
- EN 18219, unique identifiers. How a product, and its passport, are uniquely named so a scan always resolves to the right item. This is the layer a GS1 Digital Link identifier sits in.
- EN 18220, data carriers. The physical link on the product, such as a QR code, that a person or a scanner uses to open the passport.
- EN 18221, data storage. How passport data is stored, archived and kept available over a product's life, including after a company changes or disappears.
- EN 18222, APIs and lifecycle. The programming interfaces and the rules for how a passport is created, updated and retired as the product moves through its life.
- EN 18223, interoperability. The rules that let different passports and different systems work together across sectors and borders, so the whole thing behaves as one network rather than many silos.
Two further standards, on security and confidentiality and on data authentication and integrity, are being finalised and will complete the set. Together they cover keeping passport data safe and proving it has not been tampered with.
Do the CEN standards tell me what data my product needs?
No. The CEN standards are horizontal, so they define how a passport works, not which data your product must carry. What a specific product has to disclose comes from its own sector rules, the delegated acts under the ESPR for product groups like textiles, batteries and electronics, not from EN 18216 to 18223.
This split is deliberate and useful. It means the framework is stable while the product requirements grow, so a system built to the standards today keeps working as new sectors are added. Our guides on the product passport for textiles and the battery passport cover the sector data that sits on top of this framework.
Why do the CEN standards matter for a brand?
The CEN standards matter because they turn the Digital Product Passport from a policy idea into something you can actually buy, build and trust. Before them, every vendor could interpret the rules differently. Now there is one shared definition of a compliant passport, which protects a brand in three ways.
- Presumption of conformity. Building to the harmonised standards is the recognised route to showing your passport meets the regulation, which reduces legal risk.
- No lock in. Because identifiers, carriers and interfaces are standardised, a passport is portable. You are not trapped in one vendor's private format.
- Future proofing. The framework is fixed while sector data expands, so the system you set up now does not need rebuilding each time a new rule arrives.
For a brand choosing how to comply, the practical takeaway is to pick tools that follow this family of standards rather than a private scheme. Our guide on how to create a Digital Product Passport walks through the setup, and the European DPP registry guide covers where the identifiers are registered.
How does GS1 Digital Link fit the CEN standards?
GS1 Digital Link fits directly into the identifier and data carrier layers of the CEN standards, EN 18219 and EN 18220. A GS1 Digital Link QR code is a standardised, globally unique way to name a product and carry the link to its passport, which is exactly what those two standards ask for.
That alignment is the point. Because the same GS1 Digital Link code is both a retail barcode and a passport carrier, a brand can meet the identifier and carrier requirements of the standards with one code on the pack, then let the passport data behind it grow as sector rules arrive. The code stays the same while the system around it fills in.
Frequently asked questions
How many CEN DPP standards are there?
Six core standards are published, numbered across the EN 18216 to 18223 range: EN 18216, EN 18219, EN 18220, EN 18221, EN 18222 and EN 18223. Two further standards on security and data authentication are being finalised.
When were the CEN DPP standards published?
The six core standards were published on 27 May 2026 and cited as harmonised standards in the Official Journal of the European Union on 15 July 2026.
Are the CEN standards mandatory?
The standards themselves are voluntary, but building to them gives a presumption of conformity with the Digital Product Passport requirements of the ESPR, which makes them the recognised way to show a passport is compliant.
Do the CEN standards replace my sector's rules?
No. They define the shared framework for how a passport works. The data your specific product must carry still comes from the delegated act for your product group under the ESPR.
