ISO
UN-affiliated international body that publishes voluntary standards used across virtually every industry.
Last refreshed: 17 May 2026 · Appears in 1 active topic
Are EU harmonised AI standards ready in time for the AI Act's enforcement deadlines?
Timeline for ISO
Germany pays maintainers to staff IETF and W3C
European Tech Sovereignty- What is ISO and why do companies need ISO certification?
- ISO is the International Organization for Standardization, a Geneva-based body that publishes voluntary international standards. Companies seek ISO certification to demonstrate compliance with recognised quality, security, or management frameworks required by customers and regulators.Source: iso.org
- Why are ISO standards important for the EU AI Act?
- The EU AI Act references harmonised standards, and ISO is developing AI-specific standards under the ISO/IEC JTC 1/SC 42 committee. Compliance with these ISO standards can be used to demonstrate conformity with the AI Act's requirements.Source: iso.org
- Which ISO standard covers open-source document formats?
- ISO/IEC 26300 specifies the Open Document Format (ODF), the open standard for office documents used by EU governments to avoid vendor lock-in with proprietary formats such as Microsoft Office.Source: event
Background
The International Organization for Standardization is a Geneva-based independent body comprising national standards organisations from 169 countries. It publishes internationally agreed voluntary standards — the ISO series — covering manufacturing, food safety, information security, quality management, environmental management, and hundreds of other domains. ISO 27001 (information security), ISO 9001 (quality management), and the ISO/IEC 27000 series (cybersecurity) are among the most widely adopted globally. Germany's national standards body DIN holds a leading position in ISO governance, and German-funded open-source maintainers participated in ISO technical committees on AI and data formats in 2026 .
ISO works closely with the International Electrotechnical Commission (IEC) for electrotechnical standards and the International Telecommunication Union (ITU) for telecommunications. In the EU context, ISO standards are frequently referenced or made mandatory through EU directives and regulations; Annex III of the AI Act, for example, depends on CEN and CENELEC publishing harmonised standards derived from or aligned with ISO/IEC AI standards. The absence of harmonised CEN/CENELEC standards by the August 2026 AI Act deadline made the Omnibus enforcement delay structurally unavoidable.
ISO's significance for European tech sovereignty is indirect but foundational: ISO/IEC standards on data formats (ISO 26300 for ODF), AI management systems (ISO/IEC 42001), and supply chain security form the technical baseline that EU conformity assessments reference. European dominance in ISO technical committees — through DIN, AFNOR (France), and BSI (UK) — is a structural advantage Brussels is seeking to maintain as US and Chinese participation grows.
