ISO is the International Organization for Standardization, a Geneva-based body that publishes voluntary international standards. Companies seek ISO certification to demonstrate compliance with recognised quality, security, or management frameworks required by customers and regulators.Source: iso.org

Why are ISO standards important for the EU AI Act?

The EU AI Act references harmonised standards, and ISO is developing AI-specific standards under the ISO/IEC JTC 1/SC 42 committee. Compliance with these ISO standards can be used to demonstrate conformity with the AI Act's requirements.Source: iso.org

Which ISO standard covers open-source document formats?

ISO/IEC 26300 specifies the Open Document Format (ODF), the open standard for office documents used by EU governments to avoid vendor lock-in with proprietary formats such as Microsoft Office.Source: event

Background

The International Organization for Standardization is a Geneva-based independent body comprising national standards organisations from 169 countries. It publishes internationally agreed voluntary standards — the ISO series — covering manufacturing, food safety, information security, quality management, environmental management, and hundreds of other domains. ISO 27001 (information security), ISO 9001 (quality management), and the ISO/IEC 27000 series (cybersecurity) are among the most widely adopted globally. Germany's national standards body DIN holds a leading position in ISO governance, and German-funded open-source maintainers participated in ISO technical committees on AI and data formats in 2026 .

ISO works closely with the International Electrotechnical Commission (IEC) for electrotechnical standards and the International Telecommunication Union (ITU) for telecommunications. In the EU context, ISO standards are frequently referenced or made mandatory through EU directives and regulations; Annex III of the AI Act, for example, depends on CEN and CENELEC publishing harmonised standards derived from or aligned with ISO/IEC AI standards. The absence of harmonised CEN/CENELEC standards by the August 2026 AI Act Deadline made the Omnibus enforcement delay structurally unavoidable.

ISO's significance for European tech sovereignty is indirect but foundational: ISO/IEC standards on data formats (ISO 26300 for ODF), AI management systems (ISO/IEC 42001), and supply chain security form the technical baseline that EU conformity assessments reference. European dominance in ISO technical committees — through DIN, AFNOR (France), and BSI (UK) — is a structural advantage Brussels is seeking to maintain as US and Chinese participation grows.

Source Material

International Organization for Standardization — Wikipedia ISO official site

How the World Sees Them

China

Increasing ISO participation, particularly in AI (ISO/IEC JTC 1/SC 42) and data governance; European and US delegations monitor Chinese proposals that would embed state-access backdoors.

Germany

DIN's active leadership in ISO technical committees is a sovereignty asset; Germany funds participation to ensure European regulatory values are embedded in global standards before they become mandatory through EU law.

United States

ANSI participates actively; US companies seek to shape ISO AI and cybersecurity standards to align with less restrictive US regulatory approaches.

European Commission

Depends on ISO/IEC standards as the technical baseline for AI Act conformity assessments; the delay in CEN/CENELEC publishing harmonised standards mirrors slower-than-expected ISO/IEC AI standards completion.