Category: Compliance & Audit

Harmonised Standards

Also known as: Harmonized Standards, Harmonised Standard, Harmonized Standard

Simply put

Harmonised standards are technical standards developed by recognised European standards bodies at the request of the European Commission to help demonstrate that a product meets legal requirements. Using them is typically voluntary, but following them can be treated as evidence that a product conforms to the relevant regulatory requirements. They are not themselves laws, but they function as reference points within certain regulatory frameworks.

Formal definition

In the EU legal context, a harmonised standard is a European standard developed by a recognised European Standards Organisation (CEN, CENELEC, or ETSI) at the request of the European Commission to provide a technical means of demonstrating conformity with legal requirements set out in applicable EU legislation. Compliance with such standards is generally not legally mandatory; rather, adherence commonly serves as a recognised reference for demonstrating conformity within the relevant regulatory framework (for example, the General Safety and Performance Requirements for medical devices and IVDs). Note that the availability and legal effect of harmonised standards depend on the specific legislation invoking them, and that treatment in Great Britain differs following the divergence between the UKCA and CE regimes, where continued recognition of EU-referenced requirements is subject to specific conditions. This entry describes the general concept and does not resolve sector-specific or jurisdiction-specific application, which should be confirmed against the governing legislation.

Why it matters

Harmonised standards occupy an unusual position between voluntary technical guidance and binding law. Within certain EU regulatory frameworks, following a harmonised standard is not mandatory, yet adherence can commonly serve as a recognised reference for demonstrating that a product conforms to the underlying legal requirements. This matters because organisations gain a practical, defensible route to conformity: rather than constructing a bespoke argument that a product meets a legal requirement, they can point to a standard developed for that purpose by a recognised European Standards Organisation. Understanding this distinction—that the standard is evidence of conformity rather than the law itself—is essential to avoid over- or under-stating the legal weight of any given standard.

The stakes are heightened by jurisdictional divergence. Following the separation between the UKCA and CE regimes, the treatment of EU-referenced requirements in Great Britain differs from their treatment in the EU, and continued recognition of EU product requirements is subject to specific conditions. A control team that assumes a standard carries identical legal effect across both regimes risks mischaracterising its compliance posture. Because the availability and legal effect of any harmonised standard depend on the specific legislation invoking it, teams cannot treat "harmonised" as a uniform label that guarantees the same regulatory outcome everywhere.

For regulated sectors such as medical devices and in vitro diagnostics, harmonised standards can function as a practical basis for demonstrating conformity with requirements such as the General Safety and Performance Requirements. This makes them operationally central to how many products reach market. At the same time, reliance on a harmonised standard reduces and structures the conformity burden rather than eliminating underlying legal obligations, and the governing legislation remains the authoritative source of what must be met.

Who it's relevant to

Compliance and regulatory affairs professionals

Those responsible for placing products on the EU or Great Britain market need to understand when following a harmonised standard can serve as recognised evidence of conformity, and when it cannot. They must confirm the legal effect of any standard against the governing legislation rather than assuming uniform treatment, particularly given the divergence between the UKCA and CE regimes.

Medical device and IVD manufacturers

For medical devices and in vitro diagnostics, harmonised standards can function as a basis for demonstrating conformity with requirements such as the General Safety and Performance Requirements. Manufacturers rely on this route to structure their conformity evidence, while recognising that the underlying legal obligations remain set by the applicable legislation.

Auditors and conformity assessment specialists

Auditors evaluating conformity evidence must distinguish between a standard as a voluntary technical reference and the binding legal requirement it helps demonstrate. This distinction affects how they assess the sufficiency of an organisation's compliance argument and whether alternative means of demonstrating conformity have been adequately justified.

Legal and policy professionals

Those advising on market access and cross-border compliance need to track how the legal effect of harmonised standards depends on the invoking legislation and jurisdiction. The differing treatment in Great Britain following the UKCA and CE divergence, where continued recognition of EU product requirements is subject to specific conditions, is a particular area requiring careful, instrument-specific analysis.

Inside Harmonised Standards

Technical Specifications

Harmonised standards typically set out detailed technical requirements and methods that translate higher-level legal obligations into practical, testable engineering and process criteria.

Voluntary Application

As commonly defined in the EU context, harmonised standards are voluntary to apply; an organisation may choose alternative means to demonstrate compliance with the underlying legal requirements.

Presumption of Conformity

Where a harmonised standard is cited in the Official Journal of the EU, conformance with it typically confers a presumption of conformity with the corresponding requirements of the relevant EU legislation it supports.

Link to Underlying Legislation

A harmonised standard exists to support specific EU legal instruments; it does not stand alone as law but operates as a recognised route to meeting requirements set out in binding legislation.

Developed by European Standardisation Organisations

Harmonised standards are typically drafted by recognised European standardisation bodies, often following a mandate or request tied to particular legislation, rather than being issued directly by regulators as binding rules.

Common questions

Answers to the questions practitioners most commonly ask about Harmonised Standards.

Does compliance with a harmonised standard guarantee that my AI system meets all legal requirements?

No. Where a harmonised standard is cited under EU law, conformity with that standard typically confers a presumption of conformity with the specific legal requirements it covers, not with all legal obligations. The presumption is generally rebuttable and limited in scope to the essential requirements the standard addresses. Requirements not covered by the standard, or areas where the standard does not fully map to the legal text, must still be addressed separately. This entry does not assert the specific scope of any particular standard, which should be confirmed against its published mandate and the relevant legal instrument.

Are harmonised standards themselves binding law that organisations are required to follow?

As commonly understood in the EU context, harmonised standards are voluntary technical specifications developed by recognised European standardisation organisations, not legislation. Using them is one route to demonstrate conformity, but an organisation may in principle demonstrate conformity through other means. The distinction matters: the underlying legal requirement is binding, while the standard is a voluntary technical pathway toward meeting it. Whether an alternative route is practical varies by context, and this entry does not claim that any specific alternative is accepted for a given requirement.

How do I confirm whether a particular standard has actually been harmonised for my use case?

A standard's harmonised status typically depends on it being published as such in connection with the relevant EU legal instrument, and on the scope of the mandate under which it was developed. Practitioners generally verify current status against official EU publications rather than relying on a standard's title alone, since a standard may exist without being cited for a specific legal instrument. This entry does not confirm the harmonised status of any named standard; verify the current listing and its stated scope directly.

How should I document reliance on a harmonised standard for audit purposes?

In many governance practices, documentation includes identifying which standard and version was applied, mapping the standard's clauses to the specific legal requirements they are intended to satisfy, and recording any requirements addressed through other means where the standard does not provide full coverage. Retaining evidence of the assessment supports both internal review and external scrutiny. Specific documentation expectations vary by legal instrument and sector, so confirm applicable requirements rather than assuming a single format suffices.

What should I do about requirements that a harmonised standard does not fully cover?

Because the presumption of conformity is typically limited to the requirements a standard addresses, gaps between the standard's coverage and the full set of legal obligations generally need to be identified and managed separately. A common approach is a gap analysis that maps legal requirements against the standard's clauses, then determines alternative controls or evidence for uncovered areas. This is an organisational judgement, and the appropriate treatment depends on the specific requirements and context.

How do harmonised standards fit alongside voluntary standards such as ISO/IEC management system standards?

These serve related but distinct functions and should not be treated as interchangeable. A harmonised standard, in the EU context, is a technical specification that can support a presumption of conformity with specific legal requirements. Voluntary international standards, such as certain ISO/IEC standards, may inform governance practices or serve as inputs but do not automatically carry the same legal presumption unless they have been given harmonised status for a specific instrument. Practitioners typically distinguish which role each standard plays before relying on either for a compliance argument.

Common misconceptions

Harmonised standards are legally mandatory and must be applied.

In the EU context they are typically voluntary. Compliance can generally be demonstrated by other means, though applying a cited harmonised standard commonly provides a presumption of conformity that alternative approaches must otherwise establish.

Harmonised standards are the same as, or interchangeable with, voluntary international standards such as ISO/IEC standards.

Harmonised standards are specifically tied to EU legislation and, when cited in the Official Journal, carry a legal effect (presumption of conformity) within that jurisdiction. General international standards do not carry that EU-specific legal status unless adopted through the harmonisation process. Treat them as distinct even where their technical content overlaps.

Following a harmonised standard eliminates legal or compliance risk.

A presumption of conformity reduces and helps manage compliance risk but does not eliminate it. It typically applies only to the requirements the standard covers, and it can be rebutted; obligations not addressed by the standard still require separate demonstration of compliance.

Best practices

Confirm whether a given standard has been formally cited in the Official Journal of the EU before relying on it for a presumption of conformity, as un-cited standards may not carry that legal effect.

Map each harmonised standard to the specific legal requirements it is intended to support, and identify obligations left uncovered that need alternative evidence of compliance.

Document your rationale when choosing to apply a harmonised standard versus an alternative route to compliance, since application is typically voluntary and the choice should be defensible.

Treat harmonised standards as distinct from general voluntary standards such as ISO/IEC instruments, and do not assume equivalence in legal status even where technical content aligns.

Monitor for updates, withdrawals, or replacement citations of relevant harmonised standards, as their legal effect depends on current listing in the Official Journal.

Communicate clearly to stakeholders that a presumption of conformity reduces but does not eliminate compliance risk and applies only to the requirements the standard addresses.