EU harmonised standards, kept honest

Official deadlines move. The old dates vanish. We keep the receipts.

Official pages only show today's dates. We archive them every day and keep every change: dated, sourced, citable.

Get the weekly changelog Read the analysis: the first CRA deadline →

-12 days

until CRA Article 14 incident reporting applies on 11 September 2026, with 0 harmonised standards cited to build against.

Cited for the CRA

Standards under watch

1,423

Sources, captured daily

Last capture 23 September 2026, 10:04 UTC

Status

Where every regime stands

One row per regulation. The dates shown are today's official positions; the archive holds every previous one.

Cyber Resilience Act

Regulation (EU) 2024/2847

Reporting from 11 Sep 2026 · full application 11 Dec 2027 · first adoption deadline 30 Aug 2026, unchanged on the official record

✕ 0 standards cited

page watch, daily

AI Act

Regulation (EU) 2024/1689

High-risk re-dated in July 2026: Annex III 2 Dec 2027 · Annex I 2 Aug 2028

✕ 0 standards cited

page watch, daily

Radio Equipment

Directive 2014/53/EU

EN 18031 cited 30 Jan 2025, with restrictions published in the list itself

△ Cited, with restrictions

14 refs tracked

Machinery

Reg. (EU) 2023/1230

New regulation applies 20 Jan 2027 · standards list amended six times since 2023

✓ List live

1,329 refs tracked

General Product Safety

Regulation (EU) 2023/988

Live list with per-standard citation and withdrawal dates

✓ List live

80 refs tracked

Changelog

What moved on the official record

Every entry links the source that changed. The full history is preserved as dated diffs.

23 September 2026, 10:04 UTC
- Commission: AI Act standardisation (JTC 21 status) · source
18 September 2026, 09:51 UTC
- Commission: AI Act standardisation (JTC 21 status) · source
17 September 2026, 10:04 UTC
- Commission: harmonised standards hub · source
- Commission: AI Act standardisation (JTC 21 status) · source
09 September 2026, 09:51 UTC
- Commission: harmonised standards, Machinery (2006/42/EC and 2023/1230) · source

Evidence

Straight from the record, not retyped

What the archive preserves that the official pages no longer show. Every date below is verified against the decision that carries it.

The standard that arrived with an asterisk

EN 18031-1:2024

Common security requirements for radio equipment - Part 1: Internet connected radio equipment

Cited 30.01.2025 by Decision (EU) 2025/138, amending Decision (EU) 2022/2191 under the Radio Equipment Directive

Restriction. Notice 1: The sections named 'rationale' and 'guidance', in this harmonised standard, do not confer a presumption of conformity with the essential requirement set out in Article 3(3), first subparagraph, point (d), of Directive 2014/53/EU.

Restriction. Notice 2: This harmonised standard does not confer a presumption of conformity with the essential requirement set out in Article 3(3), first subparagraph, point (d), of Directive 2014/53/EU if, when applying its clauses 6.2.5.1 and 6.2.5.2, the user is allowed not to set and use any password.

What a repeal and replace looks like when you keep both lists

10.10.2019
EN 913:2018 cited in the OJ by Decision (EU) 2019/1698
27.04.2026
Decision (EU) 2026/901 repeals that decision and republishes the whole GPSR list
27.04.2026
EN 913:2018 survives the republication and stays cited in Annex I
27.10.2027
In the same decision EN 915:2008 is withdrawn, its successor EN 915:2024 cited in its place

Source: Commission Implementing Decision (EU) 2026/901 of 17 April 2026, published 27 April 2026

A one-character change to the top penalty tier

20.11.2024
Regulation (EU) 2024/2847 as printed in the OJ: Article 64(10) reads “By way of derogation from paragraphs 3 to 9”. The carve-outs for microenterprises, small enterprises and open-source stewards do not reach the top fine tier in paragraph 2.
02.07.2025
Corrigendum 2025/90555 changes it to “paragraphs 2 to 9”. The carve-outs now include the top tier. The original wording is gone from the current text.

Source: Corrigendum R(02) to Regulation (EU) 2024/2847, OJ 2 July 2025

Download a sample audit-grade diff (JSON) · real records from the archive, with source documents, dates and checksums

The monthly statistics page, The EU harmonised standards record, September 2026, is free to cite under CC BY 4.0.

Method

How the archive works

Capture

Daily fetch of the public official sources: Commission standards lists and pages, implementing decisions on EUR-Lex. Metadata and published text only, within each site's robots rules.

Compare

Each capture is normalised and hashed. If a date, a reference or a restriction moved since yesterday, the change is recorded with source and timestamp.

Keep

Nothing is overwritten. Every version is kept as a dated diff, so what was promised, when it changed and what it became can always be cited.

What the numbers count. Standards under watch counts reference rows in the Commission's summary lists for each regime, which is why machinery dominates the total: it is by far the largest list. Sources captured daily counts the official pages and documents fetched each run, not the standards in them. Counts taken from a single decision text on EUR-Lex are a different measurement and are labelled as such wherever they appear.

What happens when a source fails. A fetch that errors is recorded as an error and retried, not treated as a change. Where a run has produced entries that look like movement but are not, we annotate that run on the changelog and say so. Three of the entries below are annotated that way, because they were our own filter and fetch behaviour rather than the official record moving.

Analysis

The first CRA standards deadline has passed →

On 30 August 2026 the first deadline in the standardisation request fell due, with no harmonised standard cited in the Official Journal. The dated record, from primary sources.

The CRA countdown is running. The standards are not.