IoT Cyber Labels, EU DPP & Chemicals

Three recent regulatory developments are shaping the future of product compliance for manufacturers from IoT cybersecurity labelling to digital product passports and hazardous chemical regulations in Southeast Europe.

🇺🇳 ISO/IEC 27404:2025 – IoT Cybersecurity Labelling

ISO/IEC 27404:2025 is an international standard for cybersecurity and privacy labeling frameworks for consumer IoT (Internet of Things) products.

This standard provides requirements and guidance for the development and implementation of cybersecurity labeling programs for consumer IoT products. Its primary goal is to establish a nationally and internationally harmonized and mutually recognizable labeling model that allows end users to choose more cybersecurity-secure products.

The standard is applied to end-user IoT products such as smart cameras, home automation systems, connected white goods, wearable devices, smart children's toys, and home assistants.

Statut: Active enforcement – Published on October 17, 2025. Although implementation depends on national regulatory processes, ISO/IEC standards are considered valid from the date of publication.

Learn more here

📌 What This Means for Manufacturers

• Begin security labelling gap assessments across all relevant SKUs, especially in smart home and wearable segments.
• Ensure internal product development includes traceable cybersecurity assurance measures aligned with ISO/IEC.
• Coordinate with compliance and marketing teams to prepare localized labelling strategies based on national adoption timelines.

🇲🇪 Montenegro Chemicals Regulation - Restricted Substances Update (2025)

Montenegro's Official Gazette of Montenegro, No. 112/2025 - Regulation on Chemicals is a new and updated regulation on chemicals published on October 6, 2025, and entered into force on October 14, 2025.

The aim is to improve public health and the environment by bringing national legislation into greater compliance with EU chemical substance legislation. This regulation updates Montenegro's legal framework on hazardous chemicals and POPs and aligns it with the EU.

Statut: In effect – Covers all producers, importers, and distributors operating in Montenegro.

Learn more here

📌 What This Means for Manufacturers

• Review chemical compliance documentation and update Safety Data Sheets (SDS) to match EU-aligned substance rules.
• For export into Montenegro, confirm that restricted chemicals used in formulations meet the updated criteria.
• Assign regulatory monitoring responsibility to your EHS team for non-EU market transitions aligning with EU law.

🇪🇺 EU Digital Product Passport (DPP) – Timeline 2026 - 2027

The European Commission has been actively preparing legislation and holding stakeholder meetings regarding the Digital Product Passport (DPP).

The DPP will initially become mandatory in the battery and accumulator sector, and as of February 18, 2027, sales of certain battery types in the EU market without the DPP will be prohibited.

The DPP guidelines and central digital registration system are expected to be published by July 2026. Active technical work is underway on the DPP-related data model, QR code digital ID creation, data updating, third-party verification, and inter-system integration details.

Statut: In effect – A public consultation on DPP service provider requirements recently closed. Implementation deadlines are fast approaching.

Learn more here

📌 What This Means for Manufacturers

• Design data infrastructure now to support digital passports, including traceability, lifecycle, and sustainability disclosures.
• Prioritize affected categories (batteries, textiles, toys, detergents) in 2026–2027 product roadmaps and documentation workflows.
• Assign IT and compliance teams to track and integrate EU’s upcoming centralized DPP system to avoid market exclusion in 2027.

✅ Ready to operationalize these changes across your portfolio? EcoComply continuously tracks regulatory changes like these and turns them into actionable compliance tasks, dashboards, and workflows — so your team stays ahead of every shift.