M/614 - Data
EU Trusted Data Framework
Mandate M/614 concerns the development and standardisation of the EU Trusted Data Framework. Issued as a CEN Board of Directors decision under reference CEN/BT C090/2025, this mandate directs European Standardisation Organisations (ESOs) to establish interoperable standards that support secure, trustworthy, and lawful data sharing within the EU. The framework aims to enhance data governance and trust among stakeholders, facilitating the free flow of data in compliance with EU regulations. The mandate focuses on creating technical specifications to underpin data protection, privacy, and transparency to foster a secure digital single market.
Purpose
The EU Trusted Data Framework mandate aims to establish a standardized framework to ensure trust and interoperability in the collection, sharing, and use of data within the European Union. This framework is intended to support secure and reliable data exchange that aligns with EU policies and legal requirements.
Standardisation request
The mandate requests standardisation bodies to develop technical standards and guidelines that define the mechanisms, protocols, and criteria for trusted data handling. This includes ensuring data integrity, privacy, and compliance with relevant regulations to foster confidence among data providers and users.
Expected deliverables
Expected deliverables under this mandate include:
- A set of harmonized standards defining trust mechanisms for data management.
- Specifications for data exchange protocols that ensure security and privacy.
- Guidelines for compliance assessment and certification to validate adherence to the trusted data framework.
- Tools or frameworks facilitating interoperability among different data systems within the EU.
Context
This mandate aligns with the EU’s broader digital strategy to create a single market for data and enhance data-driven innovation while ensuring the protection of fundamental rights. It supports initiatives that promote secure data flows and trustworthy data ecosystems, contributing to the EU’s digital autonomy and competitiveness. The decision referenced (CEN/BT C090/2025) validates the formal engagement of European standardisation bodies in this process.
This mandate covers the development of standardisation for the EU Trusted Data Framework, focusing on establishing mechanisms and specifications to ensure trustworthiness, interoperability, and security of data across various sectors within the EU. It aims to create common European standards to govern data sharing and management in digital environments.
General Information
This document provides terminology, concepts and a description of mechanisms in the field of data exchange focusing on trusted data transactions.
Those elements can be used in the development of standards in support of trusted data transactions and constitute a basis to identify key dimensions and criteria that contribute to the trust in a data transaction between interested parties.
Therefore, those elements constitute a foundational understanding on which trusted data transactions can be based, independently of any architectural choices or technical implementation.
- Standard13 pagesEnglish languagee-Library read for1 day
This document provides terminology, concepts and a description of mechanisms in the field of data exchange focusing on trusted data transactions.
Those elements can be used in the development of standards in support of trusted data transactions and constitute a basis to identify key dimensions and criteria that contribute to the trust in a data transaction between interested parties.
Therefore, those elements constitute a foundational understanding on which trusted data transactions can be based, independently of any architectural choices or technical implementation.
- Standard13 pagesEnglish languagee-Library read for1 day
This document defines a framework for assessing the quality of data governance and data management practices for participants in data spaces. It specifies the core principles, processes, and assessment elements that enable organizations to manage, monitor, and improve their data governance and data management practices.
The framework comprises two components:
• Process Reference Model: Defines key processes for data governance and data product management of data space participants, including its fundamental principles, structure, detailed process definitions, links to broader data governance, and required implementation measures.
• Process Assessment Framework: Outlines a model to evaluate process capability by establishing six distinct quality levels expressed in terms of capability levels, describing the corresponding profiles and guiding the systematic assessment.
This standard is aimed at supporting data governance and data management professionals, IT managers, quality assurance officers, and regulatory bodies.
This standard is applicable to organizations of all types and sizes.
- Draft85 pagesEnglish languagee-Library read for1 day
This document provides trustworthiness requirements and guidance for data space participants in support of trusted data transactions.
Specifically, it defines a set of foundational principles for trusted data transactions, and establishes general requirements and guidance that apply to all phases of a trusted data transaction, and specific requirements for each phase of a trusted data transaction.
This document applies to all types of organizations participating in data spaces, regardless of their type or size.
- Draft24 pagesEnglish languagee-Library read for1 day
This document defines a framework for assessing the quality of data governance and data management practices for participants in data spaces. It specifies the core principles, processes, and assessment elements that enable organizations to manage, monitor, and improve their data governance and data management practices.
The framework comprises two components:
• Process Reference Model: Defines key processes for data governance and data product management of data space participants, including its fundamental principles, structure, detailed process definitions, links to broader data governance, and required implementation measures.
• Process Assessment Framework: Outlines a model to evaluate process capability by establishing six distinct quality levels expressed in terms of capability levels, describing the corresponding profiles and guiding the systematic assessment.
This standard is aimed at supporting data governance and data management professionals, IT managers, quality assurance officers, and regulatory bodies.
This standard is applicable to organizations of all types and sizes.
- Draft85 pagesEnglish languagee-Library read for1 day
This document provides trustworthiness requirements and guidance for data space participants in support of trusted data transactions.
Specifically, it defines a set of foundational principles for trusted data transactions, and establishes general requirements and guidance that apply to all phases of a trusted data transaction, and specific requirements for each phase of a trusted data transaction.
This document applies to all types of organizations participating in data spaces, regardless of their type or size.
- Draft24 pagesEnglish languagee-Library read for1 day
Frequently Asked Questions
A European Standardization Mandate is a formal request from the European Commission to the European Standardization Organizations (CEN, CENELEC, and ETSI) to develop European standards (ENs) in support of EU legislation and policies. Mandates are issued under Regulation (EU) No 1025/2012 and help ensure that products and services meet the essential requirements set out in EU directives and regulations.
M/614 is a European Standardization Mandate titled "EU Trusted Data Framework". EU Trusted Data Framework There are 6 standards developed under this mandate.
Standards developed in response to a mandate and cited in the Official Journal of the European Union become "harmonized standards". Products manufactured in compliance with harmonized standards benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation, facilitating CE marking and market access across the European Economic Area.