Regulation (EU) 2016/425 is the main EU law governing the design, manufacture and marketing of personal protective equipment. It requires PPE placed on the EU market to meet applicable essential health and safety requirements, follow a conformity assessment route based on the risk category, carry the correct CE marking and be supported by traceable technical and legal documentation.
The regulation applies directly across EU Member States and has applied since 21 April 2018. It is still in force. The current consolidated EUR-Lex text available when this guide was checked is dated 29 May 2026, so businesses should use that consolidated version rather than relying only on the original 2016 publication.
This guide explains how the system fits together. It is general information, not legal advice or a substitute for reviewing the exact PPE, intended use, target Member State and current official documents.
What Is Regulation (EU) 2016/425?
Regulation (EU) 2016/425 sets legal requirements for PPE that is made available on the EU market. Its purpose is twofold: to protect users’ health and safety and to support the free movement of compliant PPE within the Union.
The law focuses on the product itself. It covers design, manufacture, risk assessment, conformity assessment, technical documentation, instructions, traceability, the EU declaration of conformity and CE marking. It also assigns responsibilities to manufacturers, authorised representatives, importers and distributors.
This is different from workplace rules about when employees must wear PPE or which equipment an employer should select for a task. Those questions are addressed through occupational safety legislation, national requirements and the workplace risk assessment. A helmet can comply with the product regulation and still be unsuitable for a particular hazard, environment or user.
Is the PPE Regulation Still Current in 2026?
Yes. Regulation (EU) 2016/425 remains in force, but it should be read in its current consolidated form. The EUR-Lex version dated 29 May 2026 incorporates later changes, including emergency-related provisions added through EU internal-market legislation.
The regulation was adopted in March 2016, repealed Directive 89/686/EEC and became generally applicable on 21 April 2018. The old transition has ended. PPE newly placed on the EU market cannot now rely on an old EC type-examination certificate issued under Directive 89/686/EEC; the transitional validity provided by the regulation ended in 2023.
The European Commission’s current interpretive document is the PPE Regulation Guidelines, 5th edition, October 2025. The guidelines help explain application questions but are not binding law. For legal requirements, the regulation and other acts published in the Official Journal remain the primary sources.
Which Products Are Covered by the Regulation?
The regulation covers equipment designed and manufactured to be worn or held by a person for protection against one or more health or safety risks. That definition includes familiar products such as safety helmets, protective gloves, safety footwear, protective clothing, eye and face protection, hearing protection, respirators and fall-protection equipment.
It can also cover two less obvious groups:
- Interchangeable components that are essential to the protective function of PPE.
- Certain connection systems that link PPE to an external device or reliable anchorage point, provided they are not permanently fixed and do not require fastening work before use.
The intended protective purpose matters more than the product’s everyday name. A garment sold only as a uniform is not automatically PPE. If it is designed and marketed to protect against a defined hazard, the protective claim, design and evidence must be assessed under the applicable rules.
What Is Outside the Scope of Regulation (EU) 2016/425?
Article 2 contains specific exclusions. These include PPE designed especially for armed forces or law enforcement, self-defence products other than sporting PPE, certain private-use products for non-extreme weather or dishwashing, equipment used exclusively on seagoing vessels or aircraft under relevant international treaties, and motorcycle head, face or eye protection covered by UNECE Regulation No. 22.
An exclusion from this PPE regulation does not mean a product is unregulated. Another EU act, national law or sector-specific system may apply. Scope should therefore be decided from the exact product, protective claim, intended user and market, not from a generic catalogue category.
What Are Category I, Category II and Category III PPE?
The three categories classify the risk against which the PPE is intended to protect. They do not grade product quality, and Category III does not simply mean that a product is “better” than Category II.
| Category | Risk scope under Annex I | Conformity assessment route | Notified-body involvement |
| Category I | Only the minimal risks listed in Annex I, such as superficial mechanical injury, weak cleaning materials, hot surfaces not exceeding 50 C, non-extreme weather and ordinary sunlight exposure | Module A: internal production control | No notified body is required for the prescribed route |
| Category II | Risks that are not listed in Category I or Category III | Module B EU type-examination, followed by Module C conformity to type | A notified body conducts Module B |
| Category III | Listed risks that may cause death or irreversible damage to health, including harmful substances, oxygen deficiency, falls from height, electric shock, drowning and harmful noise | Module B plus either Module C2 or Module D | A notified body is involved in type examination and ongoing production assessment |
Category II is a residual category, not a closed list. Category III, by contrast, is tied to the serious risks listed in Annex I. Those include hazardous substances and mixtures, oxygen-deficient atmospheres, harmful biological agents, ionising radiation, extreme heat or cold as defined by the regulation, falls from height, electric shock and live working, drowning, chainsaw cuts, high-pressure jets, bullet or knife wounds, and harmful noise.
Classification follows the claimed protective risk. Products that look similar may therefore follow different routes if their intended protection is different. The category should be established before selecting the conformity assessment procedure or preparing markings and documents.
How Does Conformity Assessment Change by PPE Category?
The conformity route becomes more demanding as the consequences of failure increase. The manufacturer remains responsible for compliance in every category, even when a notified body is involved.
Category I: Module A
For Category I, the manufacturer uses internal production control. It prepares the technical documentation, ensures manufacturing remains consistent with that documentation, draws up the EU declaration of conformity and affixes the CE marking. A notified body is not part of the prescribed Module A route.
This is sometimes described as self-certification, but that phrase can be misleading. Category I is not document-free or test-free. The manufacturer must still demonstrate that the product meets all applicable essential health and safety requirements.
Category II: Module B Plus Module C
Category II requires EU type-examination under Module B. A notified body examines the technical design, reviews the technical documentation and assesses a representative specimen. If the type meets the requirements, the body issues an EU type-examination certificate.
Production then follows Module C. The manufacturer is responsible for ensuring that manufactured PPE remains in conformity with the approved type and the regulation.
Category III: Module B Plus Module C2 or Module D
Category III also begins with Module B, but ongoing production control requires a notified body. The manufacturer chooses either supervised product checks at random intervals under Module C2 or quality assurance of the production process under Module D.
Under C2, product checks are carried out at least once a year at random intervals determined by the notified body. Under Module D, the manufacturer operates an approved quality system for production, final inspection and testing, subject to notified-body surveillance.
What Are the Essential Health and Safety Requirements?
The essential health and safety requirements, often shortened to EHSRs, are the legally compulsory design and performance requirements in Annex II. Only the requirements relevant to the PPE and its intended protection apply.
Annex II begins with a risk assessment. The manufacturer must identify the risks that apply to the PPE, design the product around that assessment and consider both intended and reasonably foreseeable use. General requirements address matters such as adequate protection, ergonomics, materials that do not adversely affect users, comfort, compatibility, adjustment systems, markings and the information supplied by the manufacturer.
Additional sections address specific hazards, including mechanical impact, falls, vibration, heat, flame, cold, electric shock, radiation, hazardous substances and respiratory risks. Compliance is therefore more than passing one headline test. The complete design and documentation must address the applicable requirements for the exact protective purpose.
Are Harmonised EN Standards Mandatory?
No. Harmonised standards are generally voluntary technical tools, not the regulation itself. A manufacturer may use another technical solution, but it must still demonstrate that the applicable EHSRs are met.
The advantage of a harmonised standard is presumption of conformity. When a PPE product conforms to a standard, or relevant part of a standard, whose reference has been published in the Official Journal, the product is presumed to meet the EHSRs covered by that reference. The presumption does not extend to requirements outside the standard’s coverage.
Three checks are important:
- Confirm the exact standard number, edition and amendment used for the product.
- Confirm that the reference is currently published in the Official Journal for Regulation (EU) 2016/425.
- Check restrictions, corrigenda and withdrawal dates, especially when an older edition is being replaced.
As of this article’s review, Commission Implementing Decision (EU) 2026/1279 is the current Official Journal act consolidating PPE harmonised-standard references. It repealed Decision (EU) 2023/941, although specified older references continue only until the withdrawal dates shown in Annex II of the 2026 decision.
This is why a standard printed on a certificate should not be silently updated in marketing copy. If a certificate names an older edition, record that edition accurately and assess the transition and product impact. A revised standard does not automatically invalidate every existing certificate, but neither does an old certificate prove conformity with the new edition.
What Technical Documentation Must a Manufacturer Prepare?
Annex III requires technical documentation that explains how conformity was achieved. It is a product evidence file, not just a certificate folder.
The required content includes a description of the PPE and intended use, the risk assessment, applicable EHSRs, design and manufacturing drawings, explanations of how the product works, standards or other technical specifications used, design calculations, inspection and test results, production-control methods, and the manufacturer’s instructions. Custom-fitted or individually adapted PPE requires additional information.
| Document or record | What it demonstrates | What it does not prove by itself |
| Technical documentation | How the exact PPE design addresses the applicable EHSRs and how production conformity is controlled | That every product variant is automatically covered |
| Test report | Results for the tested sample, method and conditions | Legal conformity of an unidentified or different production model |
| EU type-examination certificate | A notified body has approved the technical type under Module B | Ongoing production conformity, or coverage of unlisted variants |
| EU declaration of conformity | The manufacturer’s legal declaration for the identified PPE model | That a third party has assumed the manufacturer’s responsibility |
| Module C2 or D evidence | Ongoing Category III production-control involvement | Suitability for a workplace hazard outside the approved scope |
Manufacturers must retain the technical documentation and EU declaration of conformity for 10 years after the PPE has been placed on the market. Importers must keep a copy of the declaration and be able to make the technical documentation available to authorities on request.
What Is the EU Declaration of Conformity?
The EU declaration of conformity, or EU DoC, is the manufacturer’s legal statement that the applicable EHSRs have been demonstrated. By issuing it, the manufacturer assumes responsibility for compliance with the regulation.
The declaration must follow the structure in Annex IX and identify the PPE clearly. It includes the manufacturer, the object of the declaration, applicable Union legislation, standards or other technical specifications, notified-body and EU type-examination details where relevant, the Category III C2 or D route where applicable, and the authorised signatory.
The EU DoC must be kept current and translated into the language or languages required by the Member State where the PPE is placed or made available. The manufacturer must either supply a copy with the PPE or give, in the instructions, the internet address where the declaration can be accessed.
What Does CE Marking Mean on PPE?
CE marking is the manufacturer’s indication that the PPE conforms to the applicable EU harmonisation requirements that require the mark. It is not a quality award, a ranking of protection, a customs guarantee or evidence that one certificate covers every model sold by a supplier.
The CE marking must normally be visible, legible and indelible on the PPE before it is placed on the market. If product marking is impossible or not warranted because of the PPE’s nature, the mark may be placed on the packaging and accompanying documents.
For Category III PPE, the CE marking is followed by the identification number of the notified body responsible for the Module C2 or Module D production assessment. That number should not automatically be assumed to identify the body that issued the Module B certificate; different notified bodies can be involved in the design and production phases.
A CE symbol on a product is therefore a starting point for verification, not the complete evidence set. The model identification, declaration, instructions, certificate scope and production-control evidence must agree.
When Is a Notified Body Required?
A notified body is required for Category II and Category III conformity assessment, but its role depends on the module. Category II requires a notified body for Module B type examination. Category III requires Module B plus notified-body involvement in either Module C2 or Module D.
Not every testing laboratory or certification company is a notified body. The organisation must be notified under Regulation (EU) 2016/425 for the relevant PPE scope and conformity assessment procedure. Its current status and scope should be checked in the European Commission’s NANDO system.
The European Commission also warns that voluntary or unregulated certificates are not recognised proof of conformity under EU PPE law. A laboratory report, an ISO 9001 certificate, a voluntary certificate and an EU type-examination certificate serve different purposes and should not be presented as interchangeable.
New and renewed EU type-examination certificates have a validity period of no more than five years. Review may be needed sooner if the approved type changes, technical documentation changes, or developments in the state of the art affect compliance. A product name remaining unchanged is not enough to show that an old certificate still covers the current construction.
What Are Manufacturers, Importers and Distributors Responsible For?
The regulation assigns duties throughout the supply chain. An overseas factory may be the manufacturer under the regulation if it markets PPE under its own name, while the EU-established business first placing that PPE from a third country on the Union market is the importer.
| Economic operator | Main responsibilities under the PPE Regulation |
| Manufacturer | Design and manufacture to applicable EHSRs; prepare the risk assessment and technical documentation; complete the correct conformity route; issue the EU DoC; affix CE marking; provide identification, contact details and instructions; maintain production conformity; take corrective action when needed |
| Authorised representative | Perform only the tasks stated in the written mandate; keep and provide documents and cooperate with authorities. The mandate cannot transfer the manufacturer’s duty to design compliant PPE or draw up the technical documentation |
| Importer | Place only compliant PPE on the market; verify the manufacturer’s assessment, technical documentation, CE marking and required documents; add importer contact details; maintain suitable storage and transport; retain the EU DoC and support authority requests |
| Distributor | Act with due care; verify CE marking, required documents, instructions and traceability information; protect conformity during storage and transport; stop supply and support corrective action if non-conformity or risk is suspected |
An importer or distributor becomes subject to manufacturer obligations if it places PPE on the market under its own name or trademark, or modifies the product in a way that may affect conformity. Private labelling is therefore a legal responsibility issue, not just a packaging change.
How Can You Check Whether PPE Evidence Matches the Exact Product?
Start with identity and scope. The model, variant, materials, intended protection, performance class and markings on the supplied PPE should be traceable to the documents being reviewed.
A practical review should compare:
- Product model, type, batch or serial identification.
- Claimed risk and PPE category.
- Standard number, edition, amendments, class and performance levels.
- EU declaration of conformity and the exact model it identifies.
- EU type-examination certificate for Category II or III PPE.
- Module C2 or D body and evidence for Category III production control.
- Manufacturer and importer identity and contact information.
- Product marking, label, packaging and user instructions.
- NANDO status and notified scope of each body involved.
Any mismatch should be investigated before the product is represented as compliant. Common warning signs include a declaration for a different model, a certificate that omits the sold variant, unexplained changes in materials, a standard edition rewritten in marketing copy, or a Category III CE number that does not match the production-control documentation.
What Compliance Claims Should Be Avoided?
Broad phrases such as “CE certified,” “EU approved” or “complies with all EN standards” often hide the evidence that actually matters. CE marking is based on compliance with applicable legislation; it is not a universal certificate issued for an entire product category.
Public claims should identify only what the exact model and current documents support. Safer wording distinguishes between an available option and a verified configuration. For example: “An EN ISO 20345 option may be available; the exact model, protection class, standard edition and supporting conformity documents should be confirmed for the selected configuration.”
The same restraint applies to old certificates. Quote the standard edition and product scope shown in the document. Do not claim that a certificate based on an older edition proves compliance with the latest edition unless the model-specific review and updated evidence support that statement.
Frequently Asked Questions
Does every PPE product sold in the EU need CE marking?
PPE within the scope of Regulation (EU) 2016/425 must complete the applicable conformity procedure and bear CE marking before it is placed on the EU market. Products excluded from the regulation may fall under a different legal system, so scope must be checked first.
Can a manufacturer self-certify PPE?
Category I follows Module A internal production control without a notified body in the prescribed route. Category II and III PPE require notified-body involvement. In every category, the manufacturer remains responsible for meeting the applicable requirements and maintaining technical documentation.
Is an EN standard the same as the PPE Regulation?
No. The regulation is law. A harmonised EN or EN ISO standard is a voluntary technical route that can provide presumption of conformity for the EHSRs it covers when its reference is published in the Official Journal.
Why is a notified-body number shown after the CE mark on some PPE?
Category III PPE must show the identification number of the notified body involved in Module C2 or Module D production assessment. The number relates to that ongoing production-control role and does not necessarily identify the body that issued the Module B certificate.
How long is an EU type-examination certificate valid?
A newly issued or renewed certificate may be valid for no more than five years. Earlier review can be required when the approved type, documentation or state of the art changes. Validity dates alone are not enough; the product and certificate scope must still match.
Conclusion
Regulation (EU) 2016/425 is a risk-based product law. It begins with the intended protective function, assigns the PPE to Category I, II or III, and then links that category to the required conformity assessment route. Technical documentation, the EU declaration of conformity, CE marking and notified-body evidence each play a different role.
For a manufacturer, importer, distributor or industrial buyer, the useful question is not simply whether a product carries a CE symbol. It is whether the exact PPE model, claimed protection, current standard reference, conformity route, instructions and legal documents form one consistent evidence chain.
For a broader introduction to PPE categories, selection and workplace use, see https://www.anbusafety.com/personal-protective-equipment/.
Authoritative Sources
- Current consolidated text of Regulation (EU) 2016/425, EUR-Lex: https://eur-lex.europa.eu/eli/reg/2016/425/2026-05-29/eng
- Commission Implementing Decision (EU) 2026/1279 on PPE harmonised standards: https://eur-lex.europa.eu/eli/dec_impl/2026/1279/oj
- European Commission harmonised standards page for PPE: https://single-market-economy.ec.europa.eu/single-market/goods/european-standards/harmonised-standards/personal-protective-equipment_en
- NANDO notified bodies database: https://webgate.ec.europa.eu/single-market-compliance-space/notified-bodies
English 
Spanish 
French