August 2026 Standards Advance Data Security and Trust in Information Technology

August 2026 marks a significant milestone in Information Technology and Office Equipment standards, with the release of five vital international standards driving advances in data security, privacy, interoperability, governance, and digital trust. These standards address the needs of sectors ranging from healthcare and human resources to digital media and IT governance. Each new publication delivers critical frameworks and actionable requirements for professionals dedicated to secure, efficient, and compliant information management.

Overview / Introduction

The rapid evolution of Information Technology continuously tests organizations' ability to secure sensitive data, ensure interoperability, and demonstrate robust governance. International standards provide the foundation for safe practices, accountability, and innovation across industries. This August, the publication of five diverse standards introduces up-to-date guidance spanning health informatics, human resource data protection, trustworthy digital imaging, personal health support interoperability, and IT governance assessment.

Reading this article, you'll gain insights into:

• The scope, requirements, and best practices of each new standard
• Who needs to comply and key implementation considerations
• The broader impact of these standards on industry practices
• How to leverage these updates for improved security, compliance, and efficiency

Detailed Standards Coverage

ISO 13606-4:2026 - Electronic Health Record Communication Security

Health informatics — Electronic health record communication — Part 4: Security

ISO 13606-4:2026 defines a comprehensive methodology for specifying privileges required to access and communicate electronic health record (EHR) data. As a cornerstone in the overall EHR communications architecture, this standard details how organizations can represent and communicate policy information that informs EHR access decisions, with careful consideration for the complexities of cross-organizational and even cross-border healthcare data sharing.

Key requirements focus on:

• Defining roles and mapping them to granular EHR component sensitivity levels
• Automating access negotiations where possible, reducing the manual workload
• Standardizing representation of access policy metadata within EHR extracts
• Addressing audit log management and traceability for security and compliance

This update introduces clarified examples, improved references, and corrections to enhance its practical utility for healthcare IT professionals, EHR vendors, and compliance officers. Adoption is critical for hospitals, healthcare networks, and any entity that transmits or shares EHR data across boundaries.

Key highlights:

• Fine-grained, role-based access control methodologies
• Mechanisms for communicating access policies and audit logs
• Direct alignment with privacy laws and dynamic patient consent management

Access the full standard:View ISO 13606-4:2026 on iTeh Standards

ISO 30439:2026 - Safe Handling of Human Resource Data

Human resource management — Safe handling of data

ISO 30439:2026 establishes essential guidelines for the safe collection, management, protection, use, and disposal of human resource management (HRM) data. Applicable to organizations of any size and type, this standard ensures the responsible stewardship of sensitive workforce information including personal, financial, and health data.

The standard tackles:

• Sensitivity- and risk-based classification of HRM data
• Implementation of robust access controls, consent practices, and data minimization
• Secure storage, retention, and disposal procedures for HR-related data
• Governance, monitoring, and response frameworks—including managing third-party data processors

Particularly relevant for HR departments, IT, compliance teams, and third-party vendors, this standard helps organizations bolster trust, avoid reputational damage, and maintain legal compliance (including under frameworks such as GDPR).

Key highlights:

• Data life cycle management—from collection to deletion
• Risk assessments, audits, and breach response protocols
• Explicit guidance for safe HRM data sharing and collaboration

Access the full standard:View ISO 30439:2026 on iTeh Standards

ISO/IEC 21617-1:2026 - JPEG Trust: Core Foundation

Information technology — JPEG Trust — Part 1: Core foundation

This new publication defines the core framework for establishing trust in digital media, specifically JPEG image files. ISO/IEC 21617-1:2026 establishes a method for embedding and verifying authenticity, provenance, attribution, intellectual property rights, and content integrity throughout a media asset’s lifecycle.

Professionals dealing with digital media—such as content creators, publishers, platform operators, and legal practitioners—will benefit from:

• Trust manifests for secure annotation and tracking of media assets
• Mechanisms for cryptographic binding, digital signatures, timestamping, and verification
• Privacy features including anonymization, obfuscation, and redaction
• Integration with popular metadata standards (EXIF, IPTC, Dublin Core)

This foundational standard drives trust in digital communications, combats misinformation, and supports evidentiary needs in legal and compliance contexts.

Key highlights:

• Comprehensive trust assertion framework for JPEG and derivative formats
• Procedural guidance for managing trust records, profiles, and reports
• Flexible embedding and referencing for both internal and external trust manifests

Access the full standard:View ISO/IEC 21617-1:2026 on iTeh Standards

ISO 20737:2026 - Interoperability of Personal Health Decision Support Services

Health informatics — Interoperability of personal health decision support services

ISO 20737:2026 sets out interoperability requirements for personal health decision support (PHDS) services—tools that empower individuals to make informed health choices using data-driven recommendations. Covering the technical requirements for data exchange, validation, error handling, privacy, and security, the standard facilitates seamless interaction among PHDS services, data providers (such as laboratories or healthcare systems), and client applications.

The standard is especially valuable for:

• PHDS developers and service providers seeking interoperability across platforms
• Healthcare organizations connecting clinical and consumer health applications
• Privacy and security officers managing patient-centric health data flows

Compliance ensures reliable, timely, and privacy-respecting decision support for patient self-care, chronic disease management, and remote health monitoring.

Key highlights:

• Standardized APIs and semantic data mapping for PHDS data exchange
• Robust audit logging, validation, and error response practices
• Strong emphasis on consent management, encryption, and user data control

Access the full standard:View ISO 20737:2026 on iTeh Standards

ISO/IEC TS 38501-2:2026 - IT Governance Assessment: Scheme and Examples

Information technology — Governance of IT implementation guidance — Part 2: Assessment scheme and examples

ISO/IEC TS 38501-2:2026 delivers practical assessment frameworks and example criteria for evaluating and implementing governance of IT in line with ISO/IEC 38500 and ISO/IEC 38501-1. With a focus on outcomes and evidence-based evaluation, this technical specification enables organizations to:

• Establish principles-based governance assessment schemes
• Apply qualitative rating scales to measure the effectiveness of IT governance
• Use practical examples mapped to all 11 IT governance principles (such as purpose, value, strategy, risk, performance, conformance, and more)

This standard aids governing bodies, IT auditors, and compliance professionals in organizations of every size to drive IT improvement and risk mitigation.

Key highlights:

• Step-by-step assessment methodology with clear criteria
• Alignment with latest governance best practices and ISO/IEC 38500 updates
• Sample outcome indicators and evidence to support informed decision-making

Access the full standard:View ISO/IEC TS 38501-2:2026 on iTeh Standards

Industry Impact & Compliance

These five standards significantly influence how organizations across healthcare, HR, digital media, and IT governance manage risk, ensure legal compliance, and build operational resilience. Timely adoption aids in:

• Demonstrating compliance with global regulations such as GDPR, HIPAA, and relevant ISO/IEC frameworks
• Avoiding costly data breaches, audits, and reputational damage
• Achieving higher trust with customers, stakeholders, and regulatory bodies
• Promoting interoperability, transparency, and ethical data usage

Organizations should ensure cross-functional awareness of these standards among legal, privacy, HR, IT, and management teams. Early planning is vital to meet compliance deadlines and to maximize competitive advantages.

Technical Insights

Shared Requirements and Best Practices

Across these standards, several technical themes emerge:

• Robust access control: Whether managing EHRs or HR records, strict role-based permissions and sensitivity levels are required.
• Comprehensive audit trails: All standards require secure, detailed logs for traceability, incident response, and verification.
• Data life cycle management: From initial collection to secure disposal, the entire data handling cycle is governed.
• Interoperability: Use of standardized data formats and APIs enables seamless integration and fewer vendor lock-ins.
• Encryption and anonymization: Core to protecting privacy—especially in health, HR, and media applications.
• Assessment and continuous improvement: Ongoing measurement of effectiveness—central to governance and compliance.

Implementation and Certification Considerations

1. Gap analysis: Audit current policies and processes against new standards.
2. Role definition and separation of duties: Clarify responsibilities across technical and non-technical roles.
3. Process integration: Embed new requirements into procurement, onboarding, vendor management, and user training.
4. Testing and monitoring: Schedule regular compliance checks, technical assessments, and third-party audits as appropriate.
5. Certification: Where feasible, pursue relevant ISO or third-party certification to validate adherence.

Conclusion / Next Steps

The August 2026 release of these Information Technology standards marks a key advance in data security, privacy, digital trust, and governance. By understanding and embracing these new requirements, organizations not only strengthen operational safeguards but also foster stakeholder trust and regulatory alignment.

Key actions for organizations:

• Download and study the full texts of the new standards from iTeh Standards
• Brief key stakeholders in IT, HR, compliance, and governance functions
• Begin gap analysis and roadmap development for timely implementation
• Monitor iTeh Standards for updates and future parts in this publication series

Stay tuned for Part 2 of this Information Technology standards update in the coming weeks, and position your organization for sustainable, standards-based excellence in a rapidly changing digital landscape.