iso tc 307

ISO/TC 307 is the ISO Technical Committee established in 2016 with Australia as secretariat, mandated to develop international standards for blockchain and distributed ledger technologies (DLT). Its normative outputs span terminology (ISO 22739), reference architecture, security and privacy frameworks, smart contract interaction models, digital identity standards, and governance structures for decentralised systems. The committee coordinates with ISO/TC 68 (Financial Services), ISO/IEC JTC 1/SC 27 (Cryptographic Security), W3C, ITU-T SG17, and IEEE to ensure interoperability standards and shared vocabulary underpin regulatory, procurement, and legislative language across jurisdictions. It operates through specialised working groups covering foundations, security, smart contracts, data governance, DLT governance, and interoperability.

Overview

• ISO/TC 307 was created in response to the rapid proliferation of Blockchain and Distributed Ledger Technology deployments that lacked shared terminology and compatible architectures. Without normalised vocabulary, regulators, procurement bodies, and technologists risked working at cross-purposes when drafting laws or tender specifications referencing DLT.
• Australia (Standards Australia) holds the Secretariat. Membership spans over 50 participating and observing national bodies, including BSI (UK), DIN (Germany), ANSI (US), and equivalents across Asia-Pacific.
• The committee coordinates formally with:
  • ISO TC 68 (Financial Services) — for Central Bank Digital Currency, payment rails, and tokenisation standards.
  • ISO IEC JTC 1 SC 27 — for Cryptographic Security and privacy-by-design alignment.
  • ITU-T SG17 — for telecommunications-context DLT security.
  • W3C — for W3C Decentralised Identifier (DID) alignment with ISO identity standards.
  • IEEE — for technical specification cross-referencing.
• Working groups structure the scope into distinct subject domains with overlapping liaisons.

Key Components

Working Groups

• WG 1 — Foundations: Terminology and concepts (ISO 22739); provides the normative Blockchain Terminology base used by all subsequent standards.
• WG 2 — Security, Privacy, and Identity: Develops the DLT Security Framework, covering threat modelling, key management, and Digital Identity Standards applicable to permissioned networks.
• WG 3 — Smart Contracts and Their Applications: Produces Smart Contract Standards, including ISO/TR 23455, which analyses Smart Contract interaction patterns, legal recognition challenges, and formal verification requirements.
• WG 4 — Data Governance: Addresses Data Governance for on-chain and off-chain data, provenance records, and archival integrity (liaising with ISO/TC 46).
• WG 5 — Blockchain and DLT Governance: Develops the Blockchain Governance Framework, covering role-based control models, change management, and dispute resolution mechanisms for Permissioned Blockchain and Permissionless Blockchain environments.
• WG 7 — Interoperability: Specifies Cross-Chain Communication protocols and Blockchain Interoperability requirements, addressing data exchange between Hyperledger Fabric, Ethereum, and R3 Corda networks.

Key Published Standards

• ISO 22739:2020 — Blockchain and DLT: Vocabulary. The normative definitional standard for Blockchain Terminology, updated iteratively.
• ISO/TR 23455:2019 — Overview of and interactions between smart contracts in Blockchain and DLT systems.
• ISO/TR 23576 — Security of digital asset custodians; addresses key management and custody protocols relevant to Cryptographic Security.
• ISO 23257 — Reference Architecture for Distributed Ledger Technology, providing a layered conceptual model for system designers.
• ISO/AWI 24354 — Blockchain-based trade facilitation, relevant to Supply Chain Traceability.
• ISO/AWI 23644 — Overview of trust anchors for DLT, bridging to Decentralised Governance models.

Governance Mechanisms

• Uses ISO’s consensus-based Decentralised Governance process: national body ballots, public comment periods, and technical resolution through WG meetings.
• Standards progress through stages: Preliminary Work Item (PWI) → New Work Item Proposal (NWIP) → Working Draft (WD) → Committee Draft (CD) → Draft International Standard (DIS) → International Standard (IS).
• Blockchain Governance within TC 307 itself models the transparency principles it mandates in its outputs.

Applications and Use Cases

Regulatory and Legislative Reference

• Governments and regulators in the EU (MiCA framework), UK (FCA DLT guidance), and Asia-Pacific cite ISO 22739 vocabulary when drafting Regulatory Compliance requirements, ensuring shared semantic grounding across jurisdictions.
• Procurement authorities reference ISO/TC 307 standards in tender specifications for Permissioned Blockchain infrastructure procurements (e.g., public health record systems, land registry).

Financial Services

• ISO/TC 307 liaises with ISO TC 68 for tokenisation, Central Bank Digital Currency (CBDC) interoperability, and payment DLT standards, enabling regulatory-grade Blockchain deployment in banking infrastructure.
• Digital asset custodians use ISO/TR 23576 for security frameworks covering private key management and custody protocols.

Supply Chain and Trade

• ISO/AWI 24354 targets blockchain-based trade documentation, directly enabling Supply Chain Traceability for goods crossing customs jurisdictions.
• Traceability systems in pharmaceuticals, food safety, and luxury goods leverage the normative vocabulary to claim standards compliance.

Identity and Privacy

• Digital Identity Standards developed by WG 2 align with W3C DID specifications, enabling self-sovereign identity systems to claim dual ISO and W3C conformance.
• The privacy framework addresses GDPR tension with blockchain immutability, providing normative guidance on data-minimisation architectures.

Smart Contract Formalisation

• Enterprises deploying Smart Contract systems (e.g., securities settlement, insurance parametric triggers) reference ISO/TR 23455 to justify legal recognition claims and formal specification requirements.

Standards and Context

• ISO/TC 307 sits within the ISO Technical Management Board’s portfolio alongside over 300 other technical committees. Its mandate specifically excludes application-layer software development, focusing instead on normative vocabulary and interoperability frameworks.
• Adjacent standards bodies with overlapping scope:
  • ETSI PDL (Permissioned Distributed Ledgers) — European telecommunications standards for enterprise DLT.
  • IEEE Blockchain Initiative — technical standards for energy and IoT blockchain applications.
  • W3C DID Working Group — decentralised identifier specifications that TC 307 WG 2 formally liaises with.
  • IETF — internet protocol standards (transport, security) that underpin DLT network layers.
• The existence of ISO/TC 307 reflects a broader pattern in which international standards bodies address emerging Distributed Systems technologies: convening expert consensus to produce vendor-neutral, jurisdiction-agnostic reference documents that lower the regulatory and procurement barrier for adoption.
• Key ISO/TC 307 liaison categories:
  • Internal ISO liaisons: TC 46 (archival), TC 68 (finance), TC 176 (quality management for DLT processes)
  • External liaisons: W3C, ITU, IEEE, UN/CEFACT (trade facilitation), BIS (Bank for International Settlements)
• The committee’s work directly feeds into Regulatory Compliance instruments: MiCA (EU Markets in Crypto-Assets), the UK Digital Securities Sandbox, Singapore MAS DLT regulatory guidelines, and comparable instruments in Japan, Australia, and UAE.

Provenance