ISO 20252:2026: what changes for research buyers and agencies

Key points

• ISO 20252:2026 was published on 1 September 2026 and replaces ISO 20252:2019 ^{1, 2}.
• It adds AI and automation policies and monitoring requirements across research practices ³.
• It strengthens data quality requirements for sampling and panel management ^{3, 4}.
• More than 400 research agencies worldwide are third-party certified to ISO 20252 ³.
• In the UK, MRS announced a three-year transition: certification to the 2026 version becomes mandatory from September 2029 ⁵.

What is ISO 20252?

ISO 20252 is the international standard for “market, opinion and social research, including insights and data analytics”. It sets the vocabulary and the service requirements for organisations that carry out research, from project set-up to data collection, analysis and reporting; it does not apply to non-research activities such as direct marketing ¹.

The previous edition, ISO 20252:2019, had already merged earlier standards, including the one on access panels (ISO 26362) ^{2, 4}. Agencies are audited by independent certification bodies, such as CIRQ in the United States or MQA and SGS in the United Kingdom ^{3, 5}.

What changes in the 2026 edition

According to the certification body CIRQ and the Insights Association, the main updates are ³:

• AI and automation: organisations must have policies on the use of AI and automated techniques, and monitor them across research practices.
• Data quality: stronger requirements for sampling and panel management.
• Privacy and current practice: technical revisions reflecting current research methods and expectations for respondent privacy, plus updated terminology.

The ISO committee in charge, ISO/TC 225, adds that the standard now has seven project-management annexes, from A to G, and that the sampling annex (A) and the panels annex (G) were revised to raise data quality requirements. A core clause, mandatory for all types of organisations, covers business planning, resourcing, subcontractor management, information security, legal and regulatory matters, internal audit and management review ⁴. The Market Research Society confirms that the standard was updated to reflect the growing use of automated techniques, including AI ⁵.

The detailed list of new requirements is in the standard itself, which is sold by ISO and national standards bodies. Some topics often discussed, such as synthetic data or bot detection, are not explicitly mentioned in the public summaries we found.

How long do agencies have to switch?

ISO 20252:2019 was withdrawn on 1 September 2026, when the new edition was published ². Certified agencies now have to move to the 2026 version at their next audits.

In the United Kingdom, MRS states that a three-year transition period has been agreed and that certification to ISO 20252:2026 is mandatory from September 2029 ⁵. In the United States, CIRQ says it will support its certified organisations through the transition and publish guidance on implementation and certification requirements ³. Agencies elsewhere should check the rules with their own certification body.

Why it matters for research buyers

Certification gives buyers an independent check that an agency follows documented processes. Some clients now require it: Procter & Gamble asked its quantitative online sample providers to be certified by 1 July 2025 ⁶. The ISO committee notes that in some countries and industries, certification is a legal or contractual requirement ⁴.

Two practical tips:

• Check the scope. A certificate comes with a statement of applicability that lists the services covered, including subcontracted services ⁵. An agency can be certified for project management but not for its panel, for example.
• Ask about the 2026 version. Until 2029, agencies may hold the 2019 or the 2026 certificate. Ask when they plan to move, and how they already apply the new AI and panel requirements.

Questions to ask an agency

• Are you certified to ISO 20252? By which certification body, and to which version?
• Which of your services are covered by the certificate? Are your fieldwork partners and panels covered too?
• What is your policy on AI and automation, and who checks AI outputs on my project?
• How do you control sample quality and fraudulent respondents?
• Compare several agencies: you can send one request to up to 5 companies from any country or city page of this directory.

Frequently asked questions

Sources

1. ISO, ISO 20252:2026 Market, opinion and social research, including insights and data analytics (catalogue page)
2. ISO, ISO 20252:2019 (catalogue page, withdrawn)
3. Insights Association, CIRQ welcomes newly revised ISO 20252:2026 standard (Sept. 2026)
4. ISO/TC 225, About the committee and ISO 20252
5. MRS, ISO 20252 and quality standards
6. Insights Association, CIRQ marks busy year certifying research companies to ISO 20252 (Feb. 2026)
7. Research Live, AI, automation and data quality additions to ISO 20252 (Sept. 2026)