ISO 17020 Explained: Inspection Body Requirements

ISO 17020 Explained: An Overview

ISO/IEC 17020 is the international standard titled “Conformity assessment – Requirements for bodies performing inspection.” It sets out the requirements that inspection bodies must meet to demonstrate that they are impartial, competent, and able to deliver reliable inspection results.

The standard applies to a wide range of inspection work. ISO/IEC 17020:2026 covers the activities of inspection bodies whose work can include the examination of materials, products, installations, plants, processes, work procedures or services. Examples include inspections of pressure equipment, lifting equipment, electrical installations, buildings, vehicles, cargo, food commodities, and imported goods.

Inspection bodies that meet ISO 17020 inspection body requirements can be accredited by national accreditation bodies, such as NABCB in India, giving their inspection reports and certificates recognized credibility.

ISO/IEC 17020:2026: The Current Edition

ISO 17020 inspection body requirements are now based on the latest edition. ISO/IEC 17020:2026 was officially published on 27 March 2026, replacing the 2012 version.

ISO 27018 Certification demonstrates that a cloud provider has implemented privacy and data protection controls within its ISO 27001 Information Security Management System. It extends ISO/IEC 27002 by adapting controls specifically for cloud-based PII processing, and it complements an ISO/IEC 27001-based ISMS. The result is a cloud service that customers can trust with personal data.

Key changes that affect the requirements include:

Inspection bodies are now classified into two categories regarding impartiality, type A and non-type A (previously types A, B, and C).

Definitions have been added for “item” (the object being inspected) and “client” (the party requesting the inspection).

A new subclause on the control of data and information and actions to address risks and opportunities has been added.

Risk-based thinking has enabled some reduction in prescriptive requirements and their replacement by performance-based requirements.

There is greater flexibility than in the previous edition in the requirements for processes, procedures, documented information and organizational responsibilities.

This guide explains ISO 17020 inspection body requirements based on the 2026 edition.

Requirement Area	What Inspection Bodies Must Demonstrate
Impartiality	Inspections are objective and free from conflicts of interest
Independence	Independence status as Type A or non-Type A is defined and maintained
Confidentiality	Client and inspection information is protected
Structure	Clear organization, responsibilities, and technical management
Personnel	Inspectors are competent, authorized, and monitored
Facilities and Equipment	Equipment is suitable, maintained, and calibrated where needed
Subcontracting	Subcontracted work meets the same requirements
Inspection Methods	Methods are suitable, documented, and consistently applied
Items and Samples	Items are identified and handled properly
Records	Inspection records are complete and traceable
Reports and Certificates	Reports contain required information and are accurate
Complaints and Appeals	Complaints and appeals are handled fairly and effectively
Data and Information	Data and information are controlled and protected
Risks and Opportunities	Risks are identified and addressed
Management System	Documents, audits, reviews, and corrective actions are managed

1. Impartiality Requirements

Impartiality is the foundation of ISO 17020 inspection body requirements. Inspection results must be based on objective evidence, not influenced by commercial, financial, or other pressures.

What inspection bodies must do:

Commit to impartiality at the top management level

Identify risks to impartiality on an ongoing basis, including those arising from activities, relationships, and personnel

Eliminate or minimize identified risks to impartiality

Ensure personnel are not under pressures that could affect their judgment

In practice: An inspection body maintains an impartiality risk register, reviews relationships with clients and related organizations, and requires inspectors to declare potential conflicts of interest before assignments.

2. Independence Requirements: Type A and Non-Type A

Independence describes how separate an inspection body is from the items it inspects. Under ISO/IEC 17020:2026, inspection bodies fall into two categories:

Type A: Fully independent third-party inspection bodies that are not involved in the design, manufacture, supply, installation, purchase, ownership, use, or maintenance of the items they inspect.

Non-Type A: Inspection bodies that have some connection to the items they inspect, such as in-house inspection functions within a larger organization. They must still demonstrate impartiality and appropriate safeguards.

In practice: Inspection bodies document their independence status, explain their relationships with parent or related organizations, and ensure their structure supports the declared category. Bodies previously classified as Type B or C under the 2012 edition should review their status under the new two-category model.

3. Confidentiality Requirements

Inspection bodies often access sensitive client information, facilities, and technical data.

What inspection bodies must do:

Protect confidential information obtained during inspection activities

Inform clients in advance of information that may be made public

Notify clients when information must be released by law, unless prohibited

Bind personnel and subcontractors to confidentiality

In practice: Inspectors sign confidentiality agreements, client data is stored securely, and procedures define how information is shared with regulators or other parties.

4. Structural Requirements

ISO 17020 inspection body requirements include a clear and accountable organizational structure.

What inspection bodies must do:

Be a legal entity, or a defined part of one, that can be held legally responsible for its inspection activities

Define the scope of inspection activities

Document the organizational structure, responsibilities, and authorities

Appoint technical management responsible for ensuring inspections are carried out properly

Make adequate provision for liability arising from inspection activities

In practice: An inspection body maintains an organization chart, job descriptions, a defined scope of inspection, and records of who is responsible for technical decisions.

5. Personnel Competence Requirements

Competent inspectors are at the heart of reliable inspection. ISO 17020 places strong emphasis on professional judgment, which requires real competence.

What inspection bodies must do:

Define competence requirements for each inspection role, including education, training, technical knowledge, skills, and experience

Select, train, and formally authorize inspectors for specific inspection activities

Supervise and monitor inspector performance, including on-site observation where appropriate

Maintain records of qualifications, training, authorization, and monitoring

Ensure inspectors understand the significance of deviations and how to report them

In practice: An inspection body keeps a competence matrix showing which inspectors are authorized for which inspection types, conducts periodic on-site witnessing of inspectors, and records performance reviews.

6. Facilities and Equipment Requirements

Inspection results depend on suitable facilities and reliable equipment.

What inspection bodies must do:

Have access to facilities and equipment suitable for the inspection activities

Control the use of equipment, including equipment not owned by the inspection body

Calibrate measuring equipment that significantly affects results, with traceability where applicable

Maintain equipment and keep records of its condition and calibrationt

Ensure software used in inspection is validated where relevant

In practice: Inspection bodies maintain an equipment register, calibration schedules, calibration certificates, and checks to confirm equipment is fit for use before inspection.

7. Subcontracting Requirements

Some inspection bodies subcontract parts of their work.

What inspection bodies must do:

Ensure subcontractors are competent and meet relevant ISO 17020 requirements

Inform clients when work is subcontracted

Retain responsibility for decisions on conformity and inspection results

Keep records of subcontractor evaluation and work performed

In practice: An inspection body maintains an approved subcontractor list with competence evidence and reviews subcontracted results before issuing reports.

8. Inspection Methods and Procedures

Consistency is a key goal of ISO 17020 inspection body requirements.

What inspection bodies must do:

Use inspection methods and procedures defined in requirements, standards, or regulations, or develop suitable in-house methods

Document instructions where their absence could affect inspection effectiveness

Use sampling plans that are statistically sound where sampling is involved

Ensure inspectors have access to current methods and reference documents

Record and report information to support the inspection outcome

In practice: Inspection bodies maintain controlled inspection procedures, checklists, and reference standards for each type of inspection within their scope.

9. Handling of Inspection Items and Samples

What inspection bodies must do:

What inspection bodies must do:

Uniquely identify items and samples to avoid confusion

Record any abnormalities observed or reported at the time of inspection

Protect items and samples from damage or deterioration while in the body’s care

In practice: Items are tagged or referenced in inspection records, and any damage or anomalies are documented before inspection begins.

10. Inspection Records Requirements

What inspection bodies must do:

Maintain records that demonstrate effective fulfillment of inspection procedures

Ensure records are traceable to the inspector who performed the inspection

Store records securely and retain them as required

In practice: Each inspection has a complete record, such as checklists, measurements, photos, and observations, identifying the inspector and date of inspection.

11. Inspection Reports and Certificates

Inspection reports are the main output of an inspection body, so ISO 17020 sets clear expectations for their content and accuracy.

Inspection reports and certificates typically include:

Identification of the issuing inspection body

Unique identification and date of issue

Date of inspection

Identification of the items inspected

Signature or other indication of approval by authorized personnel

Clear indication of any subcontracted work

Information on any deviations from agreed methods

In practice: Inspection bodies use standardized report templates, review reports before issue, and control amendments through re-issued reports with clear identification.

12. Complaints and Appeals Requirements

Impartiality is the foundation of ISO 17020 inspection body requirements. Inspection results must be based on objective evidence, not influenced by commercial, financial, or other pressures.

What inspection bodies must do:

Commit to impartiality at the top management level

Identify risks to impartiality on an ongoing basis, including those arising from activities, relationships, and personnel

Eliminate or minimize identified risks to impartiality

Ensure personnel are not under pressures that could affect their judgment

In practice: An inspection body maintains an impartiality risk register, reviews relationships with clients and related organizations, and requires inspectors to declare potential conflicts of interest before assignments.

13. Control of Data and Information

This is a newly emphasized area in the 2026 edition. A new subclause on the control of data and information has been added.

What inspection bodies must do:

Ensure data and information used in inspection are accurate, protected, and available when needed

Control electronic systems, software, and digital records used in inspection activities

Protect data against unauthorized access, loss, or alteration

In practice: Inspection bodies control access to digital inspection systems, back up records, and validate software used to record or calculate inspection results.

14. Risks and Opportunities

The 2026 edition embeds risk-based thinking. The revision embeds risk-based thinking throughout the management system.

What inspection bodies must do:

Identify risks and opportunities related to inspection activities

Plan and implement actions to address them

Evaluate the effectiveness of these actions

In practice: Inspection bodies maintain a risk register covering impartiality, competence, equipment, data, and operational risks, with defined actions and reviews.

15. Management System Requirements

ISO 17020 inspection body requirements include a management system that supports consistent operation and continual improvement.

What inspection bodies must do:

Control documents and records

Conduct internal audits of the management system and inspection activities

Hold management reviews covering performance, complaints, audit results, impartiality, and improvement

Identify nonconformities and implement corrective actions

In practice: Inspection bodies that already operate an ISO 9001 quality management system can often build on it, but must make sure every ISO/IEC 17020 requirement is covered.

ISO 17020 Inspection Body Requirements Checklist

• Scope of inspection activities is clearly defined
• Independence status as Type A or non-Type A is documented
• Impartiality risks are identified and managed
• Confidentiality arrangements are in place
• Organizational structure and technical management are defined
• Liability provisions are adequate
• Inspector competence criteria are documented
• Inspectors are authorized and monitored
• Equipment is controlled and calibrated where required
• Subcontractors are evaluated and controlled
• Inspection methods and procedures are documented
• Items and samples are identified and protected
• Inspection records are complete and traceable
• Reports contain all required information
• Complaints and appeals process is in place
• Data and information are controlled
• Risks and opportunities are addressed
• Internal audits and management reviews are completed



Common Nonconformities Against ISO 17020 Requirements

• Impartiality risks identified once but not reviewed regularly
• Independence category not clearly supported by organizational structure
• Inspector authorization records missing or incomplete
• No evidence of on-site monitoring of inspector performance
• Equipment calibration not traceable or overdue
• Inspection procedures not reflecting actual practice
• Inspection reports missing required information
• Complaints handled by staff involved in the original inspection
• Weak control of digital inspection data and software
• Bodies still referencing Types B and C after moving to the 2026 edition



New common elements are being introduced to align ISO/IEC 17020 with other conformity assessment standards such as ISO/IEC 17025 and ISO/IEC 17065, making it easier for organizations holding multiple accreditations to integrate their systems.




Why Choose TopCertifier for ISO 17020 Requirements?

TopCertifier is a leading ISO consulting and certification service provider that helps inspection bodies understand and meet ISO 17020 inspection body requirements. Our experienced ISO 17020 Consultants provide end-to-end support, including requirement gap analysis, impartiality and risk assessment, independence classification review, competence frameworks, inspection procedures, report templates, documentation, internal audits, and accreditation assessment preparation.

We help inspection bodies translate ISO/IEC 17020:2026 requirements into practical processes that fit their inspection scope and sector. Whether you’re preparing for first-time accreditation or transitioning from the 2012 edition, TopCertifier helps you close gaps efficiently and achieve accreditation with confidence.