Members of the International Imaging Technology Council (Int’l ITC) are calling out HP for issuing firmware updates that brick third-party ink and toner functionality in its printers. HP calls this Dynamic Security and has been doing it for years; however, the Int’l ITC is taking new issue with the practice, considering that it is explicitly prohibited for devices registered under the General Electronics Council’s (GEC’s) Electronic Product Environmental Assessment Tool (EPEAT) 2.0 registry.
The Int’l ITC is a nonprofit trade group that says it represents North American “toner and inkjet cartridge re-manufacturers, component suppliers, and cartridge collectors.”
It’s important to note that the Int’l ITC may be considered biased because its members could greatly profit when printer manufacturers commit to supporting aftermarket cartridges in devices.
Still, customers and security experts have long criticized Dynamic Security, making the Int’l ITC’s complaints worth examining.
EPEAT 2.0 registry bans firmware updates that brick third-party ink
Following the launch of the original EPEAT registry in 2006, GEC launched EPEAT 2.0 in December 2025. Per a GEC website, “EPEAT 2.0 criteria are designed to identify more sustainable products, built by sustainability-conscious companies with responsibly managed supply chains.” The updated criteria addresses “climate change mitigation, sustainable use of resources (circularity), chemicals of concern, and responsible supply chains” across the lifecycle of products from five product categories: imaging equipment (such as printers), computers and displays, phones, servers, and TVs.
The GEC’s criteria for EPEAT 2.0 registration [PDF] includes a more user and environmentally friendly approach to third-party ink and toner. It states: “Manufacturer shall ensure registered products do not prevent the use of remanufactured cartridges, either manufacturer or non-manufacturer branded, by implementing one or more” of three options.
The first option requires manufacturers to refrain “from issuing firmware updates that intentionally disable remanufactured cartridges that, at the time of the firmware update, use aftermarket electronic circuitry to operate with the registered product’s then-current manufacturer firmware.”
The second option requires printer companies to make “available a manufacturer approved solution using unmodified original manufacturer electronic circuitry that ensures registered products permit the uninterrupted use of remanufactured cartridges” and don’t prevent key functionality.
The third option is for manufacturers to make available, such as via the manufacturer’s website, “to purchasers remanufactured cartridges, either manufacturer or nonmanufacturer branded, for, at minimum, registered products.”
As of this writing, 38,291 devices are under the EPEAT 1.0 registry. There are 163 products registered under EPEAT 2.0, but none are printers. This all underscores how new the EPEAT 2.0 registry is and the likelihood that the GEC is still working to register more devices, like printers.
Still, the Int’l ITC is skeptical about HP ever following EPEAT 2.0’s criteria, especially considering that “HP released firmware 2602A/B on January 29, 2026 across eleven printer models,” the trade group said in a press release last week. (At least some of the firmware updates, including for the nearly 9-year-old OfficeJet Pro 7720, appear to have come out in February.)
“HP’s recent behavior is emblematic of a larger pattern,” the Int’l ITC’s release said. “HP positions itself as a leader in sustainability, circular business models, and responsible product design, but instead of proactively aligning its products and practices with the highest environmental standards, such as EPEAT 2.0, HP puts profits first and waits until external scrutiny or the threat of non-compliance forces change.”
In an email discussion with Ars Technica, Tricia Judge, the Int’l ITC’s executive director and general counsel, pointed out that HP’s firmware update succeeded the launch of the EPEAT 2.0 registry. She explained why the Int’l ITC’s press release called out HP but no other printer manufacturers:
HP is the only one with lockout chips that are triggered using firmware “upgrades” that claim “security” as a justification for their existence. HP is the only one that misleads and frustrates its own customers when locking out the environmentally superior competition. The others have made some interesting attempts in the past to create a competitive advantage.
In 2023, the Int’l ITC wrote a letter to the GEC requesting that the GEC revoke at least 101 of HP’s printers from the (original) EPEAT registry, largely due to Dynamic Security. GEC denied the Int’l ITC’s request.
“EPEAT 1.0 was very basic (no interference with the use of remanufactured cartridges), and HP claimed that its statements (buried in its marketing materials and/or on its website) that it didn’t interfere with the use of remanufactured cartridges was a loophole that the GEC decided was acceptable,” Judge said. “We were trying to close that loophole with EPEAT 2.0. We didn’t get it as airtight as we hoped, but it is better.
HP didn’t respond to Ars Technica’s request for comment for this story.
