PolicyNews
AI Act: first harmonised standard EN 18286 is out
On October 14 the EU's Official Journal published the first harmonised standard under the AI Act, EN 18286:2026. It covers quality management systems, and complying with it gives a presumption of conformity with the corresponding AI Act requirements.
By: Mikola Máté Patrik · · 2 min read
Mikola Máté Patrik
What was published
Commission Implementing Decision (EU) 2026/2274 is dated October 12, appeared in the Official Journal on October 14 and entered into force the same day (EUR-Lex). It publishes the reference of a single standard: EN 18286:2026, “Artificial intelligence – Quality management system for EU AI Act regulatory purposes”.
CEN and CENELEC call it the first harmonised standard in support of the AI Act. Publication coincided with World Standards Day (CEN-CENELEC).
What the standard covers
EN 18286 translates Article 17 of the AI Act into practical, auditable requirements. That article obliges providers of high-risk AI systems to run a quality management system. According to the Commission's 2025 standardisation request, this includes post-market monitoring processes (EUR-Lex).
Why presumption of conformity matters
Under Article 40 of the AI Act, a high-risk system that conforms to a harmonised standard whose reference is published in the Official Journal is presumed to meet the requirements that standard covers. In practice, a provider that builds its quality management to EN 18286 does not have to separately argue that this part satisfies Article 17. French notified body GMED called the publication a new milestone in implementing the high-risk requirements (LNE/GMED).
Who is affected and when
Mainly providers of high-risk AI systems, such as tools used in hiring, credit scoring or education. Under the amended AI Act, obligations for high-risk systems listed in Annex III apply from December 2, 2027, and for product-embedded systems under Annex I from August 2, 2028. There is time, but a quality management system is not built in a week.
Note that the standard only covers quality management. Further harmonised standards are expected for the other requirements, such as risk management, data governance and human oversight. The text of the standard is not free; it is sold through national standards bodies.
What to do now
If you build AI for a high-risk use case, compare your existing quality processes (for example ones based on ISO 9001 or ISO/IEC 42001) with EN 18286. That way you will not be starting from scratch at the end of 2027.
Produced with the help of AI, reviewed by an editor. How we make our articles
Reviewed and edited by the Neural Daily desk. About
