EU publishes first harmonised standard supporting the AI Act: EN 18286:2026
The European Commission has published the reference to EN 18286:2026, the first harmonised standard supporting the AI Act, in the Official Journal of the European Union. Providers of high-risk AI systems who implement it will benefit from a presumption of conformity with the quality management requirements of Article 17.
- The Commission published the reference to EN 18286:2026, the first harmonised standard supporting the AI Act, in the Official Journal.
- The standard was developed by CEN and CENELEC and is referenced through Commission Implementing Decision (EU) 2026/2274.
- Providers of high-risk AI systems that implement it get a presumption of conformity with the Article 17 requirements it covers.
- It is designed to be layered on ISO/IEC 42001, ISO 9001 or sectoral standards such as ISO 13485, not to replace them.
- High-risk AI requirements apply from December 2027 / August 2028, and more harmonised standards are expected.
What the standard covers
The standard is titled Artificial intelligence - Quality management system for EU AI Act regulatory purposes. It was developed by CEN and CENELEC and is referenced through Commission Implementing Decision (EU) 2026/2274.
According to the Commission, the standard gives providers of high-risk AI systems a clear legal pathway to comply with the quality management system requirements under Article 17 of the AI Act. Providers that implement it will benefit from a presumption of conformity with the Article 17 requirements that the standard covers.
How EN 18286 is designed
EN 18286 translates the Article 17 requirements into an operational quality management system (QMS). The Commission describes it as the only AI QMS standard with a presumption of conformity.
- It is mapped to Article 17 of the AI Act.
- It is built around the AI system lifecycle, rather than the organisation.
- It is designed to be layered on top of existing international standards such as ISO/IEC 42001, ISO 9001 or a sectoral QMS (for example ISO 13485), rather than replace them.
The standard explicitly allows providers in regulated sectors to integrate it into their existing systems rather than run a separate parallel management system.
Who can use it and what comes next
Organisations that do not hold ISO/IEC 42001 certification can also use the standard. If they intend to place high-risk AI systems on the EU market or put them into service in the EU, they can use EN 18286 to extend an existing QMS or build their first one to meet the requirements of Article 17.
The Commission calls the publication an important milestone in implementing the AI Act. It comes ahead of the application of requirements for high-risk AI systems, which the Commission gives as December 2027 / August 2028. Further harmonised standards are expected to follow.
What it means for providers
For providers of high-risk AI systems, the publication offers a concrete route to show compliance with the quality management requirements of Article 17. Companies already running ISO/IEC 42001, ISO 9001 or a sectoral system such as ISO 13485 can add EN 18286 on top, while those starting from scratch can use it to set up their first QMS. The standard covers the Article 17 requirements only, and the Commission expects additional harmonised standards to address other parts of the AI Act.
Európai Bizottság: First harmonised standard supporting the AI Act published in the Official Journal
