The Pulse
EU Publishes First Harmonised AI Act Standard, EN 18286
The European Commission has published EN 18286:2026 in the EU Official Journal, giving providers of high-risk AI systems a standards-based route to show conformity with covered quality-management requirements. The standard addresses Article
AI.info Team · Written with AI · fact-checked ·
One harmonised standard now gives providers of high-risk AI systems a formal route to demonstrate conformity with part of the EU AI Act: EN 18286:2026, the first such standard cited in the Official Journal. The European Commission announced the milestone on 19 October, but the legal citation took effect five days earlier, on 14 October, through Implementing Decision (EU) 2026/2274.
EN 18286 covers quality management, not the whole Act
The standard, developed by the European Committee for Standardization (CEN) and the European Committee for Electrotechnical Standardization (CENELEC), sets out a quality-management system for AI Act regulatory purposes. Its scope is Article 17, which requires providers of high-risk AI systems to document procedures for regulatory compliance, system design and testing, data handling, risk management, post-market monitoring, incident reporting and record-keeping.
“The reference of the harmonised standard for high-risk AI systems drafted in support of Regulation (EU) 2024/1689, listed in the Annex to this Decision, is hereby published in the Official Journal of the European Union,” the Commission’s decision states. Its annex lists one standard: EN 18286:2026, “Artificial intelligence – Quality management system for EU AI Act regulatory purposes.”
The citation matters because a European standard’s publication alone does not create the same legal effect. Once the Commission references a harmonised standard in the Official Journal, providers that apply it receive a presumption of conformity for the requirements the standard covers. The Commission says EN 18286 is the only AI quality-management standard with that presumption.
Providers can build on existing quality systems
EN 18286 is designed around the AI system lifecycle rather than the provider’s organisation as a whole, according to the Commission. It can sit alongside systems such as ISO/IEC 42001, ISO 9001 or a sector-specific quality system such as ISO 13485, rather than requiring companies to replace them. The Commission says providers can integrate the requirements into existing systems instead of maintaining a separate parallel process.
That design offers a practical route for organisations already subject to quality controls in fields such as medical devices or financial services. Article 17 also says implementation should be proportionate to a provider’s size and allows relevant quality-management obligations under sectoral EU law to be included in the system. The standard does not remove the need to meet other AI Act requirements, or establish conformity with obligations beyond the parts it covers.
First citation follows months of standards work
CEN and CENELEC published EN 18286 in July 2026; the Commission’s October decision is the step that makes it a harmonised standard under the Act. The Commission says it assessed the standard with the two European standards bodies against the requirements it was intended to cover before publishing the reference. The decision entered into force on the day it appeared in the Official Journal.
Application of harmonised standards is voluntary: providers may use another approach to demonstrate compliance. But using a cited standard provides the defined presumption for its covered requirements, reducing the need to establish that aspect of conformity entirely through a separate argument. The European Commission expects additional harmonised standards to follow; its announcement gives no publication dates for the next ones.