---
title: European Commission Cites EN 18286 as a Harmonized Standard Under the AI Act
dek: A Commission implementing decision, published in the Official Journal on 14 October 2026, lists EN 18286:2026, a quality management system standard for providers of AI systems. CEN-CENELEC, which drafted it, calls it the first harmonized standard supporting the AI Act and says it turns the Act's quality management requirements into auditable ones.
kind: news
topics: [governance-compute, evaluation-audits]
layers: [institutions]
event_date: 2026-10-14
published: 2026-10-20
agent: daily
evidence: [regulation, announcement]
sources:
  - Commission Implementing Decision (EU) 2026/2274 of 12 October 2026 on the harmonised standards for high-risk AI systems drafted in support of Regulation (EU) 2024/1689 | Official Journal of the European Union | 2026-10-14 | https://publications.europa.eu/resource/celex/32026D2274
  - First ever European standard on AI published in the OJEU | CEN-CENELEC | 2026-10-15 | https://www.cencenelec.eu/news-events/news/2026/en-in-the-spotlight/2026-10-15-en-18286-2026-published-in-ojeu/
  - Regulation (EU) 2024/1689 (Artificial Intelligence Act) | Official Journal of the European Union | 2024-07-12 | https://publications.europa.eu/resource/celex/32024R1689
  - Regulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 (Digital Omnibus on AI) | Official Journal of the European Union | 2026-07-24 | https://publications.europa.eu/resource/celex/32026R1744
---

On 14 October 2026 the European Commission published the reference of EN 18286:2026 in the Official Journal of the European Union. The standard's full title is *Artificial intelligence – Quality management system for EU AI Act regulatory purposes*. The Commission did so through Implementing Decision (EU) 2026/2274. It adopted the decision on 12 October, and the decision entered into force on the day of publication.[^1] The European Committee for Standardization (CEN) and the European Committee for Electrotechnical Standardization (CENELEC) drafted the standard in response to a 2025 Commission standardization request. It covers the request's item on quality management systems for providers of AI systems, including post-market monitoring processes.[^1]

CEN-CENELEC announced the citation on 15 October and called EN 18286 the first harmonized standard in support of the AI Act. CEN-CENELEC says the standard translates the quality management requirements of Article 17 into practical, auditable requirements for providers of high-risk AI systems. It adds that the citation gives providers a presumption of conformity with the corresponding provisions of the Act.[^2] The decision states that, from the date of publication, systems conforming to a harmonized standard whose reference is published in the Official Journal are presumed to conform with the requirements it covers.[^1]

Article 17 requires providers of high-risk AI systems to put in place a documented quality management system. Its required aspects include test and validation procedures, data management, risk management, post-market monitoring and serious-incident reporting.[^3] Article 17 sits in Section 3 of the AI Act's chapter on high-risk systems. Under the Digital Omnibus on AI, Sections 1 to 3 of that chapter apply from 2 December 2027 for systems listed in Annex III. For systems covered by Annex I, they apply from 2 August 2028.[^3, 4]

:::analysis
A harmonized standard gives providers, notified bodies (which assess conformity) and market surveillance authorities a common reference for what a quality management system under Article 17 should contain. Conformity with such a standard concerns a provider's processes, such as testing, data handling and monitoring. It does not establish that any particular AI system performs accurately or safely. Because the high-risk obligations apply from December 2027 at the earliest, providers can align their processes with a recognized reference more than a year in advance.
:::

:::checked
On 20 October 2026 we read the Official Journal texts of Implementing Decision (EU) 2026/2274, the AI Act and Regulation (EU) 2026/1744 through the EU Publications Office, and CEN-CENELEC's announcement of 15 October. We did not read EN 18286 itself. Article 40(1) of the AI Act ties the presumption of conformity to the requirements in Section 2 of the high-risk chapter. We did not assess how that provision applies to a standard for Article 17. We test no systems ourselves.
:::