European Commission publishes first harmonised standard for AI Act
The European Commission published the reference to EN 18286:2026, the first harmonised standard supporting the AI Act, in the Official Journal. Providers implementing this standard benefit from a presumption of conformity with Article 17 quality management system requirements.
- Framework
- ISO 42001
- Who it concerns
- Providers of high-risk AI systems placing them on the EU market or putting them into service in the EU.
What changed?
Each point with the sentence from the source that says it.
EN 18286:2026 provides a legal pathway for providers of high-risk AI systems to comply with the quality management system requirements under Article 17 of the AI Act.
The standard, EN 18286:2026 - Artificial intelligence - Quality management system for EU AI Act regulatory purposes, developed by CEN and CENELEC, provides a clear legal pathway for providers of high-risk AI systems to comply with the quality management system requirements under Article 17 of the AI Act.
Providers implementing EN 18286:2026 benefit from a presumption of conformity with the Article 17 requirements covered by the standard.
Its publication through Commission Implementing Decision (EU) 2026/2274 means that providers implementing this standard will benefit from a presumption of conformity with the Article 17 requirements covered by the standard.
EN 18286 is designed to be layered on top of existing international standards such as ISO/IEC 42001, ISO 9001 or a sectoral QMS, rather than replace them.
It is mapped to Article 17 of the AI Act, built around the AI system lifecycle, rather than the organisation, and designed to be layered on top of the existing international standards such as ISO/IEC 42001, ISO 9001 or a sectoral QMS (e.g. ISO 13485), rather than replace them.
Organisations without ISO/IEC 42001 can use EN 18286 to extend an existing QMS or build their first one to meet the requirements of Article 17 of the AI Act.
Organisations without ISO/IEC 42001, which intend to place high-risk AI systems on the EU market or put them into service in the EU, can use EN 18286 to extend an existing QMS or build their first one to meet the requirements of article 17 of the AI Act.
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- AI Management System Policy
Review the AI Management System Policy to consider referencing EN 18286:2026 as a means to demonstrate conformity with Article 17 of the AI Act for high-risk AI systems.
- AI Risk Management Policy
Update the AI Risk Management Policy to align with the AI system lifecycle approach of EN 18286:2026 and its integration with existing QMS standards.