EU AI Act gets first harmonised standard as Commission cites EN 18286 in Official Journal

What the Commission published

Commission Implementing Decision (EU) 2026/2274 of 12 October 2026 appeared in the Official Journal on 14 October. Its annex lists a single reference: EN 18286:2026, Artificial intelligence - Quality management system for EU AI Act regulatory purposes. Article 1 publishes that reference, and Article 2 puts the decision into force on the day of publication. The decision was signed for the Commission by President Ursula von der Leyen.

The recitals explain the route. By Implementing Decision C(2025) 3871 of 23 June 2025, the Commission asked the European standards bodies CEN and Cenelec to draft harmonised standards in support of the EU AI Act. EN 18286 answers point 9 of Annex I to that request, which covers quality management systems for providers of AI systems, including post-market monitoring. The Commission, with CEN and Cenelec, assessed the standard and found that it meets the requirements it aims to cover.

What changed for providers of high-risk AI

Under Article 40 of the AI Act, high-risk AI systems that conform to harmonised standards published in the Official Journal are presumed to conform with the requirements those standards cover. The recitals add that the presumption applies from the date the reference is published. From 14 October 2026, a provider that builds its quality management system on EN 18286 can rely on that presumption for the quality management requirements the standard covers.

Using the standard is voluntary, and the decision does not make it mandatory. A provider can still show conformity in other ways. In practice, a cited standard gives compliance teams a fixed reference point for audits, customer contracts and supplier questionnaires.

Why it matters

Harmonised standards turn the AI Act's general requirements into concrete, testable practice. The decision does not amend an earlier list, which indicates that EN 18286 is the first standard from the June 2025 request to reach the Official Journal. The decision is titled as covering harmonised standards for high-risk AI systems, which leaves room for more references to be added. The decision does not cover risk management, data governance, accuracy, robustness or cybersecurity standards. Those parts of the request are not addressed in this decision.

What to watch next

Watch for further implementing decisions citing standards for other points of the 2025 request beyond quality management, and for notified bodies and providers adapting their quality management systems to EN 18286. No timetable for further standards or for future amendments of the list is stated in the decision. More EU AI Act coverage is under AI Policy & Regulation.

Questions people ask

What is EN 18286?

A European standard, EN 18286:2026, titled Artificial intelligence - Quality management system for EU AI Act regulatory purposes. CEN and Cenelec drafted it at the Commission's request.

Do providers have to use EN 18286?

No. Harmonised standards are voluntary. Following one gives a presumption of conformity under Article 40 of the AI Act for the requirements it covers.

When did EN 18286 start to count as a harmonised standard?

On 14 October 2026, when Implementing Decision (EU) 2026/2274 was published in the Official Journal and entered into force.

Sources

1. Commission Implementing Decision (EU) 2026/2274 of 12 October 2026 on the harmonised standards for high-risk AI systems drafted in support of Regulation (EU) 2024/1689 (Official Journal of the European Union (EUR-Lex), 14 Oct 2026)