First AI Act harmonised standard, EN 18286 on quality management, cited in the EU Official Journal

Archive entry: this covers an event from October 14, 2026, and we published it on November 8, 2026. The details come from sources dated at the time and may have changed since.

On October 14, 2026, Commission Implementing Decision (EU) 2026/2274 was published in the Official Journal of the European Union and entered into force the same day, as shown in the decision text on EUR-Lex. Dated October 12, 2026, the decision covered harmonised standards for high-risk AI systems drafted in support of Regulation (EU) 2024/1689, the AI Act.

What changed

• The annex listed one standard: EN 18286:2026, “Artificial intelligence - Quality management system for EU AI Act regulatory purposes”, developed by CEN and CENELEC.
• The Commission said providers of high-risk AI systems that implement EN 18286 benefit from a presumption of conformity with the Article 17 quality management system requirements the standard covers, and called it the only AI quality management system standard with a presumption of conformity.
• The standard focused on the AI system's lifecycle rather than on the organisation as a whole.
• It was built to complement, not replace, existing standards such as ISO/IEC 42001, ISO 9001 or sectoral standards such as ISO 13485, and it allowed management systems to be combined in regulated sectors.

What it meant for builders

Teams building AI products that may be high-risk under the AI Act gained the first harmonised standard supporting the Act, which offered a recognised legal route to meet the Article 17 quality management obligations. Organisations without ISO/IEC 42001 that planned to place or put into service high-risk AI systems on the EU market could use it to extend an existing quality management system or to build one that meets Article 17.

Announcement and timeline

The Commission announced the standard on October 19, 2026 in its announcement of the first harmonised standard and said further harmonised standards were expected to follow, without giving dates. Its guidelines for high-risk AI systems stated that rules for some high-risk areas would start on December 2, 2027, and for systems embedded in products such as robotics or industrial machinery on August 2, 2028.

Sources

• Commission Implementing Decision (EU) 2026/2274 of 12 October 2026 on the harmonised standards for high-risk AI systems drafted in support of Regulation (EU) 2024/1689 of the European Parliament and of the Council (EUR-Lex / Official Journal of the European Union, October 14, 2026, official)
• First harmonised standard supporting the AI Act published in the Official Journal (European Commission (DG CONNECT), October 19, 2026, official)
• Guidelines for providers and deployers of AI high-risk systems (European Commission (DG CONNECT), official)

Written with AI assistance, strictly from the sources listed above. Before it went live, automated checks verified its dates, sources and every language edition.