AI Act's first harmonized standard: EN 18286 on quality systems
In brief
- The EN 18286 standard, published on October 14, 2026, covers only the quality management system for high-risk AI providers.
- It provides a presumption of conformity for Article 17 of the AI Act, but nine other standardization areas lack published standards.
- Providers must demonstrate the rest of their compliance by December 2, 2027, for Annex III systems.
The European Commission published the EN 18286 standard in the Official Journal of the EU on October 14, 2026. According to the Commission, this harmonized standard covers only the quality management system required from high-risk AI system providers (Article 17 of the AI Act), granting them a presumption of conformity for these specific requirements.
Executive Decision (EU) 2026/2274, which entered into force on October 14, references this standard developed by CEN and Cenelec. It applies to high-risk systems under Annex III, with a compliance deadline set for December 2, 2027. Nine other standardization areas (risk management, cybersecurity, etc.) remain without published standards to date.
This optional standard integrates with existing quality systems like ISO 9001 or ISO/IEC 42001 without replacing them. It aims to facilitate alignment between sectoral obligations and those of the AI Act, particularly for SMEs and startups, whose obligations remain proportionate to their size.
What it changes for you
- Public SectorPublic administrations will need to incorporate this standard into their procurement and compliance processes for high-risk AI systems, with a deadline of December 2, 2027.
This summary gives you the essentials. The full article, its figures and quotes are on ActuIA.
Read the original articleAI-generated summary of the source, checked by rules. How we write · Report an error