Commission Implementing Decision (EU) 2026/2274 of 12 October 2026, concerning harmonised standards for high-risk artificial intelligence systems drafted in support of Regulation (EU) 2024/1689 (AI Act), was published in the Official Journal of the European Union on 14 October 2026.
Through this Decision, the European Commission published the reference to EN 18286:2026 – Artificial Intelligence – Quality Management System for EU AI Act Regulatory Purposes, developed by the European Committee for Standardization (CEN) and the European Committee for Electrotechnical Standardization (CENELEC).
This is the first European harmonised standard published in support of the AI Act, marking a significant milestone for companies developing and providing high-risk artificial intelligence systems.
The Decision, which entered into force on 14 October 2026, introduces an important development: compliance with EN 18286:2026 provides a presumption of conformity with the AI Act requirements covered by the standard.
EN 18286:2026: A Quality Management System for Artificial Intelligence
The new European standard establishes a structured framework for establishing, implementing, maintaining and continually improving a quality management system specifically designed for AI system providers.
In particular, it supports organisations in implementing the requirements set out in Article 17 of the AI Act, which requires providers of high-risk artificial intelligence systems to establish a documented quality management system proportionate to the characteristics of their organisation.
The main areas addressed by the standard include:
-
Governance and responsibilities: defining roles, competencies and responsibilities in the management of AI systems.
-
Risk management: integrating processes for identifying, assessing and addressing risks associated with artificial intelligence.
-
Process control: ensuring structured management of system development, verification, validation and monitoring activities.
-
Documentation and traceability: organising the information and evidence needed to demonstrate compliance with applicable requirements.
-
Post-market monitoring: monitoring system performance and managing any issues arising during the use of AI systems.
-
Continual improvement: assessing the effectiveness of the management system and updating organisational processes.
Presumption of Conformity: What Changes for Businesses?
The most significant aspect of the publication of EN 18286:2026 in the Official Journal of the European Union concerns the presumption of conformity mechanism established under Article 40 of the AI Act.
Under this principle, high-risk AI systems that comply with harmonised standards, or parts thereof, whose references have been published in the Official Journal of the European Union are presumed to comply with the regulatory requirements covered by those standards.
For businesses, this means having access to a European-recognised technical reference to demonstrate compliance with quality management system requirements.
However, the presumption of conformity does not automatically establish compliance of the entire AI system with the AI Act, nor does it remove the provider's responsibility for meeting the other obligations laid down in the Regulation.
Integration with ISO 9001 and ISO/IEC 42001
Another important aspect is the possibility of integrating EN 18286:2026 with management systems already implemented by organisations.
The standard is complementary to two major international standards:
-
ISO 9001, dedicated to quality management systems, which provides an organisational foundation for process control, responsibility management and continual improvement.
-
ISO/IEC 42001, dedicated to artificial intelligence management systems, which addresses governance, risk management and the impacts associated with the use of AI.
For organisations already certified to ISO 9001 or implementing a management system in accordance with ISO/IEC 42001, EN 18286:2026 can provide an important link between existing management practices and the specific obligations introduced by the AI Act.
Its added value lies in its recognition as a European harmonised standard, giving it a specific role in the presumption of conformity mechanism established by the Regulation.
What Are the Benefits and Which Businesses Are Concerned?
Adoption of EN 18286:2026 remains voluntary, but it can offer significant benefits to providers of high-risk artificial intelligence systems.
In particular, the standard can help organisations to:
-
Translate legislative requirements into operational and verifiable processes.
-
Reduce uncertainty in interpreting and implementing the AI Act.
-
Facilitate audits and conformity assessment activities.
-
Improve risk management and control over business processes.
-
Strengthen the trust of customers, partners and stakeholders.
The standard is primarily aimed at developers and providers of AI systems classified as high-risk, including organisations operating in sectors such as healthcare, education, human resources management, critical infrastructure and public services, where their applications fall within the categories regulated by the AI Act.
From Regulatory Compliance to Responsible AI Management
The publication of EN 18286:2026 represents an important step in the implementation of the AI Act, providing businesses with a technical tool to address European regulatory requirements in a structured manner.
The development does not introduce additional legislative obligations. Instead, it makes available a harmonised reference framework that links quality management with the demonstration of regulatory compliance.
For organisations, this creates an opportunity to integrate AI Act requirements into their governance, control and continual improvement processes, supporting the development of increasingly reliable and responsible artificial intelligence systems.