# First harmonized standard under the EU AI Act cited in the Official Journal

On 14 October 2026 the European Commission published the reference of EN 18286:2026, a quality management system standard for high-risk AI providers, in the Official Journal. Providers that apply it gain a presumption of conformity with the AI Act's Article 17 requirements it covers.

URL: https://airiskalmanac.com/news/news-2026-10-14-eu-first-harmonized-ai-act-standard-en-18286/
Author: AI Risk Almanac | Publisher: AI Risk Almanac
Updated: 2026-11-03

---

**The European Commission published the reference of EN 18286:2026, "Artificial intelligence - Quality management system for EU AI Act regulatory purposes," in the Official Journal on 14 October 2026, making it the first harmonized standard supporting the EU AI Act.** Providers of high-risk AI systems that implement it benefit from a presumption of conformity with the AI Act's Article 17 quality management requirements that the standard covers.

## What happened

Commission Implementing Decision (EU) 2026/2274, dated 12 October 2026, lists EN 18286:2026 as the sole entry in its annex and entered into force on the day of its publication. The standard was developed by CEN and CENELEC under a Commission standardization request of 23 June 2025. The decision states that compliance with a harmonized standard confers a presumption of conformity from the date its reference is published.

In its announcement on 19 October, the Commission described EN 18286 as "the only AI QMS standard with a presumption of conformity." It said the standard is mapped to Article 17, built around the AI system life cycle rather than the organization, and designed to be layered on existing standards such as ISO/IEC 42001, ISO 9001 or a sector quality management system such as ISO 13485, rather than replace them. Organizations without ISO/IEC 42001 can use it to extend an existing quality management system or build one. The Commission said further harmonized standards are expected to follow.

## Why it matters

The Commission describes harmonized standards as the tools that "will offer legal certainty under the AI Act," and until October 2026 none had been cited for it. EN 18286 gives high-risk AI providers a recognized way to evidence one core obligation ahead of the high-risk application dates of 2 December 2027 (Annex III) and 2 August 2028 (Annex I). For assurance providers and underwriters, it gives a specific, citable benchmark for quality management that sits alongside the certifiable ISO/IEC 42001. See [The Standards Landscape Explained](/learn/the-standards-landscape-explained/), [What Is AI Assurance?](/learn/what-is-ai-assurance/) and, for the underwriting side, [What Is AI Insurance?](/learn/what-is-ai-insurance/).

## What is not yet clear

The presumption covers only the Article 17 requirements the standard addresses. Harmonized standards for other high-risk requirements, such as risk management, data governance, cybersecurity and conformity assessment, are still being developed by CEN and CENELEC, according to the Commission. The [timeline](/landscape/the-timeline/) records the date.

## Primary sources

- Commission Implementing Decision (EU) 2026/2274 on the harmonised standards for high-risk AI systems: https://eur-lex.europa.eu/eli/dec_impl/2026/2274/oj
- First harmonised standard supporting the AI Act published in the Official Journal: https://digital-strategy.ec.europa.eu/en/library/first-harmonised-standard-supporting-ai-act-published-official-journal
- Standardisation of the AI Act: https://digital-strategy.ec.europa.eu/en/policies/ai-act-standardisation
- EN 18286 in the Spotlight: Supporting Compliance with the AI Act: https://www.cencenelec.eu/news-events/news/2026/en-in-the-spotlight/2026-07-30-ai-quality-management/