CEN-CENELEC approves EN 18286, the first harmonised standard for the EU AI Act (quality management systems)
On July 12, 2026 CEN and CENELEC approved EN 18286:2026, "Artificial intelligence: Quality management system for EU AI Act regulatory purposes". It is the first of the JTC 21 standards written to support the AI Act. It specifies the quality management system that Article 17 requires from providers of high-risk AI systems. Compliance gives a presumption of conformity only once the standard is cited in the EU's Official Journal, which had not happened as of mid-2026.
Key facts
- Full title: EN 18286:2026 'Artificial intelligence — Quality management system for EU AI Act regulatory purposes'; prepared by CEN/CLC/JTC 21
- Approved by CEN-CENELEC on July 12, 2026; CEN-CENELEC spotlight article July 30/31, 2026
- Operationalises AI Act Article 17 (quality management system for high-risk AI providers): governance, lifecycle control, documentation
- Final text 51 pages (down from a 58-page enquiry draft) after over 1,000 consultation comments (Adam Leon Smith)
- Deliberately structured differently from ISO 9001 and ISO/IEC 42001, per commentators
- Presumption of conformity requires citation in the Official Journal of the EU; not yet cited as of July 2026 (per compliance trackers)
- Other JTC 21 standards (risk management, cybersecurity, logging, etc.) are still in development; missing standards were one reason the Digital Omnibus delayed high-risk obligations
What happened
The European standards bodies CEN and CENELEC approved EN 18286:2026, the first harmonised European standard produced by joint technical committee JTC 21 for the EU AI Act. It sets out how providers of high-risk AI systems should build and maintain the quality management system required by Article 17 of the Act. The standards bodies described it as one of the first building blocks, with standards on risk management, cybersecurity, logging and other areas to follow.
Why it matters
Harmonised standards are how companies show compliance with the AI Act in practice. Their late arrival was one reason the EU postponed high-risk obligations in its Digital Omnibus. EN 18286 is the first to be finished. Its legal effect (presumption of conformity) starts only when it is cited in the Official Journal, a step to check later in 2026.
Changelog
- 2026-09-30: created (from leads queue)
Related events
- EU AI Act enters into force ★★★★★
- EU AI Act 'Digital Omnibus' in force: high-risk rules delayed to Dec 2027, GPAI enforcement starts Aug 2 ★★★★
Sources (5)
- officialCEN-CENELEC: EN 18286 in the spotlight, supporting compliance with the AI Act
- officialCEN-CENELEC: First standard approved under the AI Act
- officialANEC: First European standard supporting the AI Act
- discussionAdam Leon Smith: EN 18286:2026 is finally published
- docsModulos docs: EN 18286 quality management system for the EU AI Act
id: 2026-07-12-en-18286-first-eu-ai-act-standard · updated 2026-09-30 · open in the interactive timeline