The European Commission has published the reference of a harmonised standard drafted in support of the EU Artificial Intelligence Act. Commission Implementing Decision (EU) 2026/2274 of 12 October 2026, on the harmonised standards for high-risk AI systems drafted in support of Regulation (EU) 2024/1689, appeared in the Official Journal of the European Union on 14 October 2026. Article 2 of the Decision sets entry into force on the day of publication, so the citation took effect on 14 October 2026. This is an adopted implementing act rather than a draft or a consultation, and EN 18286:2026 is the first harmonised standard cited in support of the AI Act.
Article 1 of the Decision publishes in the Official Journal the reference of the harmonised standard listed in the Annex. The Annex carries a single entry, EN 18286:2026, Artificial intelligence - Quality management system for EU AI Act regulatory purposes. Recital 2 records that the Commission requested the drafting work from the European Committee for Standardisation and the European Committee for Electrotechnical Standardisation by Implementing Decision C(2025) 3871. Recital 3 ties EN 18286:2026 to point 9 of Annex I to that request, covering quality management systems for providers of AI systems, including post-market monitoring processes. Recital 1 states the effect of Article 40 of Regulation (EU) 2024/1689, under which high-risk AI systems in conformity with harmonised standards whose references are published in the Official Journal are presumed to conform to the requirements those standards cover. Article 17 of Regulation (EU) 2024/1689 carries the obligation on providers of high-risk AI systems to put a quality management system in place, documented in written policies, procedures and instructions.
Providers of high-risk AI systems that build their quality management system to EN 18286:2026 can rely on the Article 40 presumption for the requirements the standard covers, which narrows what they must evidence from first principles in conformity assessment. Notified bodies and national market surveillance authorities now have a cited reference against which to test a provider's quality management documentation and its post-market monitoring processes. Deployers and systems integrators contracting with providers of high-risk systems can ask for conformity against a published reference instead of bespoke assurances. Providers running other AI management system standards gain no presumption from them, because Article 40 attaches the presumption to references published in the Official Journal.
Recital 5 records that EN 18286:2026 meets the requirements it aims to cover, which are set out in Regulation (EU) 2024/1689, without listing the articles satisfied, so the reach of the presumption follows the standard's own scope rather than a schedule in the Decision. Recital 3 confines that scope to quality management systems for providers of AI systems, including post-market monitoring processes, and the Annex cites no second standard, leaving every other requirement of the Regulation outside the presumption until further references are published. Recital 4 records that the Commission, with the two standardisation bodies, assessed whether EN 18286:2026 complies with request C(2025) 3871, which itself repealed the earlier request C(2023) 3215.
Licentium advises providers, deployers and conformity assessment bodies on obligations attaching to high-risk AI systems under Regulation (EU) 2024/1689. Work we undertake includes assessing whether a quality management system meets Article 17, mapping internal policies and records onto EN 18286:2026 to support the Article 40 presumption, preparing conformity assessment files and notified body submissions, and reviewing supply contracts for allocation of AI Act compliance duties.