First harmonized technical standard under the EU AI Act, EN 18286, published

On October 14, 2026, the European Commission published EN 18286:2026 (AI quality management system), the first harmonized standard under the EU AI Act, under which providers of high-risk AI systems can demonstrate compliance with the technical documentation requirement in Article 11(1) and the quality management system requirement in Article 17(1) of the Act. The standard was developed by CEN and CENELEC in response to the Commission's standardization request, which covers 10 areas including risk management, data governance, transparency, human oversight, and cybersecurity; once the citation of the standard is published in the Official Journal of the EU, it gives rise to a presumption of conformity under Article 40, adoption is voluntary, and providers may also demonstrate compliance by other means. EN 18286 requires providers to identify the applicable requirements, define the scope of the quality management system, and establish a documented compliance strategy covering Articles 9 to 15, conformity assessment, post-market monitoring, and serious incident reporting; its structure is consistent with ISO/IEC 42001 and ISO 9001 and can be used in combination with them, but conformity with these international standards alone does not confer a presumption of conformity.