On 14 October 2026 the Official Journal of the European Union published Commission Implementing Decision (EU) 2026/2274 of 12 October 2026, which cites EN 18286:2026 as a harmonised standard for high-risk AI systems drafted in support of Regulation (EU) 2024/1689 (the AI Act). Article 2 states that the decision enters into force on the day of that publication. Further harmonised standards under the standardisation request in Implementing Decision C(2025) 3871 are not yet scheduled in this act. No separate compliance date is set for aligning a quality management system with EN 18286:2026: the Article 40 presumption of conformity runs from the Official Journal citation itself.
Providers of high-risk AI systems placing them on the EU market, EU authorised representatives of non-EU high-risk AI providers, EU importers of high-risk AI systems, and notified bodies assessing high-risk AI systems under the AI Act must align the Article 17 quality management system, including post-market monitoring, with EN 18286:2026 so the Article 40 presumption of conformity applies to the requirements that standard covers. Without that alignment, those providers must demonstrate the Article 17 quality management system without the presumption of conformity that the Official Journal citation of EN 18286:2026 confers.
What does Implementing Decision (EU) 2026/2274 publish?
Article 1 publishes, in the Official Journal, the reference of the single harmonised standard listed in the Annex: EN 18286:2026, titled "Artificial intelligence: Quality management system for EU AI Act regulatory purposes". The legal basis of the decision is Article 10(6) of Regulation (EU) No 1025/2012 on European standardisation. The text has EEA relevance.
The Annex has one row and no restriction or withdrawal. Recital 6 ties the presumption to Official Journal publication, so Article 2 sets entry into force on 14 October 2026, not on a later date.
| Point | What Decision (EU) 2026/2274 states |
|---|---|
| Act | Commission Implementing Decision (EU) 2026/2274 of 12 October 2026 |
| OJ publication | OJ L, 14 October 2026, ELI http://data.europa.eu/eli/dec_impl/2026/2274/oj |
| Standard cited | EN 18286:2026, quality management system for EU AI Act regulatory purposes |
| Presumption | Article 40 of Regulation (EU) 2024/1689, from the OJ citation |
| Entry into force | The day of OJ publication (Article 2) |
Which AI Act requirements does EN 18286:2026 cover?
Recital 3 records that CEN and Cenelec completed the work requested at point 9 of Annex I to Commission Implementing Decision C(2025) 3871 of 23 June 2025: harmonised standards on quality management systems for providers of AI systems, including post-market monitoring processes. That work produced EN 18286:2026.
Recital 5 states that EN 18286:2026 satisfies the requirements it aims to cover in Regulation (EU) 2024/1689, and that it is therefore appropriate to publish its reference. Recital 1 restates Article 40: a high-risk AI system, or a general-purpose AI model, that conforms to a harmonised standard whose reference is published in the Official Journal is presumed to conform with the requirements that standard or part of it covers. The decision does not cite EN 18286:2026 against risk management, data governance, transparency or human oversight, and it does not publish any other standard.
Recital 4 records that the Commission, with CEN and Cenelec, assessed EN 18286:2026 against Implementing Decision C(2025) 3871. Conformity with the cited standard is voluntary: the presumption is the legal effect of the citation, not a duty to buy the standard.
Who can rely on the Article 40 presumption from this citation?
A provider that places a high-risk AI system on the EU market can claim the presumption only where its Article 17 quality management system, including post-market monitoring, conforms to EN 18286:2026 for the requirements that standard covers. An EU authorised representative of a non-EU provider and an EU importer of those systems depend on that same system. A notified body assessing a high-risk AI system uses the cited reference when it checks whether the presumption is available.
Article 40, as restated in recital 1, also names general-purpose AI models that conform to a published harmonised standard. This decision publishes only the quality-management standard requested for providers of AI systems. It sets no later calendar date: 14 October 2026 is the first day the citation is in the Official Journal. A provider that does not follow EN 18286:2026 demonstrates the Article 17 system directly, without that presumption.
What should providers prepare while no further date is set?
Decision (EU) 2026/2274 sets no compliance date beyond Official Journal publication. Map the Article 17 system, including post-market monitoring, against EN 18286:2026 and record which requirements it covers. The technical file should state whether the presumption is claimed, and for which requirements.
- Obtain EN 18286:2026 and identify the clauses that map to Article 17, including post-market monitoring.
- Record gaps between the current quality management system and those clauses, with an owner for each gap.
- Tell the notified body, where one is involved, whether the Article 40 presumption is claimed and on which requirements.
- Keep a direct demonstration for any Article 17 requirement EN 18286:2026 does not cover. This act cites one standard.
Continuous, per-jurisdiction monitoring is what surfaces the next Official Journal citation of an AI Act harmonised standard on the day it is published.
Check whether each high-risk system placed on the EU market will claim the Article 40 presumption, limit that claim to what EN 18286:2026 covers, and brief quality and notified-body contacts on the 14 October 2026 citation. Obsidian tracks later Official Journal citations of AI Act harmonised standards.
