Which AI Act Duties Does EN 18286 Cover? The Quality-Management Standard Cited by Implementing Decision (EU) 2026/2274 on 14 October 2026

What the Official Journal published on 14 October 2026

On 14 October 2026 the Official Journal of the European Union published Commission Implementing Decision (EU) 2026/2274 of 12 October, which cites EN 18286:2026, "Artificial intelligence – Quality management system for EU AI Act regulatory purposes." The decision took effect on publication. From that day a provider of a high-risk AI system that follows the standard can rely on a presumption of conformity under the AI Act, to the extent the standard covers the Act's requirements. CEN-CENELEC describes EN 18286 as the first harmonised European standard for AI Act purposes. CEN approved it on 12 July, and it was published at the end of July.

Which parts of Article 17 the standard reaches, and which it leaves out

The standard's Annex ZA maps it to Article 17(1), the thirteen elements of a provider's quality management system, and to the first sentence of Article 11(1) on technical documentation. Articles 17(2), 17(3) and 17(4) are marked as not covered, and Articles 9, 72 and 73, on risk management, post-market monitoring and serious-incident reporting, have no row of their own. This post answers one question: what a provider can claim on the strength of EN 18286, what still has to be shown another way, and when the difference would count under the high-risk dates the EU institutions agreed in May.