--- title: "AI Act: Publication of the First European Harmonised Standard, a Major Step Towards Compliance for High-Risk AI Systems" id: "10823" type: "post" slug: "ai-act-publication-of-the-first-european-harmonised-standard-a-major-step-towards-compliance-for-high-risk-ai-systems" published_at: "2026-11-03T10:02:58+00:00" modified_at: "2026-11-03T10:03:00+00:00" url: "https://www.august-debouzy.com/en/legal-article/ai-act-publication-of-the-first-european-harmonised-standard-a-major-step-towards-compliance-for-high-risk-ai-systems/" markdown_url: "https://www.august-debouzy.com/en/legal-article/ai-act-publication-of-the-first-european-harmonised-standard-a-major-step-towards-compliance-for-high-risk-ai-systems.md" taxonomy_category: - "Legal Article" taxonomy_tax_expertise: - "Artificial intelligence" taxonomy_tax_secteur: - "Tech and Digital" --- Summarize with AI On 14 October 2026, the European Commission published in the Official Journal of the European Union the reference of the standard EN 18286:2026, the first harmonised standard drafted in support of the AI Act. This publication marks an important milestone in the practical implementation of the obligations imposed on providers of high-risk artificial intelligence systems. **1 – A first technical framework for implementing the requirements of the AI Act** By [Commission Implementing Decision (EU) 2026/2274 of 12 October 2026](https://eur-lex.europa.eu/eli/dec_impl/2026/2274/oj?utm_source=chatgpt.com) , the European Commission published the reference of the standard EN 18286:2026, “Artificial intelligence – Quality management system for EU AI Act regulatory purposes”, adopted by CEN and CENELEC in July 2026. The standard is intended to support providers of high-risk AI systems in implementing Article 17 of Regulation (EU) 2024/1689 (the “AI Act”), which requires them to establish a documented quality management system designed to ensure compliance with their regulatory obligations. In practice, it provides a structured framework covering the entire lifecycle of AI systems, including governance and allocation of responsibilities, design and development, risk and data management, verification and validation procedures, change control, post-market monitoring and reporting of serious incidents. Its purpose is to translate regulatory requirements into operational, documented and verifiable processes, enabling providers to structure their compliance framework and demonstrate its effective implementation. **2 – The presumption of conformity under Article 40 of the AI Act** Article 40(1) of the AI Act provides for a presumption of conformity with the requirements set out in Section 2 of Chapter III insofar as those requirements are covered by a harmonised standard whose reference has been published in the Official Journal of the European Union. The European Standardisation Organisations have presented the publication of the reference of the standard EN 18286:2026 as enabling providers to benefit from this presumption in respect of the quality management system requirements laid down in Article 17, insofar as those requirements are covered by the standard. Application of the standard remains voluntary: providers may demonstrate compliance with their obligations by other means, although they will not benefit from the presumption. It does not exempt providers from meeting AI Act requirements that are not covered by the standard, nor from carrying out the required conformity assessments. The legal basis for this presumption in relation to Article 17 nevertheless remains to be clarified: Article 17 falls within Section 3 of Chapter III, whereas Article 40(1) expressly refers to the requirements set out in Section 2. Regulation (EU) 2026/1744 extended the standardisation work to both sections, without this amendment being reflected in the wording of Article 40(1). The interaction between these provisions may therefore require further clarification. **3 – Practical implications for businesses** For providers of high-risk AI systems, this first standard now provides a concrete framework for designing, documenting and assessing their compliance arrangements. In particular, it may be used to conduct gap assessments, formalise internal procedures, clarify the allocation of responsibilities among legal, technical and business teams, and structure the evidence required to demonstrate compliance. It also offers the benefit of providing a common framework for providers, conformity assessment bodies and market surveillance authorities, which may contribute to a more consistent assessment of compliance arrangements. Its implementation must, however, remain proportionate to the size and characteristics of the organisation, in accordance with Article 17(2) of the AI Act. Subject to the terms laid down in the Regulation, it may also be integrated into existing quality management systems, particularly where such systems already meet sector-specific regulatory requirements. For companies using AI solutions, the standard may also serve as a tool for assessing their providers’ compliance, particularly as part of selection procedures, audits and the definition of contractual requirements. **4 – A first step in a broader standardisation programme** The publication of the standard EN 18286:2026 forms part of a standardisation programme entrusted by the European Commission to CEN and CENELEC, covering ten key areas of the AI Act, including risk management, data governance and quality, record-keeping, transparency, human oversight and cybersecurity. Other harmonised standards are therefore expected to progressively complete the framework and provide businesses with technical references covering an increasing number of regulatory requirements. Beyond enhancing legal certainty, the initiative also has an economic objective: to reduce compliance costs, promote interoperability of practices and foster the emergence of technical standards capable of becoming international benchmarks. With this first harmonised standard, the AI Act has reached a new milestone: having defined the applicable obligations, the European Union is now beginning to provide businesses with the tools needed to implement them and demonstrate compliance. Share - Linkedin - Copy Link Summarize with AI ### Authors 1 - [Eden Gall](https://www.august-debouzy.com/en/collaborateur/eden-gall/) ### Practice Area 1 - [Artificial intelligence](https://www.august-debouzy.com/en/tax-expertise/artificial-intelligence/) ### Sector 1 - [Tech and Digital](https://www.august-debouzy.com/en/tax-secteur/technologie-et-digital_en/) ## Discover more content that might interest you News [15/06/23 Legal Article 5 min The European parliament adopted its version of the AI Act AN IMPORTANT STEP ON THE PATH TOWARDS BALANCING FUNDAMENTAL RIGHTS AND INNOVATION On June 14, the European Parliament (“EP”) passed its version of th Read more](https://www.august-debouzy.com/en/legal-article/the-european-parliament-adopted-its-version-of-the-ai-act/)