The curved glass-and-steel facade of the Berlaymont building under a clear blue sky, with a tall Next Generation EU banner on its orange-clad corner and a street crossing in the foreground.
The Berlaymont building, the European Commission headquarters in Brussels, August 8, 2020. Archive photograph identifying the institution that adopted the Decision; it does not depict the adoption, the Official Journal publication, or any standards work. Trougnouf (Benoit Brummer) / Wikimedia Commons · CC BY 4.0

Official Journal Citation and Reported Scope

On October 14, 2026, the European Commission published Implementing Decision (EU) 2026/2274 in the Official Journal. Dated October 12, it entered into force on publication (Article 2). Its Annex lists one harmonised standard under the AI Act (Regulation (EU) 2024/1689): EN 18286:2026, the quality management system standard for EU AI Act regulatory purposes. The recitals link it to the Commission's standardisation request on quality management systems for providers, including post-market monitoring processes.

In an October 14 post, CEN-CENELEC JTC 21, the committee that developed the standard, calls it the first harmonised standard under the Act. JTC 21 says providers whose quality management system follows it are presumed to conform with Article 17, and that use of the standard is voluntary. The Decision text does not say "first" or name Article 17.

What the Presumption Covers and What Remains

Article 40(1) of the Act presumes conformity with the requirements a cited standard covers. As written, it names the Section 2 requirements for high-risk systems (Articles 8 to 15) and certain general-purpose AI model obligations, while Article 17 sits in Section 3. JTC 21 points readers to the standard's Annex ZA and the Decision for the exact scope, and we have not read the standard.

JTC 21 says it continues work on standards for logging, human oversight, accuracy, and other topics, and that the amended request runs until February 28, 2027. Under the Digital Omnibus on AI, Chapter III, Sections 1 to 3, apply from December 2, 2027 for Annex III high-risk systems and from August 2, 2028 for those under Annex I.

Audit Questions on Process Evidence

Our editorial audit questions concern the gap between a management system and the AI system it governs. Article 17(1) covers test and validation procedures, a post-market monitoring system, serious incident reporting procedures, and record-keeping procedures, so a quality management system can document that such processes exist. What evidence shows that the high-risk system itself meets Article 12 on logging, Article 14 on human oversight, and Article 15 on accuracy and cybersecurity? Which clauses of EN 18286 did a provider rely on, and has anyone beyond the provider checked that claim? Our earlier brief covers separate Commission information requests, and the catalog lists AI Act resources.