EU publishes EN 18286, the first harmonised standard under the AI Act

The European Commission published EN 18286:2026 as the first harmonised standard supporting the EU AI Act, giving high-risk AI providers a route to meet covered quality management requirements.

The reference appeared in the Official Journal on 14 October through Commission Implementing Decision (EU) 2026/2274. The decision took effect on publication and compliance with the standard can confer a presumption of conformity.

This applies directly to part of the insurance market. Annex III of the Act classifies AI used to assess risk and price life and health insurance for natural persons as high-risk.

EN 18286 covers quality management systems for providers of AI systems, including post-market monitoring. CEN and Cenelec adopted it under the Commission's standardisation request.

The Commission said the standard "provides a clear legal pathway for providers of high-risk AI systems to comply with the quality management system requirements under article 17 of the AI Act".

According to the Commission's web note, EN 18286 is the only AI quality management standard with a presumption of conformity. It is organised around the lifecycle of an AI system rather than around the organisation operating it.

Providers can layer it onto ISO/IEC 42001, ISO 9001 or a sector-specific quality management system. That design allows businesses in regulated sectors to integrate their management systems rather than operate a separate one for the AI Act.

The presumption is limited. Modulos says it covers the provisions mapped in Table ZA.1 of the standard's Annex ZA and does not cover Article 17(2) to (4). Following a harmonised standard is voluntary and does not establish compliance with every requirement of the Act.

The Commission said further harmonised standards are expected. Its explanatory web note was published on 19 October, five days after the Official Journal decision.

For life and health insurers providing high-risk pricing or risk assessment systems, the publication creates a recognised route for the Article 17 requirements covered by the standard. Existing quality systems can provide the base for that work.

The route is also relevant to UK insurers and MGAs that provide those systems through EU entities or for EU customers. The standard gives those operations a common framework for quality management and post-market monitoring.

Other AI Act duties remain outside the presumption provided by EN 18286.

Related coverage: FCA says senior managers are accountable for their firms' AI and FSB finalises 12 sound practices for AI at financial institutions.

Sources

• Official Journal: Commission Implementing Decision (EU) 2026/2274 (PDF)
• European Commission: First harmonised standard supporting the AI Act published in the Official Journal
• AI Act Annex III: high-risk AI systems
• Modulos: EN 18286 FAQ

CoverWire is a news and information service. Nothing here is investment advice.