What exactly did the Commission publish?
The decision runs to three pages, but its legal effect is significant. Under Article 40 of the AI Act, high-risk AI systems that conform to a harmonised standard referenced in the Official Journal are presumed to meet the requirements that standard covers.
CEN and Cenelec drafted EN 18286:2026 in response to standardisation request C(2025) 3871 of 23 June 2025. The standard corresponds to point 9 of Annex I to that request, which called for a standard on quality management systems for AI providers, including post-market monitoring processes.
Key facts about the AI Act harmonised standard
- Legal act: Commission Implementing Decision (EU) 2026/2274 of 12 October 2026
- Publication and entry into force: 14 October 2026
- Standard: EN 18286:2026, Artificial intelligence – Quality management system for EU AI Act regulatory purposes
- Scope: QMS for providers of AI systems, including post-market monitoring
Why should a medical device Quality Representative care?
Because many AI-enabled devices will be regulated twice. Software that falls under the MDR or IVDR and requires notified body involvement is classified as high-risk under Article 6(1) and Annex I of the AI Act. Its manufacturer must therefore meet the QMS obligations of both regimes.
Article 17(3) of the AI Act allows the AI-specific elements to be built into the QMS already required by Article 10(9) MDR, so they do not have to run as a separate system. EN 18286 now gives those elements a recognised structure that notified bodies can audit against.
Post-market monitoring needs particular attention. If an algorithm’s performance shifts in real-world use, the AI Act monitoring process and the MDR post-market surveillance (PMS) system have to detect it together, not in two separate reports.
Where should you start?
- Confirm whether your device’s AI component qualifies as high-risk under Article 6(1) of the AI Act.
- Obtain EN 18286:2026 and run a gap analysis against your ISO 13485-based QMS.
- Map AI post-market monitoring to your PMS plan, PSUR and PMCF activities.
- Ask your notified body how it intends to assess the AI-specific QMS elements.
Harmonised standards remain voluntary. A manufacturer may choose another route, but it will then have to demonstrate conformity on its own terms, without the presumption that EN 18286 now provides. For most companies, early alignment will cost less than defending an alternative approach during the next audit.
Link to the document: Commission Implementing Decision (EU) 2026/2274, listing EN 18286:2026