BSI heralds “significant milestone” for EU AI Act compliance

The harmonisation of EN 18286:2026 represents a significant step towards providing organisations with a recognised framework for establishing and then maintaining quality management systems that support compliance with the regulatory requirements of the EU AI Act.

As the regulatory landscape for AI continues to evolve, this development provides greater clarity on how organisations can structure their quality management processes in order to address the requirements applicable to high-risk AI systems.

Understanding EN 18286:2026

EN 18286:2026 sets out the requirements for a quality management system for regulatory purposes under the EU AI Act. It’s particularly relevant to providers of high-risk AI systems for whom robust quality management processes are an essential part of meeting applicable regulatory obligations.

The standard supports a systematic approach towards managing key aspects of AI compliance, including organisational responsibilities, documented processes, risk-related activities and the controls needed to support the consistent development and provision of AI systems.

By embedding these elements into their management systems, organisations can strengthen their ability to demonstrate that relevant regulatory requirements are addressed in a structured, consistent and documented manner.

Why is harmonisation important?

The publication of the reference to EN 18286:2026 in the Official Journal of the European Union is an important development for organisations preparing for compliance with the EU AI Act.

Under Article 40 of the Regulation (EU) 2024/1689, conformity with harmonised standards provides a presumption of conformity with some of the requirements of the EU AI Act covered by those standards.

This provides organisations with a valuable route towards supporting compliance, helping them to align their quality management arrangements with recognised European standards.

It’s important to note that the presumption of conformity applies only to the requirements covered by the relevant harmonised standard. Organisations must continue to assess and address all other applicable obligations under the EU AI Act.

Commitment to AI assurance

The BSI recognises the importance of robust, reliable and responsible AI governance in building trust and supporting AI’s adoption.

The harmonisation of EN 18286:2026 is an important development for the market. For its part, the BSI is actively working towards obtaining accreditation for EN 18286. This work reflects the BSI’s commitment to developing its own capabilities in this evolving area and to supporting organisations as they navigate the requirements of the EU AI Act.

As the regulatory framework matures, the BSI’s focus remains on helping organisations to understand the implications of new and harmonised standards, strengthen their management systems and prepare for the evolving expectations surrounding AI governance and assurance.

Next stage of AI compliance

For those organisations developing, supplying or deploying high-risk AI systems, now is an important time to review existing quality management arrangements and identify any gaps against the applicable requirements of the EU AI Act.

Understanding the role of EN 18286:2026, assessing existing processes and establishing a structured approach towards quality management can help organisations to prepare for their regulatory obligations and, in parallel, build confidence in their AI governance practices.

The BSI will continue to follow developments in AI standardisation and assurance, working towards accreditation for EN 18286 and supporting the development of trust in AI.

*Further information is available by accessing the BSI’s dedicated EN 18286 web page