Up nextNext guide
Real-Time Remote Biometric Identification Rules in the EU
Society
Society GUIDE
Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21)
CEN-CENELEC JTC 21 develops European standards that can help operationalize AI Act requirements.
On this page3 min read
Overview
A European standard’s publication alone does not create a presumption of conformity: the reference must be published in the EU Official Journal for the relevant legal effect.
Deep Dive
The AI Act sets legal requirements, while harmonised standards can give providers practical specifications for showing conformity. CEN and CENELEC’s Joint Technical Committee 21 develops standards supporting the Act under Commission standardization requests. Its work covers areas such as risk management, quality management, data, bias, cybersecurity, robustness, logging, and conformity assessment. A standard may translate a broad requirement into a repeatable process or test, but it does not replace the Regulation or decide whether a system is high-risk.
The legal effect depends on a formal chain. A standard is developed and adopted through the European standardization system; the Commission assesses whether its scope is suitable; then its reference is published in the Official Journal of the European Union. Under Article 40, conformity with a harmonised standard whose reference is published can create a presumption that the system meets the requirements covered by that standard. The presumption is limited to the covered requirements and standard scope. It is not a blanket approval, CE mark, or guarantee against enforcement.
As of September 2026, CEN-CENELEC has announced publication of EN 18286:2026 on quality management systems for AI Act regulatory purposes. That announcement is distinct from proof that the standard’s reference has been cited in the Official Journal for Article 40 effect. Check the current Commission harmonised-standards listing and Official Journal before claiming presumption of conformity. Other JTC 21 items may remain drafts or under enquiry and cannot be described as final harmonised standards.
Providers should map each requirement to evidence, identify whether an applicable standard is final and cited, and document alternative methods for uncovered requirements. Standards are voluntary routes to a presumption where the law says so; the underlying legal obligations remain. Review amendments, restrictions, and withdrawn citations because the legal effect can change over time.
Strategic Impact
Risk and safety
Catastrophic and everyday AI harms both depend on who understands the risks and who can act.
Clearer decisions
Public and professional literacy shapes whether strong safety policy is politically possible.
Cutting through hype
Clear explanations reduce capture by hype, lab PR, and vague ethics theater.
The Future of Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21)
CEN-CENELEC work and EU citations will continue to evolve. Commission timelines now give Annex III high-risk systems until 2 December 2027 and certain product-embedded systems until 2 August 2028, increasing the importance of checking current standards as they are published and cited. Organizations should maintain a standards register with status, version, scope, OJ citation, restrictions, and reassessment date rather than relying on vendor claims or old draft references. Before each conformity claim, verify the cited edition and the requirements its scope covers.
Real-World Implementation
A provider checks the Official Journal citation before claiming EN 18286 creates an Article 40 presumption.
A team maps an uncovered requirement to its own test evidence instead of assuming one standard covers all duties.
A compliance lead distinguishes a JTC 21 draft under enquiry from an adopted and cited standard.
A manufacturer records the exact standard edition and restrictions used in its conformity assessment.
Risks & Guardrails
Treating existential risk as sci-fi while capability compounds.
Confusing surface product safety with alignment under high autonomy.
Leaving non-English and non-expert audiences with only low-quality sources.
Implementation Roadmap
Separate product harms, misuse, and loss-of-control / misalignment risks.
Ask what evidence would change your view on timelines and severity.
Prefer primary sources and concrete evals over marketing claims.
Identify one action path: career, policy, funding, or skills — not only awareness.
Keep Exploring
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21) quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
Frequently asked questions
What is Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21)?
CEN-CENELEC JTC 21 develops European standards that can help operationalize AI Act requirements. A European standard’s publication alone does not create a presumption of conformity: the reference must be published in the EU Official Journal for the relevant legal effect.
What is next for Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21)?
CEN-CENELEC work and EU citations will continue to evolve. Commission timelines now give Annex III high-risk systems until 2 December 2027 and certain product-embedded systems until 2 August 2028, increasing the importance of checking current standards as they are published and cited. Organizations should maintain a standards register with status, version, scope, OJ citation, restrictions, and reassessment date rather than relying on vendor claims or old draft references. Before each conformity claim, verify the cited edition and the requirements its scope covers.
What creates the AI Act presumption of conformity for a harmonised standard?
The Act ties the presumption to publication of the reference in the Official Journal.
What information belongs in a standards register?
These fields help verify whether the standard has current legal effect.
Keep learning
Related guides
More guides picked for this topic