Harmonised Standards for the EU AI Act (CEN-CENELEC JTC 21)

The AI Act sets legal requirements, while harmonised standards can give providers practical specifications for showing conformity. CEN and CENELEC’s Joint Technical Committee 21 develops standards supporting the Act under Commission standardization requests. Its work covers areas such as risk management, quality management, data, bias, cybersecurity, robustness, logging, and conformity assessment. A standard may translate a broad requirement into a repeatable process or test, but it does not replace the Regulation or decide whether a system is high-risk. The legal effect depends on a formal chain. A standard is developed and adopted through the European standardization system; the Commission assesses whether its scope is suitable; then its reference is published in the Official Journal of the European Union. Under Article 40, conformity with a harmonised standard whose reference is published can create a presumption that the system meets the requirements covered by that standard. The presumption is limited to the covered requirements and standard scope. It is not a blanket approval, CE mark, or guarantee against enforcement. As of September 2026, CEN-CENELEC has announced publication of EN 18286:2026 on quality management systems for AI Act regulatory purposes. That announcement is distinct from proof that the standard’s reference has been cited in the Official Journal for Article 40 effect. Check the current Commission harmonised-standards listing and Official Journal before claiming presumption of conformity. Other JTC 21 items may remain drafts or under enquiry and cannot be described as final harmonised standards. Providers should map each requirement to evidence, identify whether an applicable standard is final and cited, and document alternative methods for uncovered requirements. Standards are voluntary routes to a presumption where the law says so; the underlying legal obligations remain. Review amendments, restrictions, and withdrawn citations because the legal effect can change over time.