# Operate a quality management system

- **Record type**: Obligation
- **Instrument**: Regulation (EU) 2024/1689 — Artificial Intelligence Act
- **Jurisdiction**: European Union
- **Category**: quality_management
- **Binding**: Yes
- **Applies from**: 2027-12-02
- **Provision**: Article 17

## In brief

Operate a quality management system is a legal requirement under the EU AI Act in the European Union (Article 17). It applies from 2 December 2027. The record carries 1 evidence example and mappings to 2 frameworks. In practice: Extend an existing ISO 9001 or ISO/IEC 42001 management system to cover the Article 17 elements.

## What the duty requires

Providers of high-risk AI systems must put in place a documented quality management system covering regulatory-compliance strategy, design and development procedures, testing and validation, technical specifications and standards, data management, the risk-management system, post-market monitoring, incident reporting, communication with authorities, record keeping, resource management and an accountability framework.

## What an organisation does about it

Extend an existing ISO 9001 or ISO/IEC 42001 management system to cover the Article 17 elements.

## Controls that meet this duty

- AI governance policy and accountability structure (supports): https://aipolicytracker.org/controls/ai-governance-policy-and-accountability
- Quality management system for AI development and supply (satisfies): https://aipolicytracker.org/controls/ai-quality-management-system
- Model release and change-management gate (supports): https://aipolicytracker.org/controls/model-release-and-change-management-gate

## Parent instrument

- Regulation (EU) 2024/1689 — Artificial Intelligence Act
  - Record: https://aipolicytracker.org/policies/eu-ai-act
  - Context file: https://aipolicytracker.org/policies/eu-ai-act.md

## Provenance

- **Permanent id**: AIPT-OBL-0013 (https://aipolicytracker.org/id/AIPT-OBL-0013; never changes or gets reused)
- **Record page**: https://aipolicytracker.org/obligations/eu-ai-act-quality-management-system
- **Official source**: https://eur-lex.europa.eu/eli/reg/2024/1689/oj
- **Provision**: Article 17
- **Review status**: pending review
- **Confidence**: medium
- **Facts last confirmed**: never confirmed against the official source
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/
- **Cite as**: AIPolicyTracker (2026). "Operate a quality management system (EU AI Act)" [AIPT-OBL-0013, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0013 (accessed 27 October 2026).

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.