Article 17: Quality Management System
Article 17 requires providers of high-risk systems to put in place a documented quality management system covering strategy, design control, testing, data management, post-market monitoring, and incident reporting procedures. The Digital Omnibus adds explicit proportionality for SMEs and small-mid-cap companies, allowing simplified documentation.
- 02 Dec 2027 Applies to Annex III high-risk systems
- 02 Aug 2028 Applies to Annex I embedded high-risk systems
- Document a quality management system covering the elements listed in Article 17(1), such as regulatory compliance strategy, design and development control, and testing procedures.
- Include procedures for reporting serious incidents and handling post-market monitoring.
- Keep the QMS proportionate to the size of the organisation — the Digital Omnibus introduces simplified expectations and templates for SMEs and small-mid-cap companies.
- Integrate the QMS with the technical documentation and conformity assessment process.
- Quality management system documentation
QMS is sometimes assumed to mean adopting a full formal certification like ISO 9001; Article 17 sets its own minimum elements and, after the Digital Omnibus, explicitly scales down expectations for smaller companies.
Unsettled: The exact scope of the SME/small-mid-cap simplification (which QMS elements can be reduced and how) was not verified against the primary EUR-Lex text in the underlying research; only secondary sources describe it.
What regulators published on Art. 17
- Loading from the public feed…
- Regulation (EU) 2024/1689 on EUR-Lex
- Look for Article 17
- Deadline changes and the acts behind them
Get told when Art. 17 moves.
Deadlines under this regulation have already shifted once in 2026. A signed webhook, a REST API and an MCP server carry the same record this page is built from, so your systems learn about the next change without anyone re-reading the text. Free during the beta.
Get free accessInformational content only. Not legal advice and not a substitute for qualified counsel. Dates reflect Regulation (EU) 2026/1744 as of 04 Aug 2026.