Govern training, validation and test data
Ensure training/validation/testing datasets meet quality criteria (relevance, representativeness, appropriate statistical properties for the intended purpose) and are examined for possible biases; document data provenance and processing.
- Applies to
- Provider
- Applies from
- 2027-12-02 — Stand-alone high-risk (Annex III) obligations apply
- Derives from
- Article 10
- Primary source
- Art. 10 AIA
Evidence an auditor expects
- Data-governance records — Dataset cards, provenance documentation, representativeness rationale and bias-examination reports substantiating Article 10 for training/validation/test data.
- Annex IV technical file — The full technical documentation package; primary evidence at conformity assessment; must be a living, versioned document.
Audit red flags
Fails an audit
- Documentation created after the fact rather than contemporaneously with the decision — national competent authorities apply the contemporaneous standard.
FAQ
What evidence do I need for Article 10?
Data-governance records, Annex IV technical file. Each should be contemporaneous, versioned, and traceable to the system version.
When does “Govern training, validation and test data” apply?
From 2027-12-02 — Stand-alone high-risk (Annex III) obligations apply. It applies to: Provider.
What fails an audit here?
Documentation created after the fact rather than contemporaneously with the decision — national competent authorities apply the contemporaneous standard.
Legal source
Stay audit-ready as the Act changes
EU AI Regulation Decoded tracks each obligation and the evidence auditors expect — one practitioner email a week.
Subscribe — free, weeklyNot legal advice. This is a practitioner reference generated from a cited knowledge base built on the primary legal text and official Commission guidance. Verify against the cited primary sources before relying on it for a compliance decision. See editorial standards & methodology.