ObligationUpcomingv1.0.0

Article 10: data and data governance

Quality and governance requirements for training, validation and test data of high-risk AI.

The official source remains authoritative. This is general information about obligations and not legal advice. See this object on the map

Address and citation

This object has an address of its own that is never renamed or reused. Store the identifier in your own file, not the title or the link.

Identifier: praxikon:eu:ai-act:obligation:article-10-data-governance
Payload hash (sha256): 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91

Citation line

Praxikon, "Article 10: data and data governance", praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0, dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0), effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-14T00:00:00.000Z, sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91

Version: 1.0.0
Legal time (effective_at): 27 July 2026
Knowledge time (known_at): 8 August 2026
Closed on: Not closed
Application date: 2 December 2027
Topics: high-risk-requirements

Review status: Placed against the official source (8 August 2026). Next check due by 4 February 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

Who must act and who is affected

On an obligation the addressee is recorded separately from the party that is merely affected. That difference decides who a supervisory authority addresses and who has work to do without the duty resting on them.

Duty holder

Provider of an AI systempraxikon:eu:ai-act:actor:provider

Affected actor

Deployerpraxikon:eu:ai-act:actor:deployer

Oversight

Not recorded on this object.

Evidence owner

Provider of an AI systempraxikon:eu:ai-act:actor:provider

What this object links to

Every relation appears below as a path: from the source with its locator, through the conditions and exceptions of the object carrying the relation, to the consequence. A locator belongs to a statement in the data and not to a relation, so the source is the source anchor of the carrying object.

Who carries the duty

1 of 1 shown

The duty rests on this role. A supervisory authority addresses this role when it is not met.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ActorProvider of an AI system
  praxikon:eu:ai-act:actor:provider

Who is affected without being the addressee

1 of 1 shown

This role is practically affected without being the addressee: it receives the information, has to cooperate, or absorbs the consequences in its own process.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ActorDeployer
  praxikon:eu:ai-act:actor:deployer

Who owns the evidence

1 of 1 shown

This duty holder creates, maintains and can produce the evidence.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ActorProvider of an AI system
  praxikon:eu:ai-act:actor:provider

What has to be done

1 of 1 shown

This is what concretely has to be done under the obligation.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ActionSet up data governance per dataset
  praxikon:eu:ai-act:action:article-10-data-governance-act

What has to be recorded

1 of 1 shown

This is what has to be in the file to show that the action was carried out.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- EvidenceData governance file
  praxikon:eu:ai-act:evidence:article-10-data-governance-record

What keeps it in place

1 of 1 shown

This is what keeps compliance in place over time, periodic or event-driven.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ControlData check before retraining
  praxikon:eu:ai-act:control:article-10-data-governance-control

Public tools

1 of 1 shown

This is the public route a reader can actually use.

Source
Official fact on this object, with its locator.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
- Condition | allThe high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.
- ExceptionFor special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- TemplateFull text of Article 10
  praxikon:eu:ai-act:template:article-10-data-governance-legal-text

What points at this object

Objects hanging off this obligation

6 of 6 shown

The object belongs to this obligation. The source line it hangs off sits there.

Source
This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
No condition or exception recorded on this object.
Relation recorded on: Set up data governance per dataset
Consequence
- ActionSet up data governance per dataset
  praxikon:eu:ai-act:action:article-10-data-governance-act
Source
This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
No condition or exception recorded on this object.
Relation recorded on: Data check before retraining
Consequence
- ControlData check before retraining
  praxikon:eu:ai-act:control:article-10-data-governance-control
Source
This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
No condition or exception recorded on this object.
Relation recorded on: Data governance file
Consequence
- EvidenceData governance file
  praxikon:eu:ai-act:evidence:article-10-data-governance-record
Source
Official fact on this object, with its locator.
- ISO/IEC JTC 1/SC 42: international standards for artificial intelligence
  Locator: ISO/IEC 5259 series, ISO/IEC JTC 1/SC 42
  praxikon:eu:ai-act:source:iso-iec-jtc1-sc42
  Open official source
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
Via
No condition or exception recorded on this object.
Relation recorded on: ISO/IEC 5259 series: data quality for analytics and machine learning
Consequence
- StandardISO/IEC 5259 series: data quality for analytics and machine learning
  praxikon:eu:ai-act:standard:standard-iso-iec-5259-data-quality-machine-learning
Source
Official fact on this object, with its locator.
- CEN-CENELEC JTC 21: European standards under standardisation request M/613
  Locator: prEN 18284 (draft standard), CEN/CLC/JTC 21 under M/613
  praxikon:eu:ai-act:source:cen-cenelec-jtc21
  Open official source
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10; Article 40
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
Via
- Condition | allApplies to providers of high-risk AI systems that are trained on data.
Relation recorded on: prEN 18284: quality and governance of datasets in AI
Consequence
- StandardprEN 18284: quality and governance of datasets in AI
  praxikon:eu:ai-act:standard:standard-pren-18284-dataset-quality-governance
Source
This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 10(1)-(6)
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
- Digital Omnibus on AI 2026/1744
  Locator: Amended Article 113 application dates
  praxikon:eu:ai-act:source:reg-eu-2026-1744
  Open official source
Via
No condition or exception recorded on this object.
Relation recorded on: Full text of Article 10
Consequence
- TemplateFull text of Article 10
  praxikon:eu:ai-act:template:article-10-data-governance-legal-text

What this object states

Official fact

Attributable to a named primary source, with a locator. Where they differ, the official source prevails.

Article 10 requires datasets appropriate to the intended purpose, with governance over origin and composition, attention to representativeness, errors and completeness, and examination of possible bias with appropriate measures.
- Locator: Article 10(1)-(6)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source
For the Annex III route this requirement applies from 2 December 2027; for high-risk AI in regulated products (Annex I) from 2 August 2028.
- Locator: Amended Article 113 application datespraxikon:eu:ai-act:source:reg-eu-2026-1744Open official source

Our interpretation

Our own reading. It can change without the law changing, and it is not the position of a supervisory authority.

Today’s dataset choices determine whether compliance is feasible later: data bought or collected today without provenance records cannot be repaired in 2027.
- Locator: Article 10(1)-(6)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

Recommended step

A practical step we consider appropriate. Not an obligation following from the Regulation.

Record origin and assumptions per dataset and include data quality as a requirement in every AI or data procurement contract.
- Locator: Article 10(1)-(6)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

When this applies

1The high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.

When this does not apply

For special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "Article 10: data and data governance",
praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0),
effective_at 2026-07-27T00:00:00.000Z, known_at 2026-08-08T00:00:00.000Z,
sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91,
https://www.praxikon.com/en/verkenner/obligation/article-10-data-governance
(https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-10-data-governance&effective_at=2026-07-27&known_at=2026-08-08&lang=en, accessed 2026-08-25)

Short form

praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0 (sha256 1b6992c5)

BibTeX

@misc{praxikon-eu-ai-act-obligation-article-10-data-governance-1-0-0,
  author       = {{Praxikon}},
  title        = {Article 10: data and data governance},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:obligation:article-10-data-governance},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.1.0, schema 1.4.0},
  note         = {effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91},
  url          = {https://www.praxikon.com/en/verkenner/obligation/article-10-data-governance},
  urldate      = {2026-08-25},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0",
    "type": "dataset",
    "title": "Article 10: data and data governance",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:obligation:article-10-data-governance",
    "URL": "https://www.praxikon.com/en/verkenner/obligation/article-10-data-governance",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          8
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          8,
          25
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0; schema 1.4.0; effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91; retrieved_from https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-10-data-governance&effective_at=2026-07-27&known_at=2026-08-08&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

For agents and integrations

This page and the machine output come from the same object and the same two time axes.

Open as JSON Open as JSON-LD Human explanation Read the methodology