Upcomingv1.0.0

Article 10: data and data governance

Quality and governance requirements for training, validation and test data of high-risk AI.

Article 10 requires datasets appropriate to the intended purpose, with governance over origin and composition, attention to representativeness, errors and completeness, and examination of possible bias with appropriate measures.

Praxikon tracks Article 10: data and data governance under the EU AI Act, checked against the official source on 8 August 2026, citing the source for every statement.

Status: Upcoming
Application date: 2 December 2027
Version: 1.0.0
Last reviewed: 8 August 2026

Review status: placed against the official source (8 August 2026). Next check due by 4 February 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

From source to evidence

Why this obligation applies, what it asks of you, and what you show for it.

Applies

Upcoming · 2 December 2027

For whom

Deployer
Provider of an AI system

What you do

Set up data governance per dataset

What you record

Data governance file

Official source

Article 10(1)-(6)

Who this is relevant to

When this applies

Deployer
An organisation using an AI system under its authority, excluding personal non-professional use.
Provider of an AI system
A party that develops or has an AI system developed and places it on the market under its own name.

1The high-risk system is trained with data; the provider composes the datasets, the deployer controls relevant input data.

What the official source establishes

For the Annex III route this requirement applies from 2 December 2027; for high-risk AI in regulated products (Annex I) from 2 August 2028.

Our interpretation

The official source remains authoritative. This general interpretation is not legal advice.

Today’s dataset choices determine whether compliance is feasible later: data bought or collected today without provenance records cannot be repaired in 2027.

What you can do now

Record origin and assumptions per dataset and include data quality as a requirement in every AI or data procurement contract.

01
Set up data governance per dataset
Assess origin, representativeness, errors and completeness and examine possible bias with appropriate mitigation.

What to retain

Data governance file

Record per dataset of origin, choices, assumptions, bias examination and mitigations.

Control and reassessment

Data check before retraining
Repeat the data quality assessment before every retraining or dataset change.

Public tools

Full text of Article 10
The full legal text in the public AI Act Explorer.
Read Article 10 in the AI Act Explorer

Conditions and exceptions

For special categories of personal data the strict exception of Article 10(5) applies (bias detection and correction under conditions).

Official sources and locators

EU Artificial Intelligence Act 2024/1689
European Parliament and Council | original-oj-2024-07-12
Source locator: Article 10(1)-(6)
Open official source
Digital Omnibus on AI 2026/1744
European Parliament and Council | official-journal-2026-07-24
Source locator: Amended Article 113 application dates
Open official source

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "Article 10: data and data governance",
praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.2.0 (schema 1.5.0),
effective_at 2026-07-27T00:00:00.000Z, known_at 2026-08-08T00:00:00.000Z,
sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91,
https://www.praxikon.com/en/verplichtingen/article-10-data-governance
(https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-10-data-governance&effective_at=2026-07-27&known_at=2026-08-08&lang=en, accessed 2026-09-07)

Short form

praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0 (sha256 1b6992c5)

BibTeX

@misc{praxikon-eu-ai-act-obligation-article-10-data-governance-1-0-0,
  author       = {{Praxikon}},
  title        = {Article 10: data and data governance},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:obligation:article-10-data-governance},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.2.0, schema 1.5.0},
  note         = {effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91},
  url          = {https://www.praxikon.com/en/verplichtingen/article-10-data-governance},
  urldate      = {2026-09-07},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:obligation:article-10-data-governance@1.0.0",
    "type": "dataset",
    "title": "Article 10: data and data governance",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:obligation:article-10-data-governance",
    "URL": "https://www.praxikon.com/en/verplichtingen/article-10-data-governance",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          8
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          9,
          7
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.2.0; schema 1.5.0; effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 1b6992c5a6d684dd828c8b00a7239e768eee9d4a5cb4fdbc4fbaee3dbf561d91; retrieved_from https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-10-data-governance&effective_at=2026-07-27&known_at=2026-08-08&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

Version history

v1.0.0
27 July 2026
Article 10: data and data governance
Quality and governance requirements for training, validation and test data of high-risk AI.

Corrections to this obligation

No substantive correction to this object has been recorded.

Open the correction log

Expert behind this page

Zahed Ashkara

Lawyer and AI governance specialist

View profile LinkedIn

Execution

From obligation to arranged and demonstrable

Knowing where you stand is step one. Embed AI translates this obligation into a concrete approach for your organisation: scope, ownership, register and evidence.

See the Embed AI approach

For AI agents and integrations

This page and the machine output derive from the same versioned object. Use the API for deterministic filters by role, topic and time.

Open as JSON Open as JSON-LD Open this object in the explorer Read the methodology