EU regulatory register · AI Act
Article 10Data and data governance
CELEX 32024R1689 · Read on 2026-08-18 · Chapter III
Short answer
1. High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2 to 5 whenever such data sets are used.
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-10 · Short answer as data · Official text
AI Act in short
Some AI uses are banned, high-risk AI requires risk management and human oversight, and deployers must ensure AI literacy.
Source: NovaCopilot
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2 to 5 whenever such data sets are used.
2. Training, validation and testing data sets shall be subject to data governance and management practices appropriate for the intended purpose of the high-risk AI system. Those practices shall concern in particular:
(a)
the relevant design choices;
(b)
data collection processes and the origin of data, and in the case of personal data, the original purpose of the data collection;
(c)
relevant data-preparation processing operations, such as annotation, labelling, cleaning, updating, enrichment and aggregation;
(d)
the formulation of assumptions, in particular with respect to the information that the data are supposed to measure and represent;
(e)
an assessment of the availability, quantity and suitability of the data sets that are needed;
(f)
examination in view of possible biases that are likely to affect the health and safety of persons, have a negative impact on fundamental rights or lead to discrimination prohibited under Union law, especially where data outputs influence inputs for future operations;
The article continues in the official text.
Follow-up questions
Other articles in this chapter
Related articles
Articles in other acts connected to this one, with the reason written against the text. The map is a route between acts, not an assessment.
- Depends on · outgoingGDPR · 9
The article on data and data governance leans on the exception for special categories of personal data where such data are needed to detect and correct bias.
CELEX 32016R0679 · 2026-08-18
Knowledge card
- Applies
- provider: Apply data and data governance requirements to training, validation and testing data.
- Risk if ignored
- high
- What to do
- Apply data and data governance requirements to training, validation and testing data.
- Deadline
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
card:eu:article:ai-act--art-10 · sha256 5b58abfbd75f · Source: NovaCopilot
Obligations, actions and sanctions
Article 10 · Role: provider
Apply data and data governance requirements to training, validation and testing data.
Deadline: Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
Decision chain (JSON)
Sanction: Administrative fine: prohibited practices up to EUR 35 million or 7 % of worldwide annual turnover; other obligations up to EUR 15 million or 3 %; incorrect information up to EUR 7.5 million or 1 %. For general-purpose AI models the Commission (AI Office) decides, up to EUR 15 million or 3 %.
Summary of the obligation in the register; the official language versions on EUR-Lex are authoritative. Source: NovaCopilot
Risk, sanction and outcome
Art. 10 · provider
Risk: high · Sanction: administrative_fine, högst EUR 15 000 000 · Authority: Market surveillance authority
Decisions applying the provision: none in the register
Full chain (JSON)
Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit