Legal sources with official primary sources

Printed ·

Skip to main content
Skip to the answer

Source status and reading dates are reported separately. A reading date is not source verification.

Back to the act

EU regulatory register · AI Act

Article 10Data and data governance

CELEX 32024R1689 · Read on 2026-08-18 · Chapter III

Share this page

Short answer

1. High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2 to 5 whenever such data sets are used.

Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-10 · Short answer as data · Official text

AI Act in short

Some AI uses are banned, high-risk AI requires risk management and human oversight, and deployers must ensure AI literacy.

Source: NovaCopilot

Official text

Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.

1. High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2 to 5 whenever such data sets are used.

2. Training, validation and testing data sets shall be subject to data governance and management practices appropriate for the intended purpose of the high-risk AI system. Those practices shall concern in particular:

(a)

the relevant design choices;

(b)

data collection processes and the origin of data, and in the case of personal data, the original purpose of the data collection;

(c)

relevant data-preparation processing operations, such as annotation, labelling, cleaning, updating, enrichment and aggregation;

(d)

the formulation of assumptions, in particular with respect to the information that the data are supposed to measure and represent;

(e)

an assessment of the availability, quantity and suitability of the data sets that are needed;

(f)

examination in view of possible biases that are likely to affect the health and safety of persons, have a negative impact on fundamental rights or lead to discrimination prohibited under Union law, especially where data outputs influence inputs for future operations;

The article continues in the official text.

Open the article on EUR-Lex

Follow-up questions

Other articles in this chapter

Related articles

Articles in other acts connected to this one, with the reason written against the text. The map is a route between acts, not an assessment.

  • Depends on · outgoingGDPR · 9

    The article on data and data governance leans on the exception for special categories of personal data where such data are needed to detect and correct bias.

    CELEX 32016R0679 · 2026-08-18

Knowledge card

Applies
provider: Apply data and data governance requirements to training, validation and testing data.
Risk if ignored
high
What to do
Apply data and data governance requirements to training, validation and testing data.
Deadline
Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).

card:eu:article:ai-act--art-10 · sha256 5b58abfbd75f · Source: NovaCopilot

Obligations, actions and sanctions

  • Article 10 · Role: provider

    Apply data and data governance requirements to training, validation and testing data.

    Deadline: Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).

    Decision chain (JSON)

Sanction: Administrative fine: prohibited practices up to EUR 35 million or 7 % of worldwide annual turnover; other obligations up to EUR 15 million or 3 %; incorrect information up to EUR 7.5 million or 1 %. For general-purpose AI models the Commission (AI Office) decides, up to EUR 15 million or 3 %.

Summary of the obligation in the register; the official language versions on EUR-Lex are authoritative. Source: NovaCopilot

Risk, sanction and outcome

  • Art. 10 · provider

    Risk: high · Sanction: administrative_fine, högst EUR 15 000 000 · Authority: Market surveillance authority

    Decisions applying the provision: none in the register

    Full chain (JSON)

Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot

The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit