Article 10 of 1139%
Article 10: Data and data governance
EU Official:
⏳Applies from 2 Aug 2026
Title III: High-Risk AI SystemsEntry into force: 2026-08-02
Official text
||
Source: EUR-Lex, Regulation (EU) 2024/1689 — text reproduced verbatim.
📥 Download AI Act (PDF)✅ Compliance Checklist
- ☐Training data is relevant and representative
- ☐Datasets checked for errors and bias
- ☐Data governance procedures established
- ☐Validation and test sets separated from training data
- ☐Data privacy protection ensured
Want to save your progress? Create a free account
🛠 Related tools
Related Recitals
⚖️ Related Enforcement
No enforcement actions for this article yet. Follow developments via the Enforcement Tracker.
Cross-references
Annexes
Frequently asked questions
What requirements does the AI Act set for training data?▼
Article 10 requires training, validation and test data to be relevant, representative, error-free and complete. Datasets must take into account specific characteristics of the intended use context.
Do SMEs also need to comply with Article 10 of the AI Act?▼
Article 10 of the AI Act does not provide a general exemption for SMEs. However, the AI Act includes supportive measures and potentially lighter obligations for small and medium-sized enterprises, depending on their role in the AI value chain.
How does Article 10 of the AI Act relate to the GDPR?▼
Article 10 of the AI Act complements the GDPR. While the GDPR protects personal data, the AI Act focuses on the safety and trustworthiness of AI systems. Organisations must comply with both regulations when their AI system processes personal data.
What are the deadlines for Article 10 of the AI Act?▼
The AI Act follows a phased implementation. Prohibited AI practices apply from February 2025, obligations for high-risk AI systems from August 2026, and other provisions take effect gradually. The specific deadline for Article 10 depends on the category of the obligation.
Does Article 10 of the AI Act also apply to AI systems I purchase?▼
Yes, Article 10 of the AI Act may also be relevant when you purchase AI systems. As a deployer, you have your own obligations under the AI Act, regardless of whether you developed the system yourself or purchased it from a provider.
What is the difference between provider and deployer under Article 10 of the AI Act?▼
Under Article 10 of the AI Act, the provider is the entity that develops or places the AI system on the market, while the deployer is the entity that uses the system under its own authority. Both roles carry different obligations.
What documentation does Article 10 of the AI Act require?▼
Article 10 of the AI Act requires that relevant documentation is maintained as part of the compliance process. This may include technical documentation, instructions for use, logs or declarations of conformity, depending on the classification of the AI system.
How do I document compliance with Article 10 of the AI Act?▼
You document compliance with Article 10 of the AI Act by establishing a risk management system, maintaining technical documentation, and conducting internal audits. Keep all relevant documents for the period prescribed by the AI Act.
May I use special category personal data for bias detection in training data?▼
Yes, Article 10(5) explicitly allows processing of special categories of personal data (such as ethnicity or gender) for monitoring, detecting and correcting bias, provided this is strictly necessary, appropriate safeguards are in place, and it is not possible with synthetic or anonymised data.
What requirements does the AI Act set for the quality of training data?▼
Article 10 requires that training, validation and test data are relevant, representative, as error-free as possible, and complete for the intended purpose. Datasets must have appropriate statistical properties, consider the specific context, and be free from bias that could lead to discrimination.
Do I need to document the provenance of my training data?▼
Yes, Article 10 in combination with Annex IV requires you to document the provenance of training data, including how data was obtained, selected and preprocessed. This is essential for traceability and demonstrating compliance.
📬 AI Act Weekly
Get the most important AI Act developments in your inbox every week.
Subscribe