EU AI Act: what it asks of a training dataset list
When the model is placed on the EU market, put into service in the EU, or its output is used in the EU. Article 10 binds the provider of a high-risk AI system: its data governance lines apply if this system is high-risk under Annex III, so the page says so on each. Annex III names the areas; Article 6(3) can take some Annex III systems out of high-risk where they do not pose a significant risk of harm, so the classification is a question for legal. Articles 10, 11, 15 and 17 bind the provider and Article 26 the deployer. Article 53 applies only to a provider of a general-purpose model and is shown only when that box is ticked.
Annex III lists the high-risk areas the checker offers: biometrics, critical infrastructure, education, employment, essential services (public benefits, creditworthiness of natural persons other than fraud detection, life or health insurance risk assessment and pricing of natural persons, emergency calls), law enforcement, migration and the administration of justice. The classification is a question for legal. Other insurance uses are offered only as a review option, which raises a question and never an Article 10 finding.
Named, not quoted, beside it: the EU copyright directive, Article 4 (text and data mining, and the rightholder's opt-out); US copyright fair use; the EU AI Office template for the public summary of training content.
Findings that cite it
| Finding | Clause |
|---|---|
| Origin not recorded | EU AI Act Art. 10 |
| Terms not recorded | EU AI Act Art. 53 general-purpose model providers only |
| Terms that need review for this use | EU AI Act Art. 53 general-purpose model providers only |
| Article 9, criminal offence or children's data declared | EU AI Act Art. 10 |
| Labelled by a vendor, a crowd or a model with no quality check recorded | EU AI Act Art. 17 |
| No version or snapshot date | EU AI Act Art. 11 |
| Declared potential overlap between train and test | EU AI Act Art. 10 |
| High-risk use with no bias examination recorded | EU AI Act Art. 10 EU AI Act Art. 26 |
| Vendor data with no provider named | EU AI Act Art. 17 |
Source classes anchored here
42EU AI Act: every clause cited
6 of the 43 heldThe requirement text is our statement of each clause, read against the copy we hold and cited to it; it is not the instrument verbatim.
EU AI Act Art. 10Data and data governance applies if this system is high-risk under Annex IIIHigh-risk AI systems that make use of techniques involving the training of AI models shall use training, validation and testing data that meet the quality criteria in Art.10(2)-(5): appropriate data governance, examination for possible biases, identification of data gaps/shortcomings, statistically relevant datasets to the intended purpose, and considerations specific to the geographical, contextual, behavioural or functional setting of intended use.
EU AI Act Art. 11Technical documentation a provider dutyTechnical documentation for a high-risk AI system shall be drawn up before the system is placed on the market or put into service and kept up to date. It shall be drawn up in such a way as to demonstrate that the high-risk AI system complies with the Section 2 requirements (incl Annex IV minimum content).
EU AI Act Art. 15Accuracy, robustness and cybersecurity a provider dutyHigh-risk AI systems shall be designed and developed in such a way that they achieve an appropriate level of accuracy, robustness, and cybersecurity, and shall perform consistently in those respects throughout their lifecycle. Resilience to errors, faults and inconsistencies; protection against attempts by unauthorised third parties to alter use, output or performance (incl data poisoning, model poisoning, adversarial examples and confidentiality attacks).
EU AI Act Art. 17Quality management system a provider dutyProviders must put in place a quality management system that ensures compliance with the Regulation, documented systematically in written policies, procedures and instructions, covering at least: a regulatory compliance strategy including conformity assessment and management of modifications; design, design control and design verification techniques; development, quality control and quality assurance techniques; examination, test and validation procedures before, during and after development and the frequency at which they run; technical specifications and standards to be applied and, where harmonised standards are not applied in full, the means used instead; data management systems and procedures spanning acquisition, collection, analysis, labelling, storage, filtration, mining, aggregation and retention; the Art.9 risk management system; the Art.72 post-market monitoring system; Art.73 serious incident reporting procedures; handling of communication with authorities, notified bodies, other operators and customers; record-keeping; resource management including security of supply; and an accountability framework setting out the responsibilities of management and staff for every one of those aspects. Implementation is proportionate to the size of the provider's organisation, but the degree of rigour required to make the systems compliant is not reducible.
EU AI Act Art. 26Obligations of deployers of high-risk AI systems a deployer dutyDeployers shall use high-risk AI systems in accordance with the IFU; assign human oversight to appropriately competent natural persons; ensure input data is relevant and sufficiently representative; monitor operation and inform the provider of risks/incidents; retain automatically generated logs for at least 6 months (longer where required); inform workers/representatives where used in the workplace; carry out a DPIA where required under GDPR; and where a deployer is a public authority, register the system in the EU database.
EU AI Act Art. 53Obligations for providers of general-purpose AI models providers of general-purpose modelsProviders of general-purpose AI models must draw up and keep up to date the technical documentation of the model, including its training and testing process and the results of its evaluation, containing at least the Annex XI information, for provision on request to the AI Office and the national competent authorities; draw up, keep up to date and make available to providers who intend to integrate the model information and documentation containing at least the Annex XII elements and sufficient to let them understand the model's capabilities and limitations and meet their own obligations; put in place a policy to comply with Union law on copyright and related rights, including identifying and complying, through state of the art technologies, with a reservation of rights expressed under Art.4(3) of Directive (EU) 2019/790; and draw up and make publicly available a sufficiently detailed summary of the content used for training, following the template provided by the AI Office. The two documentation duties do not apply to models released under a free and open source licence meeting the stated conditions, unless the model has systemic risk. Providers must cooperate with the Commission and the national competent authorities, and where they neither adhere to an approved code of practice nor comply with a European harmonised standard they must demonstrate alternative adequate means of compliance for assessment by the Commission.