ISO/IEC 42001:2023: what it asks of a training dataset list
The AI management system standard. Annex A carries the data controls a dataset list is read against: data resources (A.4.3), data for development (A.7.2), acquisition of data (A.7.3), quality of data (A.7.4), data provenance (A.7.5) and data preparation (A.7.6).
Cited for every list.
Findings that cite it
| Finding | Clause |
|---|---|
| Origin not recorded | ISO/IEC 42001 A.7.5 ISO/IEC 42001 A.4.3 ISO/IEC 42001 A.4.2 |
| Terms not recorded | ISO/IEC 42001 A.7.3 |
| Terms that need review for this use | ISO/IEC 42001 A.7.3 |
| Personal data with no lawful basis recorded, or reused from another purpose | ISO/IEC 42001 A.7.3 |
| Article 9, criminal offence or children's data declared | ISO/IEC 42001 A.5.4 |
| Labelled by a vendor, a crowd or a model with no quality check recorded | ISO/IEC 42001 A.7.4 ISO/IEC 42001 A.7.6 |
| No version or snapshot date | ISO/IEC 42001 A.7.5 ISO/IEC 42001 A.6.2.3 |
| Declared potential overlap between train and test | ISO/IEC 42001 A.6.2.4 ISO/IEC 42001 A.7.4 |
| High-risk use with no bias examination recorded | ISO/IEC 42001 A.7.4 ISO/IEC 42001 A.5.4 |
| Older than your N-year policy threshold (a threshold you set, not a legal deadline) | ISO/IEC 42001 A.7.4 ISO/IEC 42001 A.7.2 |
| Content where a label belongs | ISO/IEC 42001 A.4.3 |
| Vendor data with no provider named | ISO/IEC 42001 A.10.3 ISO/IEC 42001 A.7.3 |
Source classes anchored here
42ISO/IEC 42001:2023: every clause cited
11 of the 38 heldThe requirement text is our statement of each clause, read against the copy we hold and cited to it; it is not the instrument verbatim.
ISO/IEC 42001 A.4.2Resource documentationResources needed for the AI life cycle (data, tooling, compute, human) shall be identified and documented.
ISO/IEC 42001 A.4.3Data resourcesAs part of identifying resources, the organization shall document information about the data resources utilized for the AI system.
ISO/IEC 42001 A.5.4Assessing AI system impact on individuals or groupsThe organization shall assess and document the potential impacts of AI systems to individuals or groups of individuals throughout the system's life cycle.
ISO/IEC 42001 A.6.2.3Documentation of AI system design and developmentDocumentation of AI system design and development activities shall be maintained.
ISO/IEC 42001 A.6.2.4AI system verification and validationAI systems shall be verified and validated, and the results documented. Verification confirms requirements are met; validation confirms intended use is achieved.
ISO/IEC 42001 A.7.2Data for development and enhancement of AI systemsThe organization shall define, document, and implement processes to determine data requirements and ensure data quality for AI system development and enhancement.
ISO/IEC 42001 A.7.3Acquisition of dataThe organization shall determine and document details about the acquisition and selection of data used in AI systems, including provenance and consent where applicable.
ISO/IEC 42001 A.7.4Quality of data for AI systemsThe organization shall define and document quality requirements for data and ensure they are met.
ISO/IEC 42001 A.7.5Data provenanceThe organization shall document the provenance of data used in AI systems to enable evaluation and traceability.
ISO/IEC 42001 A.7.6Data preparationThe organization shall define and document criteria for selecting data preparations and the data preparation methods used.
ISO/IEC 42001 A.10.3SuppliersEstablish a process ensuring that the organization's use of services, products or materials provided by suppliers aligns with its approach to the responsible development and use of AI systems.