Article 10: Data and data governance
Is this legally binding?
Binding. Binding law. It applies to everyone in scope, whether or not anyone points at it.
Training, validation and testing datasets for high-risk AI must meet quality and data governance requirements.
What this connects to
8 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Maps across to2
- External frameworkClause 8: OperationStandardGAGE analysis, not official
Data governance for training data is exercised through AIMS operational controls
- External frameworkFunction: MAPGuidanceGAGE analysis, not official
Data governance requires mapped data contexts and risks
Mapped across from6
- InstrumentPersonal Data Protection Act 2012 (No. 26 of 2012)BindingGAGE analysis, not official
PDPA data protection obligations overlap Article 10 data governance for high-risk AI training data
- InstrumentPDPC Advisory Guidelines on Use of Personal Data in Generative AI (final, 20 Jul 2026)GuidanceGAGE analysis, not official
PDPC GenAI data guidance aligns with Article 10 data governance
- SectionPrinciple 5: Privacy and Data GovernanceGuidanceGAGE analysis, not official
Privacy and data governance principle parallels Article 10 data governance
- SectionFocus area 2: DataGuidanceGAGE analysis, not official
Data recommendations parallel Article 10 data governance
- SectionStage 2: DevelopmentGuidanceGAGE analysis, not official
Secure development includes data and supply-chain governance akin to Article 10
- ObligationEnsure proper data and model disposalGuidanceGAGE analysis, not official
Secure disposal closes the data governance lifecycle of Article 10
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.