Data Mapping, Labelling and Provenance Records (Service Providers)
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
GUIDANCE recommending good practice: at pre-processing, use data mapping and labelling to track training data, and maintain a provenance record documenting lineage and transformations, supporting breach assessment and calibrating protection measures.
From the source
“Maintain a provenance record to document the lineage of the training data that identifies the source of training data”
para 11.3
What this connects to
2 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Part of1
- ObligationProtection Obligation (s 24)Binding
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Cited by1
- SectionPart V, Procurement of AI Systems (B2B Service Providers)Guidance
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.