{"data":{"slug":"ai-data-governance-register","title":"AI Data Governance Register","type":"register","formats":["xlsx","docx"],"topics":["governance","evidence"],"frameworks":["eu-ai-act","iso-42001"],"short":"One row per dataset that trains, tests or feeds an AI system: provenance, personal data, lawful basis or licence, bias checks and retention, with a procedure and the data duties on record.","covers":{"categories":["data_governance","privacy_data_protection","copyright_training_data"]},"version":1,"dataset_version":"bb068ecd9dad","generated_at":"2026-09-28T13:37:56+00:00","citations":13,"downloads":0,"files":[{"format":"xlsx","filename":"ai-data-governance-register-v1.xlsx","bytes":21795,"url":"https://aipolicytracker.org/templates/ai-data-governance-register#download"},{"format":"docx","filename":"ai-data-governance-register-v1.docx","bytes":11625,"url":"https://aipolicytracker.org/templates/ai-data-governance-register#download"}],"url":"https://aipolicytracker.org/templates/ai-data-governance-register","inside":["Datasets register with dropdowns for use, personal data and bias checks","Procedure document: acceptance criteria, quality and bias checks, retention","Data duties sheet: data governance, privacy and copyright duties on record"],"legal_basis":["eu-ai-act"],"caveat":null,"covered_obligations":[{"slug":"eu-ai-act-data-governance","title":"Apply data governance and quality criteria to training, validation and testing data","policy":"eu-ai-act","source_reference":"Article 10","url":"https://aipolicytracker.org/obligations/eu-ai-act-data-governance"},{"slug":"eu-ai-act-gpai-provider-obligations","title":"Meet general-purpose AI model provider obligations","policy":"eu-ai-act","source_reference":"Article 53 and Annexes XI–XII","url":"https://aipolicytracker.org/obligations/eu-ai-act-gpai-provider-obligations"},{"slug":"eu-ai-act-art-26-4-deployer-input-data","title":"Deployers must ensure input data they control is relevant and representative","policy":"eu-ai-act","source_reference":"Article 26(4)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-4-deployer-input-data"},{"slug":"eu-ai-act-art-26-9-dpia-using-provider-information","title":"Deployers must use the provider's transparency information in their data protection impact assessment","policy":"eu-ai-act","source_reference":"Article 26(9)","url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-9-dpia-using-provider-information"},{"slug":"india-dpdp-consent-and-notice","title":"Process personal data only with valid consent or a legitimate use, after notice","policy":"india-dpdp-act","source_reference":"Sections 4 to 7","url":"https://aipolicytracker.org/obligations/india-dpdp-consent-and-notice"},{"slug":"nepal-privacy-act-consent-and-purpose","title":"Collect and use personal information only with consent and for the stated purpose","policy":"nepal-individual-privacy-act","source_reference":"Chapter on collection and protection of personal information (reviewer to cite sections)","url":"https://aipolicytracker.org/obligations/nepal-privacy-act-consent-and-purpose"},{"slug":"us-new-york-city-local-law-144-data-policy-disclosure","title":"Employers and employment agencies must disclose the data collected and their retention policy for the tool","policy":"us-new-york-city-local-law-144-automated-employment-decision-tools","source_reference":"NYC Administrative Code Section 20-871(b)(3); 6 RCNY Section 5-303","url":"https://aipolicytracker.org/obligations/us-new-york-city-local-law-144-data-policy-disclosure"},{"slug":"singapore-mgf-operations-management","title":"Manage data quality, model development and monitoring across the lifecycle","policy":"singapore-model-ai-governance-framework","source_reference":"Second edition, Part on operations management","url":"https://aipolicytracker.org/obligations/singapore-mgf-operations-management"},{"slug":"singapore-pdpc-consent-or-exception-for-ai-data","title":"Identify consent or an applicable PDPA exception before using personal data in AI","policy":"singapore-pdpc-ai-advisory-guidelines","source_reference":"Advisory guidelines, sections on consent, business improvement and research exceptions","url":"https://aipolicytracker.org/obligations/singapore-pdpc-consent-or-exception-for-ai-data"}],"versions":[{"version":1,"generated_at":"2026-09-28T13:37:56+00:00","dataset_version":"bb068ecd9dad","changelog":"First version, built from dataset bb068ecd9dad.","stats":{"sheets":{"Datasets":0,"Data duties":9},"blocks":35,"headings":10,"citations":13}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}