{"slug":"training-data-provenance-and-copyright-register","id":"AIPT-CTL-0026","title":"Training-data provenance and copyright register","kind":"process","kind_label":"Process","purpose":"Records the origin, licence and rights status of every source used to train or fine-tune a model so that the organisation can honour opt-outs, answer downstream questions and publish a truthful summary of training content.\n","description":"Model developers keep a register of training sources that captures the source, the acquisition route, the licence or legal basis relied on, whether machine-readable rights reservations were checked and honoured, and the date of collection. A written copyright and rights policy sets out how crawls respect opt-out signals, how licensed and public-domain material is distinguished and how takedown or objection requests are handled. From the register the team generates the public summary of training content and the information pack that downstream integrators need. The register is updated on every new training run and reviewed by legal before a model is released.\n","owner_role":"Model development lead","frequency":"on_material_change","frequency_label":"At launch and on material change","risk_subdomains":["6.3","2.1","6.5"],"evidence":[{"type":"register_entry","title":"Training source register","description":"Source, acquisition route, licence or legal basis, opt-out check and collection date per source."},{"type":"policy_document","title":"Copyright and rights-reservation policy","description":null},{"type":"disclosure_notice","title":"Public summary of training content","description":null}],"framework_references":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A.7.3, A.7.5","note":"Data acquisition and provenance records.","confidence_level":"medium"},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MAP 4.1; GOVERN 6.1","note":null,"confidence_level":"medium"},{"framework":"mitre_atlas","framework_name":"MITRE ATLAS","reference":"AML.M0025 Maintain AI Dataset Provenance","note":null,"confidence_level":"medium"}],"obligations":[{"slug":"eu-ai-act-data-governance","title":"Apply data governance and quality criteria to training, validation and testing data","relationship":"supports","note":"Origin and collection records for each source.","confidence_level":"medium","is_binding":true,"policy":"eu-ai-act","jurisdiction":"eu","url":"https://aipolicytracker.org/obligations/eu-ai-act-data-governance"},{"slug":"eu-ai-act-gpai-provider-obligations","title":"Meet general-purpose AI model provider obligations","relationship":"satisfies","note":"Produces the copyright policy and the public training-content summary.","confidence_level":"high","is_binding":true,"policy":"eu-ai-act","jurisdiction":"eu","url":"https://aipolicytracker.org/obligations/eu-ai-act-gpai-provider-obligations"},{"slug":"us-colorado-developer-documentation-and-disclosure","title":"Developers must document high-risk systems and disclose known risks","relationship":"supports","note":"Training-data summaries.","confidence_level":"medium","is_binding":true,"policy":"us-colorado-ai-act","jurisdiction":"us-colorado","url":"https://aipolicytracker.org/obligations/us-colorado-developer-documentation-and-disclosure"},{"slug":"nepal-privacy-act-consent-and-purpose","title":"Collect and use personal information only with consent and for the stated purpose","relationship":"supports","note":"Source register records the basis for each training source.","confidence_level":"medium","is_binding":true,"policy":"nepal-individual-privacy-act","jurisdiction":"nepal","url":"https://aipolicytracker.org/obligations/nepal-privacy-act-consent-and-purpose"}],"related_controls":["data-governance-and-dataset-documentation","technical-documentation-and-model-cards","privacy-and-data-protection-for-ai"],"review_status":"verified","confidence_level":"medium","last_verified_at":"2026-09-26","reviewed_by":"Bhaskar Bhatt","updated_at":"2026-10-15T06:46:23+00:00","url":"https://aipolicytracker.org/controls/training-data-provenance-and-copyright-register","context_url":"https://aipolicytracker.org/controls/training-data-provenance-and-copyright-register.md"}