{"slug":"eu-ai-act-art-26-4-deployer-input-data","id":"AIPT-OBL-0032","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0032","title":"Deployers must ensure input data they control is relevant and representative","short_title":"Deployer control of input data","category":"data_governance","summary":"To the extent a deployer controls the data fed into a high-risk AI system, it must make sure that input data is relevant to, and sufficiently representative for, the system's intended purpose. The duty sits with the deployer even though the provider designed the system, because the deployer chooses what the system is run on.\n","practical_action":"Define input-data quality checks for each high-risk system, including population coverage and field validation, and review them with the provider's instructions.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 26(4)","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":null,"actors":["deployer","public_authority"],"sectors":["cross_sector","employment","financial_services","public_services"],"use_cases":["hiring_and_hr","finance_and_credit","public_services"],"applicability":[{"description":"Deployers of high-risk AI systems that select or supply the operational input data.","actors":["deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"Input-data quality checklist","description":null,"artifact_type":"document"},{"title":"Input-data validation results","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A.7.4, A.7.6","note":"Data quality and data preparation.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MAP 2.3, MEASURE 2.2","note":"Data representativeness in context.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"data-governance-and-dataset-documentation","title":"Data governance and dataset documentation","kind":"process","relationship":"satisfies","note":"Applied to operational input data rather than training data.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/data-governance-and-dataset-documentation"},{"slug":"post-market-monitoring-and-drift-detection","title":"Post-deployment monitoring and drift detection","kind":"technical","relationship":"supports","note":"Detects input drift away from the intended population.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-4-deployer-input-data","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}