AI Act Article 10: Obligations, Deadlines & Penalties

All obligations under Article 10

Obligation 1

High-risk AI systems using training techniques must be developed based on training, validation, and testing data sets that meet the quality criteria specified in paragraphs 2 to 5. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

develop

Deadline

—

Penalty

—

Obligation 2

Training, validation, and testing data sets must be subject to data governance and management practices appropriate for the intended purpose, covering design choices, data collection, preparation, assumptions, availability assessment, bias examination, bias mitigation, and gap identification. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

govern

Deadline

—

Penalty

—

Obligation 3

Training, validation, and testing data sets must be relevant, sufficiently representative, free of errors, and complete to the best extent possible, with appropriate statistical properties regarding the persons or groups the system is intended for. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

ensure

Deadline

—

Penalty

—

Obligation 4

Data sets must take into account characteristics particular to the specific geographical, contextual, behavioural, or functional setting within which the high-risk AI system is intended to be used. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

consider

Deadline

—

Penalty

—

Obligation 5

Providers may exceptionally process special categories of personal data for bias detection and correction only if strictly necessary, subject to conditions including inability to use other data, technical limitations on re-use, security measures, no transmission to other parties, deletion after correction, and documentation of necessity. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

process

Deadline

—

Penalty

—

Obligation 6

For high-risk AI systems not using training techniques, the data governance and quality requirements of paragraphs 2 to 5 apply only to the testing data sets. Regulation (EU) 2024/1689, Article 10, Article 10

Obligated entity

provider

Action required

comply

Deadline

—

Penalty

—

EU AI Act compliance deadlines

• 2025-02-02 Article 5 prohibitions (unacceptable risk) in_force
• 2025-02-02 Article 4 AI literacy in_force
• 2025-08-02 GPAI model obligations (Articles 51 to 56) in_force
• 2026-07-27 Regulation (EU) 2026/1744 (Digital Omnibus on AI) enters into force — AI Act applies as amended in_force
• 2026-08-02 AI Act general date of application (Art 113) — governance, penalties and remaining provisions without a different date in_force
• 2026-08-02 Article 50 transparency obligations (AI-interaction disclosure, labelling of deepfakes and AI-generated text, emotion-recognition notices) in_force
• 2026-12-02 Article 50(2) machine-readable marking of AI-generated content — transition for generative AI systems placed on the market before 2 August 2026 scheduled
• 2026-12-02 NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM scheduled
• 2027-08-02 National AI regulatory sandboxes: at least one operational per Member State (Art 57(1)) scheduled
• 2027-12-02 Annex III stand-alone high-risk obligations scheduled
• 2028-08-02 Annex I embedded (regulated-product) high-risk obligations scheduled

Questions about Article 10

Who must comply with Article 10 of the AI Act? +

provider.

What does Article 10 of the AI Act require? +

develop govern ensure