AI Governance Engineer
GitHub

ISO 42001 A.7: Data for AI systems

Data quality, provenance, preparation

By Reviewed

From clause to evidenceThe chain from ISO 42001 A.7 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: ISO/IEC 42001, A.7ClauseISO 42001A.7Duty holder: not statedDuty holderNot statedApplies from: no date (Voluntary)Applies fromNo dateVoluntaryArtefact: Data cards; lineage; data quality testsArtefactData cardsLayers: Layer 02 Inventory & Transparency and Layer 03 Evals & Red Teaming as EvidenceLayersLayer 02Layer 03Evidence record: Dataset admission record, Dataset cardEvidence recordDatasetadmission…+1 moreSame topic in 19 frameworks (48 clauses): EU AI Act, TC260 Framework 3.0, China GenAI Measures, China Deep Synthesis,GB/T 45654, GDPR, CSA AICM and 12 moreAs of 2026-09-19 · illustrative, not a claim of conformity From clause to evidenceThe chain from ISO 42001 A.7 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: ISO/IEC 42001, A.7ClauseISO 42001 · A.7Duty holder: not statedDuty holderNot statedApplies from: no date (Voluntary)Applies fromNo date · VoluntaryArtefact: Data cards; lineage; data quality testsArtefactData cardsLayers: Layer 02 Inventory & Transparency and Layer 03 Evals & Red Teaming as EvidenceLayersLayer 02Layer 03Evidence record: Dataset admission record, Dataset cardEvidence recordDataset admission record · +1 moreSame topic in 19 frameworks (48 clauses): EUAI Act, TC260 Framework 3.0, China GenAIMeasures, China Deep Synthesis, GB/T 45654…As of 2026-09-19illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-ISO42001-A7. Drawn from chapter 08.
Text alternative
  • Clause: ISO 42001, A.7.
  • Duty holder: Not stated.
  • Applies from: No date, Voluntary.
  • Artefact: Data cards.
  • Layers: Layer 02, Layer 03.
  • Evidence record: Dataset admission record, +1 more.
  • Record schemas: Dataset admission record , Dataset card .
  • The same topic in 19 other frameworks; the crosswalk section below links each clause.
Id
AIGE-OBL-ISO42001-A7
Instrument
ISO/IEC 42001 standard
Compared side by side
ISO 42001 vs EU AI Act · NIST AI RMF vs ISO 42001
Clause
A.7
Applies from
No date Voluntary · Voluntary management-system standard (2023); no presumption of conformity

The artefact that evidences it

Data cards; lineage; data quality tests.

What this obligation connects toISO 42001 A.7 and its 26 relations: 3 patterns, 4 open controls, 19 same crosswalk topic.DirectColour: stack layer of the pattern or control01 Govern-as-Code02 InventoryISO 42001 A.7Patterns (3)Dataset Admission Gate · DirectDataset Admission GateRights Requests Against Models · DirectRights Requests Against ModelsTraining-Data Rights Ledger · DirectTraining-Data Rights LedgerOpen controls (4)AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time · DirectDataset Admission Gate at…AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version · DirectDataset Card for Every Admitted…AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission · DirectFitness-for-Purpose Checks…AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources · DirectLineage from Training Runs…Same crosswalk topic (19)AI Verify 8.1.1, 8.2.1, 8.3.1, 8.3.2, 1.4.1 · Core clauseAI VerifyCSA AICM DSP-20, DSP-21, DSP-08, DSP-22 · Core clauseCSA AICMChina Deep Synthesis DeepSyn Art. 14 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 11 · Core clauseCoE ConventionEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 59 · Core clauseEU AI Act+13 more+13 more: GAO AI Accountability 2.1, 2.2, 2.4, 2.5, 2.8, GB/T 45654 GB/T 45654 Corpus security, GDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 5, Art. 6, Art. 35, NIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11, OWASP LLM LLM05:2026, LLM02:2026, Singapore GenAI GenAI 2, TC260 Framework 3.0 TC260 2.1.3, TC260 5.1, UK ATRS ATRS 2.4.3, G7 Code G7 Action 11, GPAI Code Copyright 1.1–1.5, ISO 42001 A.4, OECD AI Principles OECD 1.2, UK DUAA UK GDPR Art. 22B
What this obligation connects toISO 42001 A.7 and its 26 relations: 3 patterns, 4 open controls, 19 same crosswalk topic.DirectColour: stack layer of the pattern or control01 Govern-as-Code02 InventoryPatterns (3)Dataset Admission Gate · DirectDataset Admission GateRights Requests Against Models · DirectRights Requests Against ModelsTraining-Data Rights Ledger · DirectTraining-Data Rights LedgerSame crosswalk topic (19)AI Verify 8.1.1, 8.2.1, 8.3.1, 8.3.2, 1.4.1 · Core clauseAI VerifyCSA AICM DSP-20, DSP-21, DSP-08, DSP-22 · Core clauseCSA AICMChina Deep Synthesis DeepSyn Art. 14 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 11 · Core clauseCoE ConventionEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 59 · Core clauseEU AI Act+13 more+13 more: GAO AI Accountability 2.1, 2.2, 2.4, 2.5, 2.8, GB/T 45654 GB/T 45654 Corpus security, GDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 5, Art. 6, Art. 35, NIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11, OWASP LLM LLM05:2026, LLM02:2026, Singapore GenAI GenAI 2, TC260 Framework 3.0 TC260 2.1.3, TC260 5.1, UK ATRS ATRS 2.4.3, G7 Code G7 Action 11, GPAI Code Copyright 1.1–1.5, ISO 42001 A.4, OECD AI Principles OECD 1.2, UK DUAA UK GDPR Art. 22BOpen controls (4)AIGE-CTL-DATA-001 Dataset Admission Gate at Read Time · DirectDataset Admission Gate at…AIGE-CTL-DATA-002 Dataset Card for Every Admitted Version · DirectDataset Card for Every Admitted…AIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before Admission · DirectFitness-for-Purpose Checks…AIGE-CTL-DATA-010 Lineage from Training Runs to Admitted Sources · DirectLineage from Training Runs…ISO 42001 A.7
What this obligation connects to Solid edges are direct relations, dashed ones looser (a case that cites the same article, a framework whose clauses only touch the topic); patterns and controls take the colour of their stack layer. Select a node to open it; the lists below give every relation in full.
Data table: every relation
Relations of AIGE-OBL-ISO42001-A7
FamilyItemRelation
PatternsDataset Admission GateDirect
PatternsRights Requests Against ModelsDirect
PatternsTraining-Data Rights LedgerDirect
Open controlsAIGE-CTL-DATA-001 Dataset Admission Gate at Read TimeDirect
Open controlsAIGE-CTL-DATA-002 Dataset Card for Every Admitted VersionDirect
Open controlsAIGE-CTL-DATA-008 Fitness-for-Purpose Checks Before AdmissionDirect
Open controlsAIGE-CTL-DATA-010 Lineage from Training Runs to Admitted SourcesDirect
Same crosswalk topicAI Verify 8.1.1, 8.2.1, 8.3.1, 8.3.2, 1.4.1Core clause
Same crosswalk topicCSA AICM DSP-20, DSP-21, DSP-08, DSP-22Core clause
Same crosswalk topicChina Deep Synthesis DeepSyn Art. 14Core clause
Same crosswalk topicChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 7(3)Core clause
Same crosswalk topicCoE Convention CoE Art. 11Core clause
Same crosswalk topicEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 59Core clause
Same crosswalk topicGAO AI Accountability 2.1, 2.2, 2.4, 2.5, 2.8Core clause
Same crosswalk topicGB/T 45654 GB/T 45654 Corpus securityCore clause
Same crosswalk topicGDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 5, Art. 6, Art. 35Core clause
Same crosswalk topicNIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11Core clause
Same crosswalk topicOWASP LLM LLM05:2026, LLM02:2026Core clause
Same crosswalk topicSingapore GenAI GenAI 2Core clause
Same crosswalk topicTC260 Framework 3.0 TC260 2.1.3, TC260 5.1Core clause
Same crosswalk topicUK ATRS ATRS 2.4.3Core clause
Same crosswalk topicG7 Code G7 Action 11Related clause
Same crosswalk topicGPAI Code Copyright 1.1–1.5Related clause
Same crosswalk topicISO 42001 A.4Related clause
Same crosswalk topicOECD AI Principles OECD 1.2Related clause
Same crosswalk topicUK DUAA UK GDPR Art. 22BRelated clause

Patterns that build it

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Data governance

Privacy and data protection

Open controls that evidence it

Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.

Source

Chapter 08, section ISO/IEC 42001, 42005 and 42006, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). ISO 42001 A.7: Data for AI systems (AIGE-OBL-ISO42001-A7). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-iso42001-a7. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{ISO 42001 A.7: Data for AI systems (AIGE-OBL-ISO42001-A7)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-iso42001-a7},
  note         = {Version 0.5.0}
}