GAO AI Accountability Framework principle 2: data

Document the sources and origins of development data and assess their reliability, categorisation, variable selection and any synthetic, imputed or augmented data; assess the dependencies, bias, security and privacy of the data used in operation

From clause to evidenceThe chain from GAO AI Accountability principle 2 (data), practices 2.1 to 2.8 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: GAO AI Accountability Framework (GAO-21-519SP), principle 2 (data), practices 2.1 to 2.8ClauseGAO AIAccountabilityprinciple 2,Duty holder: Federal agencies and other entities; auditors and third-party assessorsDuty holderFederalagencies and…Applies from: 2021-06-30 (Voluntary)Applies from2021-06-30VoluntaryArtefact: Dataset datasheet with lineage; data-quality and representativeness evals; data-flow mapArtefactDatasetdatasheet with…Layers: Layer 02 Inventory & Transparency and Layer 03 Evals & Red Teaming as EvidenceLayersLayer 02Layer 03Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence recordv1Same topic in 21 frameworks (84 clauses): EU AI Act, ISO 42001, TC260 Framework 3.0, China GenAI Measures, China DeepSynthesis, GB/T 45654, GDPR and 14 moreAs of 2026-09-27 · illustrative, not a claim of conformity From clause to evidenceThe chain from GAO AI Accountability principle 2 (data), practices 2.1 to 2.8 to its evidence record, in 6 steps; the text alternative lists them and the facts under the figure state each in full.Clause: GAO AI Accountability Framework (GAO-21-519SP), principle 2 (data), practices 2.1 to 2.8ClauseGAO AI Accountability · principle 2,…Duty holder: Federal agencies and other entities; auditors and third-party assessorsDuty holderFederal agencies and other…Applies from: 2021-06-30 (Voluntary)Applies from2021-06-30 · VoluntaryArtefact: Dataset datasheet with lineage; data-quality and representativeness evals; data-flow mapArtefactDataset datasheet with lineageLayers: Layer 02 Inventory & Transparency and Layer 03 Evals & Red Teaming as EvidenceLayersLayer 02Layer 03Evidence record: the common evidence record (Evidence record v1)Evidence recordEvidence record v1Same topic in 21 frameworks (84 clauses): EUAI Act, ISO 42001, TC260 Framework 3.0,China GenAI Measures, China Deep Synthesis…As of 2026-09-27illustrative, not a claim of conformity
From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-USGAO-DATA. Drawn from chapter 08.
Text alternative
  • Clause: GAO AI Accountability, principle 2, practices 2.1….
  • Duty holder: Federal agencies and other….
  • Applies from: 2021-06-30, Voluntary.
  • Artefact: Dataset datasheet with lineage.
  • Layers: Layer 02, Layer 03.
  • Evidence record: Evidence record v1.
  • Record schema: Evidence record.
  • The same topic in 21 other frameworks; the crosswalk section below links each clause.
When this obligation appliesThe date of AIGE-OBL-USGAO-DATA on a time axis, against its review date 2026-09-27.Earlier2024202620282030As of 2026-09-272021-06-30 · VoluntaryNon-binding auditframework; published2021-06-302021-06-30 · Voluntary · Non-binding audit framework; published 2021-06-30Source: Obligation register(chapter 08)
When this obligation appliesThe date of AIGE-OBL-USGAO-DATA on a time axis, against its review date 2026-09-27.2021-06-30 · VoluntaryNon-binding audit framework; published2021-06-302024202620282030EarlierAs of 2026-09-272021-06-30 · Voluntary · Non-binding audit framework; published 2021-06-30Source: Obligation register (chapter 08)
When this obligation applies The first date in the row's status, then each later step: filled once its date has passed, outlined while it is still ahead of the review date.
Data table: the dates
Dates of AIGE-OBL-USGAO-DATA
DateStepDetail
2021-06-30VoluntaryNon-binding audit framework; published 2021-06-30
Id
AIGE-OBL-USGAO-DATA
Instrument
GAO AI Accountability Framework (GAO-21-519SP) framework
Clause
principle 2 (data), practices 2.1 to 2.8
In scope
Federal agencies and other entities; auditors and third-party assessors
Authority
U.S. Government Accountability Office; inspectors general
Applies from
Voluntary · Non-binding audit framework; published 2021-06-30

The artefact that evidences it

Dataset datasheet with lineage; data-quality and representativeness evals; data-flow map.

What this obligation connects toprinciple 2 (data), practices 2.1 to 2.8 and its 21 relations: 21 same crosswalk topic.Directprinciple 2 (data), practices 2.1 to2.8Same crosswalk topic (21)AI Verify 8.1.1, 8.2.1, 9.7.1, 5.3.1, 4.5.2, 9.3.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1 · Core clauseAI VerifyCSA AICM DSP-20, DSP-21, STA-10, STA-09, GRC-11, DSP-08, DSP-22 · Core clauseCSA AICMChina Deep Synthesis DeepSyn Art. 14 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 4(2), GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 10, CoE Art. 11 · Core clauseCoE ConventionEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 25, Art. 25(4), Art. 26, Art. 22, Art. 23, Art. 24, Art. 54, Art. 59 · Core clauseEU AI Act+15 more+15 more: GAO AI Accountability 3.8, GB/T 45654 GB/T 45654 Corpus security, GDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 28, Arts. 44–46, Art. 5(1)(a), Art. 5, Art. 6, Art. 35, ISO 42001 A.7, A.7.3, A.4, A.10, A.5.4, NIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11, GOVERN 6, MAP 4, MANAGE 3, MANAGE 3.1, GOVERN 6.2, GOVERN 3.1, OWASP Agentic ASI04, OWASP LLM LLM05:2026, LLM04:2026, LLM02:2026, Singapore GenAI GenAI 2, TC260 Framework 3.0 TC260 2.1.3, TC260 5.1, TC260 App. 2 II.4, TC260 4.4.4, UK ATRS ATRS 2.4.3, ATRS 2.1.4, ATRS 2.4.2, China Algo. Rec. AlgoRec Art. 21, G7 Code G7 Action 11, GPAI Code Copyright 1.1–1.5, Transparency 1.2, OECD AI Principles OECD 1.2, UK DUAA UK GDPR Art. 22B
What this obligation connects toprinciple 2 (data), practices 2.1 to 2.8 and its 21 relations: 21 same crosswalk topic.DirectSame crosswalk topic (21)AI Verify 8.1.1, 8.2.1, 9.7.1, 5.3.1, 4.5.2, 9.3.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1 · Core clauseAI VerifyCSA AICM DSP-20, DSP-21, STA-10, STA-09, GRC-11, DSP-08, DSP-22 · Core clauseCSA AICMChina Deep Synthesis DeepSyn Art. 14 · Core clauseChina Deep SynthesisChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 4(2), GenAI Art. 7(3) · Core clauseChina GenAI MeasuresCoE Convention CoE Art. 10, CoE Art. 11 · Core clauseCoE ConventionEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 25, Art. 25(4), Art. 26, Art. 22, Art. 23, Art. 24, Art. 54, Art. 59 · Core clauseEU AI Act+15 more+15 more: GAO AI Accountability 3.8, GB/T 45654 GB/T 45654 Corpus security, GDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 28, Arts. 44–46, Art. 5(1)(a), Art. 5, Art. 6, Art. 35, ISO 42001 A.7, A.7.3, A.4, A.10, A.5.4, NIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11, GOVERN 6, MAP 4, MANAGE 3, MANAGE 3.1, GOVERN 6.2, GOVERN 3.1, OWASP Agentic ASI04, OWASP LLM LLM05:2026, LLM04:2026, LLM02:2026, Singapore GenAI GenAI 2, TC260 Framework 3.0 TC260 2.1.3, TC260 5.1, TC260 App. 2 II.4, TC260 4.4.4, UK ATRS ATRS 2.4.3, ATRS 2.1.4, ATRS 2.4.2, China Algo. Rec. AlgoRec Art. 21, G7 Code G7 Action 11, GPAI Code Copyright 1.1–1.5, Transparency 1.2, OECD AI Principles OECD 1.2, UK DUAA UK GDPR Art. 22Bprinciple 2(data), practices2.1 to 2.8
What this obligation connects to Solid edges are direct relations, dashed ones looser (a case that cites the same article, a framework whose clauses only touch the topic); patterns and controls take the colour of their stack layer. Select a node to open it; the lists below give every relation in full.
Data table: every relation
Relations of AIGE-OBL-USGAO-DATA
FamilyItemRelation
Same crosswalk topicAI Verify 8.1.1, 8.2.1, 9.7.1, 5.3.1, 4.5.2, 9.3.1, 7.1.1, 7.2.1, 7.8.1, 8.3.1, 8.3.2, 1.4.1Core clause
Same crosswalk topicCSA AICM DSP-20, DSP-21, STA-10, STA-09, GRC-11, DSP-08, DSP-22Core clause
Same crosswalk topicChina Deep Synthesis DeepSyn Art. 14Core clause
Same crosswalk topicChina GenAI Measures GenAI Art. 7, GenAI Art. 8, GenAI Art. 11, GenAI Art. 4(2), GenAI Art. 7(3)Core clause
Same crosswalk topicCoE Convention CoE Art. 10, CoE Art. 11Core clause
Same crosswalk topicEU AI Act Art. 10, Art. 10(2)(f)–(g), Art. 4a, Art. 53, Art. 53(1)(c), Art. 5(1)(e), Art. 25, Art. 25(4), Art. 26, Art. 22, Art. 23, Art. 24, Art. 54, Art. 59Core clause
Same crosswalk topicGAO AI Accountability 3.8Core clause
Same crosswalk topicGB/T 45654 GB/T 45654 Corpus securityCore clause
Same crosswalk topicGDPR Art. 5(1)(c), Art. 25, Art. 9, Art. 28, Arts. 44–46, Art. 5(1)(a), Art. 5, Art. 6, Art. 35Core clause
Same crosswalk topicISO 42001 A.7, A.7.3, A.4, A.10, A.5.4Core clause
Same crosswalk topicNIST AI RMF MAP 2, MEASURE 2.10, MEASURE 2.11, GOVERN 6, MAP 4, MANAGE 3, MANAGE 3.1, GOVERN 6.2, GOVERN 3.1Core clause
Same crosswalk topicOWASP Agentic ASI04Core clause
Same crosswalk topicOWASP LLM LLM05:2026, LLM04:2026, LLM02:2026Core clause
Same crosswalk topicSingapore GenAI GenAI 2Core clause
Same crosswalk topicTC260 Framework 3.0 TC260 2.1.3, TC260 5.1, TC260 App. 2 II.4, TC260 4.4.4Core clause
Same crosswalk topicUK ATRS ATRS 2.4.3, ATRS 2.1.4, ATRS 2.4.2Core clause
Same crosswalk topicChina Algo. Rec. AlgoRec Art. 21Related clause
Same crosswalk topicG7 Code G7 Action 11Related clause
Same crosswalk topicGPAI Code Copyright 1.1–1.5, Transparency 1.2Related clause
Same crosswalk topicOECD AI Principles OECD 1.2Related clause
Same crosswalk topicUK DUAA UK GDPR Art. 22BRelated clause

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Data governance

Supply chain and third parties

Fairness and non-discrimination

Privacy and data protection

Source

Chapter 08, section Federal audit and oversight, checked against its sources on the review date above.

Machine-readable

Cite this obligation

García Aibar, J. (2026). GAO AI Accountability Framework principle 2: data (AIGE-OBL-USGAO-DATA). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-usgao-data. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{GAO AI Accountability Framework principle 2: data (AIGE-OBL-USGAO-DATA)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-usgao-data},
  note         = {Version 0.5.0}
}