Control A.7.4: Quality of data for AI systems
Define and document data quality requirements and check that data used in building and running the AI system satisfy them.
What control A.7.4 asks
Define and document data quality requirements and check that data used in building and running the AI system satisfy them.
Why it matters for privacy
Quality includes accuracy about people. A model trained on stale or duplicated records can produce a wrong decision about a person who never had a chance to correct it.
Where the draft lands: quality is a privacy issue. A wrong inference about a person is a privacy harm. The draft's evaluation of consequences reaches data quality.
Basis for A.7.4: the ISO page 56582 and the ISO/IEC 42001:2023 control record. No draft requirement is stated here: the abstract gives the direction and the text is not public. Treating the risk: data and third parties.
Evidence for control A.7.4
The list below is what a reviewer will want produced, not described. For control A.7.4 the list is written for an AI system that touches personal data, so a system with no personal data will need a subset.
- Data quality Data quality requirements for training, validation, test and production data
- Data quality Data quality measurement results
- Data quality Bias analysis and adjustments made for performance and fairness
Where control A.7.4 commonly fails
- Quality requirements defined for training data only
- Bias impact on fairness not assessed
What to do about control A.7.4 before the draft lands
Set quality criteria that include accuracy, completeness, currency and representativeness, and test them by group. Record the result and the correction route.
Do not rebuild around a draft. Control A.7.4 already requires the evidence above, and the privacy preparation is the same control applied to the personal data an AI system touches.
Read across from control A.7.4
- Control A.7.2, Data for development and enhancement of AI system
- Control A.7.3, Acquisition of data
- Control A.7.5, Data provenance
- Control A.7.6, Data preparation
← Control A.7.3 | Control A.7.5 →
Open the full index. The public record behind control A.7.4 shows the scope and the lifecycle.
Control A.7.4 is cited to ISO/IEC 42001:2023, Annex A. The requirement, evidence and gaps are our wording from the control record; the privacy overlay is read from the ISO page and its abstract. The full list.