ACR-5.16v1.1

The system operator SHALL maintain documentation of training data sources, licensing status, consent

Eval Method

EIEvidence Inspection

Risk Weight

4 / 10

Applicability

L1L2L3

Description#

The system operator SHALL maintain documentation of training data sources, licensing status, consent mechanisms, and provenance chain for all data used in model training and fine-tuning.

Evaluation Method#

EIEvidence Inspection

Compliance is evaluated through inspection of documentary evidence including architecture documents, configuration artifacts, and operational records.

v1.1 Details#

Profile Applicability

S,A,C

Evaluation Frequency

At-Certification

Platform Cert Eligible

No

Framework Crosswalk Refs

EU AI Act Art. 10; NIST AI RMF Map 2.3; ISO 42001 A.7.2

Classification#

Conditional Control

This is a conditional control. Non-compliance with this ACR may result in conditional certification with a mandated remediation period. The Authorized Verification Body will specify the remediation timeline and required evidence for the condition to be cleared. If remediation is not completed within the specified period, the conditional certification will be revoked.