Demonstrație. Documentele de mai jos sunt șabloane randate cu date demonstrative sau interne. Nu atestă conformitatea acestui site sau a unei firme cu Regulamentul (UE) 2024/1689 și nu sunt aprobate de nicio persoană responsabilă.

PROC-008-FIRMA-DEMONSTRATIVA-bfe29e2d · verifică

PROC-008

Data Governance Procedure

Document Information

Field	Value
Document ID	PROC-008
Title	Data Governance Procedure
Repository	RRVI™
Module	08 – Data Governance
Company	Firmă demonstrativă
Version	0.0.0-demo
Status	Draft (demo, neaprobat)

1. Purpose

This procedure defines how Firmă demonstrativă governs, documents, reviews and maintains data used by Artificial Intelligence systems throughout their lifecycle.

The objective is to ensure that data used by AI systems remains accurate, complete, secure, traceable and compliant with Regulation (EU) 2024/1689 (EU AI Act) and Regulation (EU) 2016/679 (GDPR).

2. Scope

This procedure applies to:

internally developed AI systems;
externally acquired AI systems;
proof-of-concept AI systems;
production AI systems;
structured and unstructured data;
operational, validation and reference datasets.

3. Responsibilities

Managing Director

approves major Data Governance changes where required.

AI Governance Owner

Responsible for:

coordinating Data Governance activities;
maintaining the Data Governance Register;
initiating periodic reviews.

Data Owner

Responsible for:

approving data usage;
ensuring data quality;
reporting data issues.

AI System Owner

Responsible for:

documenting data sources;
identifying data limitations;
maintaining technical documentation.

Compliance Owner

Responsible for:

monitoring compliance with the EU AI Act and GDPR;
supporting audits and inspections.

4. Procedure

Step 1 — Identify AI System

Locate the AI system in:

REG-001_AI_System_Inventory_Register.md

Step 2 — Identify Data Sources

Document:

source systems;
internal datasets;
external datasets;
public data;
manually entered data.

Step 3 — Assess Data Quality

Evaluate:

accuracy;
completeness;
consistency;
relevance;
timeliness;
integrity.

Record identified limitations.

Step 4 — Assess Data Protection

Verify:

lawful processing;
access controls;
confidentiality;
retention requirements;
data minimisation.

Step 5 — Record Governance Information

Update:

REG-008_Data_Governance_Register.md

Record:

data source;
owner;
classification;
quality assessment;
review date.

Step 6 — Correct Issues

Where deficiencies are identified:

document the issue;
implement corrective actions;
verify effectiveness;
update documentation.

Step 7 — Review

Review Data Governance whenever:

data sources change;
AI systems change;
legislation changes;
significant incidents occur.

5. Records

This procedure produces:

Data Governance Register;
Data Governance Evidence;
Data Governance Declaration.

6. References

Regulation (EU) 2024/1689 (EU AI Act)
Regulation (EU) 2016/679 (GDPR)
DOD-008 Data Governance Policy
REG-001 AI System Inventory Register
REG-008 Data Governance Register
EVID-008 Data Governance Evidence
DEC-008 Data Governance Declaration

7. Approval

Prepared by

[persoană responsabilă, nepublicat]

Company

Firmă demonstrativă

Status

Approved