How to meet it
OWASP AISVS v1.01
Training Data Integrity & Traceability · Data Labeling and Annotation Security
Redact sensitive data in labels
Verify that sensitive information in labels is redacted, anonymized, or encrypted before being used in any labeling artifact.
OWASP AISVS v1.01, requirement 1.2.3
In plain English
Remove or protect personal and confidential information before it reaches labellers or ends up in label files.
What good looks like
- Personal data is masked or replaced before items are sent for labelling.
- Labellers see only what they need to make the judgement.
- Label files do not copy sensitive text into free-text notes.
How teams usually do it
- Automated detection of personal data with masking, run before items enter the labelling queue.
- Labelling interfaces that hide fields not needed for the task.
Evidence an auditor would accept
- The redaction step and its test results.
- A sample of labelling tasks showing redacted content.
Common mistakes
- Redacting the text but leaving names in attached images or metadata.
- Annotators pasting sensitive details into comment fields.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.