General

Paper Review: Datasheets for Datasets

Published March 8, 2026

Paper: Timnit Gebru, Jamie Morgenstern, Briana Vecchione, Jennifer Wortman Vaughan, Hanna Wallach, Hal Daumé III, and Kate Crawford. "Datasheets for Datasets." Communications of the ACM, 2021. Link: arXiv

Why This Paper Matters

Every AI system learns from data. The data determines what patterns the model absorbs, what biases it inherits, whose voices it amplifies. Yet for years, datasets circulated through machine learning research and industry with minimal documentation — passed around like unmarked ingredients in a complex recipe.

In 2018, Gebru and colleagues proposed a solution borrowed from an older industry: electronics. When you buy a capacitor or transistor, it comes with a datasheet — a standardized document specifying operating conditions, performance characteristics, and failure modes. Engineers rely on these to know whether a component fits their application. Why shouldn't datasets have the same?

"Datasheets for Datasets" is foundational transparency infrastructure. The paper doesn't just propose better documentation; it defines what transparency means in practice. Its questions — who created this data? from whom was it collected? what are its limitations? — have shaped how the field thinks about dataset accountability. The framework influenced the EU AI Act's documentation requirements, Google's and Microsoft's internal practices, and the now-standard practice of publishing dataset documentation alongside research.

For redistribution, this paper matters because documentation is a prerequisite for accountability. Without knowing whose data was used and how, affected communities cannot challenge systems built on their information. Documentation makes visible what is otherwise hidden: the extraction of data from populations who often don't benefit from the AI systems built upon it.

The Problem

The paper opens with a stark observation: machine learning datasets were being shared without adequate documentation. Researchers downloaded datasets, trained models, and published results without understanding — or disclosing — basic facts about the data's origins, composition, and limitations.

This wasn't carelessness. It was a structural gap. No convention existed for what information should accompany a dataset. Academic papers described collection methods in varying detail. Industry datasets often came with even less. The result: datasets propagated through the research ecosystem carrying hidden assumptions, demographic skews, and inappropriate use cases that downstream users couldn't identify.

The ImageNet problem: ImageNet, the canonical computer vision benchmark, contained categories that were offensive, images collected without meaningful consent, and demographic distributions that didn't represent the populations where models would be deployed. Researchers built on it for years before these issues surfaced.

The training data drift problem: When a dataset is collected for one purpose and repurposed for another, mismatches emerge. Data collected to study pedestrian detection in California may not work for autonomous vehicles in Mumbai. Without documentation, these mismatches remain invisible until deployment fails.

The attribution gap: Machine learning models are often tested on benchmark datasets and then deployed on entirely different populations. Documentation would make this mismatch visible; its absence conceals it.

The Analogy

The paper's central insight is that documentation is a solved problem in other industries.

Electronics manufacturers produce datasheets for every component. A capacitor's datasheet specifies capacitance, voltage rating, operating temperature range, equivalent series resistance, and failure modes. Engineers can't design circuits without this information. The practice is so standardized that components from different manufacturers with equivalent specifications are interchangeable.

The analogy works because it highlights what's missing:

Fitness for purpose: Electronic datasheets specify what a component is designed to do. Dataset documentation should specify what the dataset was created for — and implicitly, what it wasn't created for.

Operating conditions: Datasheets specify temperature ranges, voltage limits, humidity tolerances. Dataset documentation should specify the demographic, temporal, and contextual scope where the data applies.

Known limitations: Every electronic component has failure modes. Datasets have them too — classes with too few examples, populations underrepresented, temporal boundaries beyond which the data becomes stale.

Lifecycle information: Who manufactures the component? Who to contact about defects? For datasets: who maintains it? how to report errors? is it still being updated?

The electronics industry didn't arrive at datasheets through altruism. They emerged because engineers needed reliable information to build reliable systems. The same logic applies to datasets.

The Framework

The paper proposes a structured questionnaire organized around the dataset lifecycle. Each section asks questions that dataset creators should answer — and that downstream users should demand answers to.

Motivation

  • Why was the dataset created? Was it for a specific task? A particular research question? A benchmark?
  • Who created it and on behalf of whom? A company for internal use? Academics for a publication? A government agency?
  • Who funded the creation? Funding sources shape priorities and acceptable outcomes.

These questions matter because purpose constrains appropriate use. A dataset created to benchmark image classification may be inappropriate for medical diagnosis. A dataset funded by a facial recognition company has different incentive structures than one created by civil liberties researchers.

Composition

  • What do the instances represent? People? Documents? Sensor readings?
  • How many instances are there? Total count, but also breakdowns by relevant categories.
  • What data is included for each instance? Features, labels, metadata.
  • Are there labels or targets? How were they assigned? By whom?
  • Is there missing data? What's absent and why?
  • Are there recommended data splits? Training, validation, test sets.
  • Are there errors or noise? Known data quality issues.

This section addresses the "what's actually in the box" question. Datasets with identical names may have different contents. The same benchmark may have multiple versions with different properties.

Collection Process

  • How was the data collected? Direct observation? Sensors? Surveys? Web scraping?
  • Who was involved in collection? Researchers? Contractors? Crowdworkers?
  • Over what timeframe? Data from 2015 may not reflect 2026 conditions.
  • Were individuals notified? Did data subjects know their information was being collected?
  • Did individuals consent? If so, what were they told? Were there incentives?
  • Was consent revocable? Can individuals request removal?

Collection process questions reveal power dynamics. Data scraped from public forums without notification is different from data volunteered by informed participants. The former may be legally permissible but ethically fraught.

Preprocessing and Labeling

  • What preprocessing was applied? Cleaning, normalization, anonymization.
  • Was data filtered? What was removed and why?
  • Were labels applied? By whom? Using what criteria? With what training?
  • Were there quality assurance processes? How was accuracy checked?

Preprocessing shapes what the model learns. Aggressive filtering may remove edge cases that matter for some applications. Labeling by crowdworkers with minimal training produces different annotations than expert labeling. These choices compound through the pipeline.

Uses

  • What are the intended uses? Research? Production systems? Both?
  • What tasks has it been used for? Prior applications provide precedent.
  • What uses should be avoided? Applications the dataset is unsuitable for.
  • Are there characteristics that limit applicability? Demographic scope, temporal boundaries, contextual constraints.

This section inverts the typical framing. Instead of assuming datasets are general-purpose, it asks creators to specify boundaries. A dataset collected in hospital settings may not apply to home healthcare. A dataset of English text may not apply to multilingual contexts.

Distribution

  • How is the dataset distributed? Direct download? API? Controlled access?
  • Under what license? Commercial use? Derivatives? Attribution requirements?
  • Are there restrictions? Export controls? Institutional agreements? Use case limitations?
  • Are there fees? Who pays and how much?

Distribution terms determine access. A dataset available only to well-funded institutions excludes researchers at smaller organizations. Restrictive licenses may prevent the audits that would reveal bias.

Maintenance

  • Who is responsible for maintenance? Is there an ongoing steward?
  • How can users contact the maintainer? For error reports, questions, requests.
  • Will the dataset be updated? If so, how? Will previous versions remain available?
  • Is there a mechanism for error correction? How to report problems?
  • Will older versions be supported? For how long?

Datasets are not static. The world changes; labels become outdated; errors are discovered. Without maintenance processes, datasets degrade over time while continuing to train models.

Why Documentation Matters for Fairness

Documentation enables accountability. Without it, several failure modes become invisible:

Demographic mismatch: If a dataset is primarily composed of one demographic group but models trained on it are deployed on others, performance will differ. Documentation makes composition visible; its absence conceals mismatches.

Consent violations: Training data collected without appropriate consent may expose individuals to harms they never agreed to. Documentation of consent processes allows downstream users to make informed decisions.

Label bias: Labels reflect the judgments of those who applied them. If labelers were given instructions that encode particular values, those values propagate through models. Documentation of labeling processes reveals whose values are embedded.

Temporal drift: Data from one era may encode assumptions that don't hold in another. Documentation of collection timeframes prevents misapplication.

Purpose drift: A dataset created for one purpose may be inappropriate for another. Documentation of intended use prevents repurposing into harmful applications.

Buolamwini and Gebru's Gender Shades work demonstrated this concretely. Commercial facial recognition systems performed dramatically worse on darker-skinned faces partly because benchmark datasets overrepresented lighter-skinned populations. Better documentation would have surfaced this mismatch earlier.

The Redistribution Question

Datasheets reveal redistribution dynamics that typically remain hidden.

Whose data is used? Training datasets for large language models include text scraped from the internet — forums, social media, blogs. The people who wrote that text often don't know their words became training data. They certainly don't receive compensation. Documentation makes this extraction visible.

Who benefits from the data? Companies that train models on scraped data profit from deployment. The original data creators don't. Without documentation, this transfer is invisible. With documentation, it becomes possible to identify — and potentially compensate — sources.

Who can hold systems accountable? If a facial recognition system misidentifies you, you might want to know whether your demographic was represented in training data. If a language model produces harmful content about your community, you might want to know whether your community's voices were included in training. Documentation is a precondition for these questions.

Who controls the narrative? Dataset creators choose what information to include in documentation. As with model cards, there's a difference between documentation that genuinely informs and documentation designed to minimize liability. Industry has incentives to document selectively.

The paper's framing is infrastructural. Just as a bridge requires inspection records and maintenance logs, AI systems require documentation of their data foundations. This isn't optional bureaucracy — it's how you know whether the system is fit for purpose.

Adoption and Impact

The paper has been widely influential:

Academic practice: Major machine learning venues now expect dataset documentation. NeurIPS introduced a Datasets and Benchmarks track requiring detailed documentation. Papers that introduce datasets without adequate documentation face pushback.

Industry standards: Google, Microsoft, Hugging Face, and others have adopted datasheet-style documentation for their public datasets. The Hugging Face Hub includes dataset cards modeled on this framework. Google's internal practices require documentation before datasets can be used in production.

Regulatory requirements: The EU AI Act mandates documentation for high-risk AI systems, including information about training data. The Act's documentation requirements echo the datasheet framework — provenance, composition, limitations.

Companion standards: Model Cards for Model Reporting, proposed by Mitchell et al., extends similar principles to models themselves. Together, datasheets and model cards create a documentation stack for the AI pipeline.

Research infrastructure: The Hugging Face Datasets library includes tools for creating and displaying dataset cards. Documentation has become part of the tooling, not just an afterthought.

What Companies Actually Disclose

Adoption has been uneven. There's a gap between the standard the paper proposes and what companies actually publish.

What you'll typically find:

  • Dataset size and format
  • General data sources ("internet text," "licensed data")
  • High-level use cases
  • Some benchmark performance metrics

What you often won't find:

  • Specific data sources (which websites? which books?)
  • Demographic composition
  • Consent and notification practices
  • Collection labor conditions
  • Specific inappropriate uses
  • Error reporting mechanisms
  • Maintenance commitment

This gap matters. Selective disclosure allows companies to claim transparency while revealing little of substance. A dataset card that says "data was collected from the internet" technically describes the source but provides no accountability.

The Llama License illustrates this tension. Meta publishes documentation for Llama models but doesn't disclose training data composition beyond categories. You know there was "publicly available online data" but not which forums, which books, whose work.

Limitations and Critiques

The datasheet framework isn't without criticism:

Documentation burden: Thorough documentation takes time and resources. For academic researchers with limited funding, detailed datasheets may be impractical. This could create a two-tier system where well-funded labs document thoroughly while smaller teams skip it.

Enforcement gap: Datasheets are voluntary. There's no mechanism to ensure accuracy or completeness. A misleading datasheet is arguably worse than no datasheet — it creates false confidence.

Power dynamics remain: Documentation makes information available but doesn't change who controls datasets. A company that publishes a thorough datasheet still controls whether to fix problems the datasheet reveals.

Downstream verification: Users of datasheets can't easily verify that documentation is accurate. You have to trust that the creators told the truth.

Completion rates: Even among proponents, complete datasheets are rare. The framework is comprehensive; actual documentation is often partial.

Temporal decay: Datasheets become outdated. A 2020 datasheet for a 2020 dataset may not reflect 2026 conditions — additional uses, discovered problems, changed norms.

Despite these limitations, the framework establishes what documentation should include. Partial implementation is better than none. The standard creates pressure toward transparency even when that pressure isn't fully effective. Projects like Hugging Face, Common Crawl, and the DAIR Institute have incorporated datasheet-style documentation into their workflows, demonstrating that the practice scales when institutions commit to it.

The Model Cards Connection

Datasheets for Datasets and Model Cards for Model Reporting form a complementary pair. Gebru is a co-author on Stochastic Parrots and foundational to the algorithmic accountability movement; Mitchell led the model cards work.

Datasheets: Document the data that goes into training. Model cards: Document the model that comes out.

Together, they trace the pipeline from raw data to deployed system. If you want to understand why a model behaves as it does, you need both — the model card tells you what it does; the datasheet tells you what it learned from.

The connection to model cards also highlights what's missing. Model cards describe model behavior but often don't include the training data details that datasheets would provide. A model card might note that the model "performs worse on some demographic groups" without providing the training data composition that would explain why.

EU AI Act Documentation Requirements

The EU AI Act incorporates datasheet-style thinking into regulation. High-risk AI systems must include documentation covering:

  • Training data: "the training methodologies and techniques and the training datasets used, including information on their provenance"
  • Known limitations: "the intended purpose of the AI system as well as the foreseeable misuse"
  • Performance characteristics: "relevant information on the performance of the AI system in terms of its intended purpose"

This isn't identical to the datasheet framework, but it draws on the same logic. Documentation enables oversight; opacity prevents it. The Act makes documentation a legal requirement rather than a voluntary best practice.

Whether enforcement will be effective remains to be seen. Regulation creates obligations but also creates incentives for minimal compliance — documenting enough to satisfy regulators without revealing competitively sensitive information.

How to Use This Paper

When evaluating a dataset: Use the datasheet questions as a checklist. If you can't answer basic questions about composition, collection, and consent, the dataset may not be appropriate for your use case.

When creating a dataset: Follow the framework. Even partial documentation is better than none. Document what you know; flag what you don't.

When advocating for transparency: Cite this paper. It provides a concrete standard rather than vague calls for "more transparency."

When analyzing industry disclosure: Compare what companies publish against what the framework recommends. The gap reveals what they're choosing not to disclose.

When teaching data ethics: The datasheet framework makes abstract concepts concrete. "What's the composition of your training data?" is more actionable than "is your data fair?"

Sources

  • Gebru, Timnit, Jamie Morgenstern, Briana Vecchione, Jennifer Wortman Vaughan, Hanna Wallach, Hal Daumé III, and Kate Crawford. "Datasheets for Datasets." Communications of the ACM, Volume 64, Issue 12, December 2021, pp. 86–92. arXiv
  • Mitchell, Margaret, Simone Wu, Andrew Zaldivar, Parker Barnes, Lucy Vasserman, Ben Hutchinson, Elena Spitzer, Inioluwa Deborah Raji, and Timnit Gebru. "Model Cards for Model Reporting." FAT, 2019. arXiv
  • Buolamwini, Joy, and Timnit Gebru. "Gender Shades: Intersectional Accuracy Disparities in Commercial Gender Classification." Proceedings of Machine Learning Research, Volume 81, 2018. MLR
  • European Parliament. "Artificial Intelligence Act." Regulation (EU) 2024/1689, 2024. EUR-Lex
  • Bender, Emily M., Timnit Gebru, Angelina McMillan-Major, and Shmargaret Shmitchell. "On the Dangers of Stochastic Parrots." FAccT, 2021. ACM