{"data":{"slug":"fundamental-rights-impact-assessment","title":"Fundamental Rights Impact Assessment (FRIA)","type":"assessment","formats":["docx","xlsx"],"topics":["risk","oversight","evidence"],"frameworks":["eu-ai-act"],"short":"The assessment Article 27 of the EU AI Act requires of deployers of high-risk AI: one section per element the article names, with placeholders, plus a register to track completed assessments.","covers":{"categories":["impact_assessment"]},"version":6,"dataset_version":"ef1018b7a6a2","generated_at":"2026-11-12T05:14:17+00:00","citations":8,"downloads":21,"files":[{"format":"docx","filename":"fundamental-rights-impact-assessment-v6.docx","bytes":11058,"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment#download"},{"format":"xlsx","filename":"fundamental-rights-impact-assessment-v6.xlsx","bytes":17144,"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment#download"}],"url":"https://aipolicytracker.org/templates/fundamental-rights-impact-assessment","inside":["Document: a section for each element of the assessment, with guidance drawn from the recorded duty and a placeholder to complete","Register sheet: one row per assessment with status, owner, date and link to evidence","The duty this rests on, cited by article"],"legal_basis":["eu-ai-act"],"caveat":null,"covered_obligations":[{"slug":"us-california-ccpa-risk-assessment","title":"Conduct and document a risk assessment before processing that presents significant risk, including ADMT for significant decisions","policy":"us-california-cppa-admt-regulations","source_reference":"Cal. Code Regs. tit. 11, §§ 7150, 7155","url":"https://aipolicytracker.org/obligations/us-california-ccpa-risk-assessment"},{"slug":"eu-ai-act-fundamental-rights-impact-assessment","title":"Carry out a fundamental rights impact assessment before deployment","policy":"eu-ai-act","source_reference":"Article 27","url":"https://aipolicytracker.org/obligations/eu-ai-act-fundamental-rights-impact-assessment"},{"slug":"india-dpdp-significant-data-fiduciary-duties","title":"Significant Data Fiduciaries must appoint a DPO and run impact assessments and audits","policy":"india-dpdp-act","source_reference":"Section 10","url":"https://aipolicytracker.org/obligations/india-dpdp-significant-data-fiduciary-duties"},{"slug":"south-korea-ai-basic-act-art-35-high-impact-ai-impact-assessment","title":"Operators of high-impact AI should assess its impact on fundamental rights before use","policy":"south-korea-framework-act-on-the-development-of-artificial-intelligence-and-establishment-of-a-foundation-for","source_reference":"Article 35","url":"https://aipolicytracker.org/obligations/south-korea-ai-basic-act-art-35-high-impact-ai-impact-assessment"},{"slug":"uae-pdpl-impact-assessment-new-technologies","title":"Conduct a data protection impact assessment for high-risk processing using new technologies","policy":"uae-personal-data-protection-law","source_reference":"Article on data protection impact assessment (reviewer to cite article number)","url":"https://aipolicytracker.org/obligations/uae-pdpl-impact-assessment-new-technologies"},{"slug":"uk-ico-dpia-for-ai","title":"Carry out a data protection impact assessment for high-risk AI processing","policy":"uk-ico-ai-data-protection-guidance","source_reference":"UK GDPR Article 35; ICO guidance, accountability and governance section","url":"https://aipolicytracker.org/obligations/uk-ico-dpia-for-ai"},{"slug":"us-nist-ai-rmf-map","title":"Map context, intended use and potential impacts (Map)","policy":"us-nist-ai-rmf","source_reference":"MAP function","url":"https://aipolicytracker.org/obligations/us-nist-ai-rmf-map"}],"versions":[{"version":6,"generated_at":"2026-11-12T05:14:17+00:00","dataset_version":"ef1018b7a6a2","changelog":"Dataset 4559f86f527b → ef1018b7a6a2. Sheet \"Impact-assessment duties\": 6 → 7 rows (+1). Record citations: 7 → 8.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":7},"blocks":32,"headings":11,"citations":8}},{"version":5,"generated_at":"2026-10-16T05:30:02+00:00","dataset_version":"4559f86f527b","changelog":"Dataset 1e8ea28a8a93 → 4559f86f527b.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":6},"blocks":32,"headings":11,"citations":7}},{"version":4,"generated_at":"2026-10-09T05:30:01+00:00","dataset_version":"1e8ea28a8a93","changelog":"Dataset 52bd836b1d6b → 1e8ea28a8a93.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":6},"blocks":32,"headings":11,"citations":7}},{"version":3,"generated_at":"2026-10-08T05:30:01+00:00","dataset_version":"52bd836b1d6b","changelog":"Dataset 3335c39da4b7 → 52bd836b1d6b.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":6},"blocks":32,"headings":11,"citations":7}},{"version":2,"generated_at":"2026-09-27T05:30:01+00:00","dataset_version":"3335c39da4b7","changelog":"Dataset 914895c3103e → 3335c39da4b7. Sheet \"Impact-assessment duties\": 7 → 6 rows (-1). Record citations: 8 → 7.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":6},"blocks":32,"headings":11,"citations":7}},{"version":1,"generated_at":"2026-09-26T13:05:20+00:00","dataset_version":"914895c3103e","changelog":"First version, built from dataset 914895c3103e.","stats":{"sheets":{"FRIA register":0,"Impact-assessment duties":7},"blocks":32,"headings":11,"citations":8}}]},"meta":{"license":"CC BY 4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","disclaimer":"This template is generated from the records on aipolicytracker.org. It is an informational resource, not legal advice, and completing it does not make an organisation compliant with any law or standard. Every row that cites a duty links to the record it came from; check the official source before relying on it."}}