Carry out a fundamental rights impact assessment before deployment
Under EU AI Act, Article 27
What does it require?
Before deploying most Annex III high-risk systems, deployers that are bodies governed by public law or private entities providing public services, and deployers using systems for creditworthiness assessment or life and health insurance pricing, must assess the impact on fundamental rights: the processes, period and frequency of use, categories of affected persons, specific risks of harm, human-oversight measures and mitigation, and notify the market-surveillance authority of the results.
Practical action
Reuse GDPR DPIA workflows and extend them with the Article 27 elements; the AI Office is to provide a template.
Who does it apply to?
Public bodies, private providers of public services, and deployers in credit and insurance use cases.
Applies from:
Evidence examples
- Fundamental rights impact assessment report (report)
Framework mappings
Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.
| Framework | Reference | Note | Confidence |
|---|---|---|---|
| ISO/IEC 42001:2023 | Clause 6.1.4 AI system impact assessment; Annex A control on impact assessment | Original editorial mapping. | high |
| NIST AI RMF 1.0 | MAP 5.1, MAP 5.2 | Impacts on individuals, groups and society. | medium |
Similar obligations in other instruments
- Significant Data Fiduciaries must appoint a DPO and run impact assessments and audits — India DPDP Act, India
- Carry out a data protection impact assessment for high-risk AI processing — ICO AI guidance, United Kingdom
- Deployers must complete impact assessments for high-risk AI — Colorado AI Act, Colorado (United States)
- Conduct a data protection impact assessment for high-risk processing using new technologies — UAE PDPL, United Arab Emirates
- Map context, intended use and potential impacts (Map) — NIST AI RMF, United States (voluntary)
Informational only, not legal advice. Verify every claim against the linked official sources and consult qualified counsel before acting.