{"slug":"eu-ai-act-fundamental-rights-impact-assessment","id":"AIPT-OBL-0016","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0016","title":"Carry out a fundamental rights impact assessment before deployment","short_title":"Fundamental rights impact assessment","category":"impact_assessment","summary":"Before deploying most Annex III high-risk systems, deployers that are bodies governed by public law or private entities providing public services, and deployers using systems for creditworthiness assessment or life and health insurance pricing, must assess the impact on fundamental rights: the processes, period and frequency of use, categories of affected persons, specific risks of harm, human-oversight measures and mitigation, and notify the market-surveillance authority of the results.\n","practical_action":"Reuse GDPR DPIA workflows and extend them with the Article 27 elements; the AI Office is to provide a template.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 27","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["deployer","public_authority"],"sectors":["financial_services","public_services"],"use_cases":["finance_and_credit","public_services"],"applicability":[{"description":"Public bodies, private providers of public services, and deployers in credit and insurance use cases.","actors":["deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"Fundamental rights impact assessment report","description":null,"artifact_type":"report"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 6.1.4 AI system impact assessment; Annex A control on impact assessment","note":"Original editorial mapping.","confidence_level":"high","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MAP 5.1, MAP 5.2","note":"Impacts on individuals, groups and society.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"ai-impact-assessment","title":"AI impact and fundamental-rights impact assessment","kind":"process","relationship":"satisfies","note":"A rights-focused assessment template covering the required elements.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-impact-assessment"},{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"supports","note":"Reuse of the DPIA workflow and findings.","confidence_level":"high","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-fundamental-rights-impact-assessment","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}