Impact assessment: AI obligations

Practical requirements extracted from policy instruments, with the source article, the actors they bind, evidence examples and original framework mappings. Legal requirements are marked; everything else is voluntary guidance.

jurisdiction: uk × category: impact_assessment ×

Keyword

Jurisdiction

Obligation category

Sector

AI use case

Actor

Binding

Reset

1 result

Legal requirement impact assessment United Kingdom

Carry out a data protection impact assessment for high-risk AI processing

ICO AI guidance · UK GDPR Article 35; ICO guidance, accountability and governance section

Where AI processing of personal data is likely to result in a high risk to individuals, UK GDPR requires a DPIA before processing begins. The ICO treats most AI involving profiling, large-scale processing or novel technology as meeting this threshold.

Source-linked