What is a fundamental rights impact assessment under the EU AI Act?

Under Article 27, certain deployers of high-risk AI must assess the system's impact on people's fundamental rights before first using it. This applies to public bodies, private entities providing public services, and deployers using AI for credit scoring or life and health insurance pricing. The assessment covers how and how often the system will be used, who will be affected, the specific risks of harm, the human oversight in place and what happens if risks materialise, and the market surveillance authority must be notified of the results.

How it works

1. Describe the process the AI is used in, how often and for how long.
2. Identify the groups of people likely to be affected and the risks of harm to them.
3. Set out human oversight measures and what you will do if harm occurs.
4. Seal the finished assessment so you can prove what it said, and when.