Checks / Obligations / Assess the impact before you start
Obligation · 9 controls · 6 laws
Assess the impact before you start
Before using AI or personal data in ways that could hurt people, assess the impact on them and their rights.
What to put in place
Carry out and record an impact assessment before launch and after significant changes.
Policy wording you can use
[your organisation] assesses the impact of each AI system and high-risk use of personal data on the people affected and their rights before launch, and again after any significant change.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 9 controls here that take a yes or a document (the rest need their own number or date and are listed after).
Every control that asks for this
Agent output: compliance gates
- EU AI Act Art.27 - fundamental-rights impact assessment
- GDPR Art.35 - DPIA referenced
- ISO/IEC 42001 A.5 - AI system impact assessment
- NIST AI RMF MAP-5 - impacts characterised