Skip to content

Assessment

Impact assessments: what AI regulations require

DPIA, FRIA, algorithmic impact assessment, HUDERIA.

17 requirements · 11 regulations · 6 checks

Requirements by regulation

EUAI Act2

EX-019

DPIA Art. 26§9

EX-020

FRIA Art. 27

CoECoE Convention1

COE-16

Risk and impact management framework (HUDERIA) Art. 16

USNIST AI RMF6

GOVERN-4.2

Organizational teams document the risks and potential impacts of the AI technology they design, develop, deploy, evaluate, and use, and they communicate about the impacts more broadly. GOVERN

MAP-3.2

Potential costs, including non-monetary costs, which result from expected or realized AI errors or system functionality and trustworthiness - as connected to organizational risk tolerance - are examined and documented. MAP

MAP-5.1

Likelihood and magnitude of each identified impact (both potentially beneficial and harmful) based on expected use, past uses of AI systems in similar contexts, public incident reports, feedback from those external to the team that developed or deployed the AI system, or other data are identified and documented. MAP

MEASURE-2.10

Privacy risk of the AI system - as identified in the map function - is examined and documented. MEASURE

MANAGE-1.1

A determination is made as to whether the AI system achieves its intended purposes and stated objectives and whether its development or deployment should proceed. MANAGE

MANAGE-1.4

Negative residual risks (defined as the sum of all unmitigated risks) to both downstream acquirers of AI systems and end users are documented. MANAGE

COColorado AI Act1

CO-06

Annual impact assessment and on each modification §6-1-1703(3)

CACCPA ADMT1

ADMT-04

Risk assessment before processing §7150-7157

USUS federal1

USF-03

Minimum practices for high-impact AI: testing, impact assessment, oversight, monitoring, appeal M-25-21 §4

CANCanada1

CAN-01

Algorithmic Impact Assessment (AIA) before production DADM §6.1

BRPL 23381

BR-14

Algorithmic impact assessment Arts. 25-28

KRAI Basic Act1

KR-05

Fundamental rights impact assessment (best effort) Art. 35

INTLISO 420011

ISO-6.1.4

AI system impact assessment Cl. 6.1.4, A.5

Checks in this theme

Most shared first

Code	Check	Used by
VER-020-D-01	FRIA carried out in accordance with Art. 27	AI Act PL 2338 CoE Convention ISO 42001 AI Basic Act
CHK-IMPACT-ASSESS	An impact assessment is performed, documented and used in go/no-go and risk decisions	Canada ISO 42001 NIST AI RMF Colorado AI Act US federal
VER-019-D-02	DPIA carried out in accordance with GDPR Art. 35	PL 2338 CoE Convention RGPD CCPA ADMT
VER-019-D-01	Need for a DPIA assessed	RGPD NIST AI RMF OECD AI
VER-AUTO-06	DPIA completed	AI Act
CHK-BR-AIA-PUBLISHED	Conclusions of the algorithmic impact assessment published	PL 2338

Related themes

Prohibited practices Fairness & non-discrimination Personal data

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.