Fundamental rights impact assessment (FRIA)
Assessment required by the AI Act of certain deployers of high-risk systems, covering effects on people's rights.
The fundamental rights impact assessment is an obligation introduced by the EU AI Act for certain deployers of high-risk systems, in particular public bodies and certain private actors providing essential services. It requires assessing, before deployment, the potential effects of the system on the fundamental rights of the people concerned: discrimination, infringement of privacy, dignity, access to services. Distinct from the conformity assessment that falls on the provider, this assessment makes the deployer, that is the professional user of the system, accountable for the concrete consequences of its use in a given context. It draws on the data protection impact assessment of the General Data Protection Regulation. For insurance, it introduces a documented obligation whose compliance conditions the deployer's liability position: a breach of this assessment can aggravate exposure in case of damage, while a rigorous assessment constitutes a relevant risk-control element for liability cover.
Textbook case: a public body deploying an AI system to assist social decisions must carry out a fundamental rights impact assessment before putting it into service.
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.