A fundamental rights impact assessment (FRIA) is a documented evaluation of how a high-risk AI system could affect people's fundamental rights before it is deployed. Under Article 27, it applies to certain deployers, including public bodies and private entities providing public services.
Article 27 requires certain deployers of high-risk AI systems to assess the impact on fundamental rights before first use. The assessment covers the processes in which the system will run, how long and how often it will be used, the categories of people likely to be affected, the specific risks of harm to them, the human oversight measures in place, and the steps to take if risks materialize.
The obligation falls on bodies governed by public law, private entities providing public services, and deployers of certain high-risk systems used for credit scoring or for risk assessment and pricing in life and health insurance. Where the assessment is required, the results are notified to the market surveillance authority.
A FRIA is not a privacy document. A data protection impact assessment looks at personal data risks, while a FRIA looks at a wider set of rights, including non-discrimination, dignity, and access to services. Where both apply, they can be run together, but each has its own scope.
The course covers the FRIA on Day 4, alongside the registration and notification duties, so participants leave with a template they can adapt to their own systems.
Complete the fundamental rights impact assessment before first use, not after go-live, and treat it as a living record. An assessment that is never updated stops matching how the system is actually used.
“Run the impact assessment before go-live, not after a complaint.”
This ISO/IEC 42001 Lead Auditor training prepares audit, risk, and compliance professionals to assess Artificial Intelligence Management Systems (AIMS) in a structured, defensible way. The course focuses on planning, conducting, and closing ISO/IEC 42001 audits in real organizational environments, addressing governance, ethical use of AI, risk management, and regulatory expectations shaping 2024–2025. Participants learn to interpret ISO/IEC 42001 requirements from an auditor’s perspective, evaluate objective evidence, and formulate audit conclusions that stand up to certification scrutiny and executive review.
View courseThis Lead AI Risk Manager training prepares professionals to design, operate, and defend an AI risk management program aligned with regulatory and governance expectations. The course focuses on practical risk identification, decision traceability, and defensible mitigation strategies across the AI.
View courseThis ISO/IEC 42001 Lead Implementer course trains professionals to design and deploy an Artificial Intelligence Management System that stands up to regulatory, ethical, and operational scrutiny.
View courseThe EU AI Act applies to AI systems placed on the EU market, put into service there, or whose outputs are used in the EU, wherever the company is based. Applicability is decided per system and per use case.
Providers of high-risk AI systems must prepare technical documentation before the system is placed on the market, following the content set out in Annex IV, and keep it up to date. The documentation shows how the system meets the requirements for high-risk AI.
The EU AI Act sorts AI systems into four levels: unacceptable risk (prohibited), high risk, limited risk with transparency duties, and minimal risk. A system is high risk if it is a safety component covered by EU product legislation or falls under a use case listed in Annex III.
The EU AI Act applies to AI systems placed on the EU market, put into service there, or whose outputs are used in the EU, wherever the company is based. Applicability is decided per system and per use case.
Providers of high-risk AI systems must prepare technical documentation before the system is placed on the market, following the content set out in Annex IV, and keep it up to date. The documentation shows how the system meets the requirements for high-risk AI.
The course suits compliance and AI governance leads, legal counsel and data protection officers, technical AI teams, and consultants or executives who must show defensible AI governance. Each role works through a different part of the AI Act.
The EU AI Act sorts AI systems into four levels: unacceptable risk (prohibited), high risk, limited risk with transparency duties, and minimal risk. A system is high risk if it is a safety component covered by EU product legislation or falls under a use case listed in Annex III.
Browse all FAQs →
Full knowledge base
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.