[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F27":3},{"item":4,"lessons":16,"controls":18,"related":19},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","27","Article 27","Fundamental rights impact assessment for high-risk AI systems",0,"European Union","**What it asks for.** Before deploying certain high-risk AI systems, deployers that are bodies governed by public law or private entities providing public services, and deployers of systems used for creditworthiness assessment or for risk assessment and pricing in life and health insurance, must assess the impact on fundamental rights.\n\n**In practice.** The assessment describes the deployer's processes in which the system will be used, the period and frequency of use, the categories of people likely to be affected, the specific risks of harm to them, the human oversight measures, and the measures to be taken if risks materialise, including governance and complaint mechanisms. It applies to first use and must be updated when relevant factors change. The deployer notifies the market surveillance authority of the results using a template from the AI Office, and can build on an existing data protection impact assessment. Evidence includes the completed assessment, notification and update records.\n\n**Common gaps.** Organisations often treat this as a copy of the DPIA, missing non-privacy rights such as non-discrimination, and fail to update it when use changes.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[],[],[]]