CMP-86Recommended EU law
Assess the effect on fundamental rights before deploying high-risk AI
Some deployers of high-risk AI must assess its effect on people's rights before first use. They are public bodies, public services, and firms scoring credit or pricing insurance. Send the result to the market surveillance authority.
Region
European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
Review by
2027-06-30
How to do it
AI Act Article 27 asks these deployers for a fundamental rights impact assessment. It names the process, how long and how often the system runs, and the groups of people it affects. It also names the risks of harm to them, the human oversight and what you do when a risk occurs. A DPIA you already wrote can cover part of it, as Screen every new feature for a DPIA describes. The duty starts with the other high-risk duties, which Regulation (EU) 2026/1744 moved to 2 December 2027. Plan it as Find out if a feature is high-risk says.
How to check
Every register entry with a high-risk area and a deployer role of a listed kind links a dated assessment before its first use. The assessment names the affected groups, the risks, the oversight and the notification date.
Sources
Related rules
- CMP-44 Find out if a feature is high-risk in Compliance and governance
- CMP-10 Screen every new feature for a DPIA in Compliance and governance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/ai-act/fundamental-rights-assessment">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.