FRIA: where high-risk AI must prove it respects fundamental rights
FRIA under EU AI Act Article 27 requires fundamental rights assessment for high-risk AI. Zertia integrates ISO 42005 methodology.
Definition
FRIA under EU AI Act Article 27 requires fundamental rights assessment for high-risk AI. Zertia integrates ISO 42005 methodology.
Key facts
- FRIA (Fundamental Rights Impact Assessment) is required under EU AI Act Article 27 for certain high-risk AI deployments.
- FRIA must be conducted by deployers before first use, with documented assessment of rights impacts and mitigation measures.
- FRIA applies to public sector entities and private entities providing services of public interest using high-risk AI.
- ISO/IEC 42005 provides structured methodology for conducting FRIA.
- Zertia integrates ISO 42005 methodology with ISO 42001 audit for FRIA-obliged deployments.
Frequently asked questions
What is FRIA under EU AI Act Article 27?
Fundamental Rights Impact Assessment, a mandatory evaluation that certain deployers of high-risk AI must complete before first use. It documents impacts on fundamental rights and required mitigation measures.
Who must conduct FRIA?
Public sector entities and private entities providing services of public interest (e.g., banks for credit decisions, insurance for coverage decisions) deploying high-risk AI systems under EU AI Act Annex III categories.
How is FRIA conducted in practice?
ISO/IEC 42005 provides structured methodology. Zertia integrates ISO 42005 methodology with ISO 42001 audit scope for FRIA-obliged organizations.
Definitions that hold up under audit.
Does this term apply to your certification project? Let's talk 30 minutes, no commercial pressure.