AI Impact Assessment (FRIA)
An AI Impact Assessment (Fundamental Rights Impact Assessment, FRIA) is a process that ensures the use of high-risk AI systems does not violate the fundamental rights of individuals whose data the system processes.
High-risk systems are classified as AI solutions that make or support decisions affecting individuals — for example, decisions on granting loans, assessing social benefits, or accessing healthcare. The greater the impact of a decision on an individual, the more important it is to carefully evaluate its basis. Also important is the scale of the processing — that is, how many people are affected, and how broadly the decision-making impacts society or a particular target group.
An AI impact assessment is mandatory for providers of public services.
What does the AI impact assessment (FRIA) process involve?
The FRIA process covers the following:
- Review of the data being processed and the legal bases for processing
- Assessment of risks from the perspective of individuals’ fundamental rights
- Examination of the proportionality of the processing
- Concrete proposals for follow-up measures to manage identified risks
The above items are reviewed in an interview, and on that basis an overall picture of the impacts is formed. The impact assessment is a key tool for ensuring the responsible use of AI, and it can be used to verify that data is processed correctly and that individuals’ fundamental rights are not violated.
Does your organization need an AI Impact Assessment?
REFERENCES
SEE ALL
CSC
“I highly recommend 2NS for both individual technical cybersecurity training projects and for more comprehensive cybersecurity partnerships.”
Urpo Kaila, Information security manager – CSC
CableCrew Oy
”The collaboration went so well that from now on, we will use 2NS for our annual audits. Cybersecurity is extremely important to CableCrew because we operate in critical infrastructure. Communication was straightforward, and availability was excellent even outside business hours when needed. All questions were answered by the next day at the latest. Schedules were also communicated in real time.”
Satu-Maria Ravelin, HESQ Director – CableCrew Oy
Kehätieto Oy
“Our collaboration with 2NS has proceeded very smoothly. We have received the support we needed from them for both staff training and security testing of our products. We trust 2NS’s specialized expertise in cybersecurity matters.”
Juhani Ruohotie, Team leader – Kehätieto Oy