← All themesOpen in explorer →
Impact & Fundamental Rights across ISO 42001, NIST AI RMF and the EU AI Act
// theme · impact-assessment
Impact & Fundamental Rights
Assessing impact on people, fundamental rights, fairness.
// Do once → satisfies all three
ONE AI Impact Assessment template that doubles as a Fundamental Rights Impact Assessment (FRIA) for in-scope deployers.
FRIA is the most prescriptive impact assessment. Use its field list as the master template and the ISO/NIST impact requirements drop out.
ISO 42001
Cl.6.1.4 · Cl.8.4 · Annex A.5
NIST AI RMF
MAP 5.1 · MAP 5.2
EU AI Act
Art.27
// Evidence auditors expect
- ✓ AI System Impact Assessment (ISO Cl.6.1.4 / Annex A.5)
- ✓ Fundamental Rights Impact Assessment (EU Art.27) for deployers
- ✓ Stakeholder consultation evidence for affected groups
- ✓ Re-assessment trigger list (change in purpose, data, population)
// Common pitfalls
- ⚠ Skipping FRIA because 'we're not public sector' - Art.27 also covers essential services and several deployers.
- ⚠ Impact assessment done by the dev team alone with no affected-stakeholder input.
- ⚠ No re-assessment when intended purpose or user population shifts.
ISO 42001
8Cl.6.1.4 + Annex A.5 require AI system impact assessment on individuals, groups and society.
Clause 4.2
Needs and expectations of interested parties
Identify interested parties (users, regulators, affected persons) and their requirements.
Clause 6.1.2
AI risk assessment
Define and apply a process to identify, analyse and evaluate AI risks.
Clause 6.1.4
AI system impact assessment
Assess potential consequences for individuals, groups and society throughout the AI lifecycle.
Clause 8.4
AI system impact assessment (operational)
Conduct impact assessments at planned intervals and on change.
Annex A.5.2
AI system impact assessment process
Establish a process to assess the potential impacts of AI systems on people and society.
Annex A.5.3
Documentation of impact assessments
Document the results of AI system impact assessments and keep them available for review.
Annex A.5.4
Assessing AI system impact on individuals and groups
Assess potential impacts of AI systems on individuals and groups of individuals.
Annex A.5.5
Assessing societal impacts
Assess potential societal impacts of AI systems beyond direct users.
NIST AI RMF
4MAP 5.1/5.2 cover impact on people and the environment within the MAP function.
GOVERN 5.1
Stakeholder engagement & communications
Mechanisms for stakeholder feedback and communication.
MAP 3.1
Potential benefits examined
Benefits to mission and stakeholders examined against costs/risks.
MAP 5.1
Likelihood & magnitude of impacts characterised
Impacts on individuals, groups, communities, society characterised.
MEASURE 2.11
Fairness & bias evaluated
AI system is evaluated for fairness and harmful bias.
EU AI Act
2Art.27 obliges certain deployers (public bodies, essential services) to perform a Fundamental Rights Impact Assessment before use.