RFC-028: EU AI Act Alignment — Regulatory Governance Framework — 5. Fundamental Rights Impact Assessment (Art. 27)

AIGP Specification › RFC-028: EU AI Act Alignment — Regulatory Governance Framework › 5. Fundamental Rights Impact Assessment (Art. 27)

← 4. High-Risk AI Systems — Mandatory Governance (Art. 6-49) · Section index · 6. Transparency Obligations (Art. 50) →

5. Fundamental Rights Impact Assessment (Art. 27)

5.1 FRIA Signal

Deployers of high-risk AI must perform a FRIA before putting the system into use:

{
  "fria": {
    "performed": true,
    "date": "2026-06-17T00:00:00Z",
    "assessor": "Data Protection Officer",
    "fundamental_rights_assessed": [
      "RIGHT_TO_DIGNITY",
      "RIGHT_TO_NON_DISCRIMINATION",
      "RIGHT_TO_PRIVACY",
      "RIGHT_TO_FAIR_TRIAL",
      "RIGHT_TO_GOOD_ADMINISTRATION",
      "FREEDOM_OF_EXPRESSION",
      "RIGHT_TO_ASYLUM"
    ],
    "risk_to_fundamental_rights": "MEDIUM",
    "mitigation_measures": [
      "Human review of all decisions",
      "Regular bias auditing",
      "User right to explanation (Art. 86)"
    ],
    "dpia_reference": "DPIA-2026-0042",
    "notified_to_authority": true
  }
}

5.2 FRIA Integration with AIGP

• FRIA is required BEFORE first CHECK in HIGH_RISK context
• Governance server validates fria.performed == true before allowing invocations
• FRIA evidence stored as part of conformity documentation

---

---

← 4. High-Risk AI Systems — Mandatory Governance (Art. 6-49) · Section index · 6. Transparency Obligations (Art. 50) →