Related references
Other laws and frameworks our guides draw on, beyond the EU AI Act. The NIST AI RMF and ISO/IEC 42001 are best-practice standards, not law.
GDPR
EU AI Act and GDPR: how do the two regulations relate?
GuideThe EU AI Act and the GDPR create overlapping but distinct obligations for AI systems that process personal data. They align on data quality, impact assessments, transparency, and individual rights, but differ in scope, accountability roles, and incident-reporting timelines, so the efficient approach is integrated compliance, such as a combined DPIA/FRIA.
FRIA step by step: how to conduct a Fundamental Rights Impact Assessment
GuideA Fundamental Rights Impact Assessment (FRIA) under Art. 27 is conducted step by step: describe the system and its purpose, identify affected persons, assess the impact on each fundamental rights dimension, define mitigation measures, and document the residual risk before deployment.