NIST AI RMF, MapMAP 5.1

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law, and apply those measures iteratively throughout the activities within an AI system's lifecycle; an app operator is reached through the measures its Party adopts.

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law, and apply those measures iteratively throughout the activities within an AI system's lifecycle; an app operator is reached through the measures its Party adopts.

Each Party must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by AI systems, considering their actual and potential impacts on human rights, democracy and the rule of law; an app operator is reached through the measures its Party adopts.

Assess and mitigate the systemic risks your model may pose at Union level, including where those risks originate, whether in the model's development, its placing on the market, or its use.

Provide the information or documentation, and give the access, that Article 21 requires of a provider of a high-risk AI system when a competent authority asks; carry out and update the fundamental rights impact assessment Article 27 requires and send the notification it requires; if you are a notified body, inform the notifying authority as Article 45 requires; and, if you operate a high-risk AI system under point 1, 3, 4 or 5 of Annex III, give an affected person the explanation Article 86 requires (Section 15).

Each Party to the Convention must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by artificial intelligence systems, considering their actual and potential impacts on human rights, democracy and the rule of law (Article 16(1)).

If your AI system was trained using cumulative compute of 10^26 floating-point operations or more, applies the most advanced AI technology currently in use, and could broadly and seriously affect people's life, physical safety or fundamental rights, identify, assess and mitigate risk across the system's full life cycle.

Each Party to the Convention must adopt or maintain measures for the identification, assessment, prevention and mitigation of risks posed by artificial intelligence systems, considering their actual and potential impacts on human rights, democracy and the rule of law (Article 16(1)).

If you are a body governed by public law, a private entity providing a public service, or a deployer of a credit-scoring or life-and-health-insurance-risk-pricing high-risk AI system (Annex III points 5(b) or (c)), assess the impact on fundamental rights of a high-risk AI system before its first use, unless the system is the Annex III point 2 critical-infrastructure use case.

Update the assessment if any of those elements changes during use, rather than treating it as a one-time exercise.

Identify and analyze the known and reasonably foreseeable risks the system can pose to health, safety, or fundamental rights under its intended use, and estimate and evaluate risks that may emerge under intended use and reasonably foreseeable misuse.

Consider whether the system is likely to adversely affect persons under 18 or other vulnerable groups, given its intended purpose, when implementing your risk management system.

Carry out iterative risk and impact assessments of an AI system's actual and potential impacts on human rights, democracy, and the rule of law, with sufficient prevention and mitigation measures.

As controller, the Ministry of the Interior must carry out the data-protection impact assessment beforehand and consult the Garante (art. 10, comma 6).

Conduct a risk assessment and a human-rights impact assessment before deploying a high-risk system, and maintain human oversight of it.

An app whose AI system a hazard assessment finds poses increased danger to life, health, rights, the environment, defense, national security or public order must have its owner reassess that hazard at each design, development, deployment and material-change stage, and publish the assessment and its methodology on the owner's own website as open data.

Do not use an electronic monitoring tool, an automated employment decision system, or an automated benefit or service decision system until an impact assessment has screened it and an independent auditor or, for governmental use, the Department of Labor and Workforce Development has approved it as compliant.

Where national law permits real-time remote biometric identification for law enforcement under an Article 5(1)(h) exception, do not use the system until a fundamental rights impact assessment has been completed and the competent judicial or independent administrative authority has authorized the use, except in a duly justified urgent case; register the system in the EU database, without undue delay in a justified emergency; and notify each use to the market surveillance authority and the national data protection authority (Section 10, paragraphs 377, 380, 382, 383 and 409).

Before use, complete a fundamental-rights impact assessment under Article 27 of Regulation (EU) 2024/1689 and the data-protection impact assessment under Decreto Legislativo 51/2018 (art. 9, comma 1).

Assess the risks of platform work to workers' safety and health, and do not allow a work intensity that endangers a worker's physical or mental health (Article 221.h(1) and (2)).

The CBJ expects you to review and validate AI data, models and decisions to detect and mitigate bias, to conduct periodic AI Impact Assessments proportional to risk, to validate and robustness-test models, and to monitor AI performance continuously at a level matched to the use case and risk (sections 2.5, 2.6, 5.2 and 5.3).

Complete and document a privacy impact assessment before an artificial intelligence system likely to pose a high risk to data subjects processes their personal data, covering the processing operations, a risk evaluation, and the measures planned to prevent the risks identified.

Perform a data protection impact assessment before training or deploying an AI system on personal data of people in Ireland where the processing is new to you, combines data sets, or may involve minors or vulnerable people.

Before developing an AI system that will process personal data, carry out a risk-management process and, where applicable, an impact assessment.