Fundamental Rights Impact Analysis (FRIA)

Катерина Дубас Legal IT Group
Kateryna Dubas
Head of Privacy and Cybersecurity Practices
Send a request
FRIA is the fundamental rights impact assessment that the AI Act requires in certain cases. We prepare a conclusion on applicability, a full FRIA report, support for integration with an existing DPIA, and support with submitting the documents to the regulator
Кібербезпека Legal It Group

Why Us

Because a FRIA is not replaced by a DPIA

Certified AI/privacy lawyers who conduct FRIAs for manufacturers of high-risk AI systems
  • A Team of Three FIPs

    Certified privacy professionals: CISSP, CIPP/E, CIPP/US, CIPM, CIPT, FIP.
    icon
  • Knowledge of the AI industry's specifics

    We work with AI projects and understand the technical side
    about_icon2
  • Assessment of each right separately

    Harm to one right cannot be "offset" by benefit to another
    about_icon3
  • FRIA ≠ DPIA

    We know where they overlap and where FRIA requires more
    about_icon4
Send a request
decor
Кібербезпека та privacy engineering - Legal IT Grpup

We help deployers of high-risk AI show that they are fully ready for a regulator's inspection and are meeting all obligations under the EU AI Act


title_icon

Our Services

  • Opinion on FRIA applicability

    icon-vectors
    A legal opinion: whether the company falls under Article 27 (a public body, a provider of public services in banking/insurance/healthcare/education/employment, or a deployer of AI for credit scoring or insurance risk assessment). Result: a "FRIA required / not required" conclusion with reasoning.
  • Full FRIA report

    icon-vectors
    Conducting the assessment against the six mandatory elements: the processes in which the system is used, the period and frequency, the categories of persons affected, the specific risks of harm, human oversight measures, and actions if the risk materializes. We assess each fundamental right of the EU Charter separately. Deliverable: a finished FRIA report.
  • Integrating FRIA with an existing DPIA

    icon-vectors
    If a GDPR DPIA for this system already exists, we don't start the assessment from scratch: we take your DPIA and add the AI Act-specific elements (fundamental rights beyond privacy), merging everything into one coherent document.
  • Support with submission to the regulator

    icon-vectors
    FRIA results must be notified to the supervisory authority with a completed template. We prepare the package for submission, support the notification itself, and put in place an update process (a FRIA is revisited on a system version change, new categories of persons, new contexts, after an incident).


Certified Experts

Our team holds certifications in privacy and cybersecurity

Internationally Recognised Expertise

CIPT_Dubas
FIP_Dubas
Катерина Дубас. Кібербезпека
Катерина Дубас_кібербезпека
Катерина Дубас_кібербезпека
FIP_Tarasiuk

blog_iconRelevant and Practical Articles

  • Data protection officer
  • AI compliance officer
  • Data privacy compliance
  • Diia.City
  • Digital Millennium copyright Act
  • Trademark in IT
Go to Blog

We Write About What We Practise

ІP, GDPR, contracts and disputes, as well as the legal aspects of implementing technologies such as artificial intelligence and best practices for implementing specific legal solutions.