GDPR and AI Act
One assessment for the GDPR and the AI Act
The DPIA feeds the fundamental rights assessment, so you do nothing twice. With measures that have an owner and a deadline.
DPIA from €2,950with FRIA or IAMA from €5,950
3 to 4 weeks
Who it is for
- Public bodies, educational institutions, banks and insurers
- Organisations that must carry out a DPIA under Article 35 GDPR or the Dutch DPA list
- Deployers that must carry out a FRIA under Article 27 AI Act
Not for: Processing without high risk: a short DPIA screening is then often enough, which I can also provide
What you get
- A DPIA under Article 35 GDPR
- A FRIA or IAMA on the same facts, where Article 27 AI Act applies
- Measures with an owner and a deadline
- Advice on prior consultation (Article 36 GDPR) if the residual risk stays high
The law behind it
Every finding links to the explanation on this site, with the legal provision. You do not have to take my word for it.
How it works
- 1
A 30-minute call
You explain where you stand. I tell you honestly whether I can help and what it costs.
- 2
Proposal within three working days
Fixed scope, fixed price and a schedule. The same price as on this site.
- 3
Delivery, signed
You receive the deliverable with my name under it, and thirty days for follow-up questions.
Price and terms
DPIA from €2,950with FRIA or IAMA from €5,950
You receive a proposal with a fixed scope and the same price as here, up front. If you started with a scan or check and begin a subscription within three months, we credit that fee.
Praxikon is a trade name of Embed AI (Dutch Chamber of Commerce 90283597). Proposal, terms and invoice are in that name. Prices exclude VAT.
Questions
What does it cost to have a DPIA or FRIA carried out?
DPIA from €2,950 excluding VAT, with FRIA or IAMA from €5,950. Lead time: 3 to 4 weeks. You receive a proposal with a fixed scope and the same price as on this page up front. The contracting party is Embed AI (Dutch Chamber of Commerce 90283597).
Must every deployer of high-risk AI carry out a FRIA?
No. Article 27 applies to bodies governed by public law, private entities providing public services, and deployers of AI for creditworthiness or life and health insurance. Critical infrastructure is excluded. The obligation applies from 2 December 2027.
Do you work with our DPO?
Yes. The DPO advises on the DPIA (Article 35(2) GDPR). I deliver the assessment, the DPO keeps the reviewing role.
A 30-minute call
Tell me where you stand.
I tell you honestly whether I can help, and what it costs. Within three working days you have a proposal with a fixed price.
Prefer email? info@embedai.nl