Skip to main content
Praxikon
Back to the explorer
ObligationUpcomingv1.0.0

Article 27: FRIA

Fundamental rights impact assessment before deploying certain high-risk AI systems.

The official source remains authoritative. This is general information about obligations and not legal advice. See this object on the map

Address and citation

This object has an address of its own that is never renamed or reused. Store the identifier in your own file, not the title or the link.

Identifier
praxikon:eu:ai-act:obligation:article-27-fria
Payload hash (sha256)
498c93501f9972d34831aea9c643908d910568bd188c1f76ddb2786c3836b98e

Citation line

Praxikon, "Article 27: FRIA", praxikon:eu:ai-act:obligation:article-27-fria@1.0.0, dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0), effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-14T00:00:00.000Z, sha256 498c93501f9972d34831aea9c643908d910568bd188c1f76ddb2786c3836b98e
Version
1.0.0
Legal time (effective_at)
27 July 2026
Knowledge time (known_at)
8 August 2026
Closed on
Not closed
Application date
2 December 2027
Topics
fundamental-rights, high-risk

Review status: Placed against the official source (8 August 2026). Next check due by 4 February 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

Who must act and who is affected

On an obligation the addressee is recorded separately from the party that is merely affected. That difference decides who a supervisory authority addresses and who has work to do without the duty resting on them.

Duty holder

Affected actor

Not recorded on this object.

Oversight

Not recorded on this object.

Evidence owner

What this object links to

Every relation appears below as a path: from the source with its locator, through the conditions and exceptions of the object carrying the relation, to the consequence. A locator belongs to a statement in the data and not to a relation, so the source is the source anchor of the carrying object.

Who carries the duty

3 of 3 shown

The duty rests on this role. A supervisory authority addresses this role when it is not met.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

Who owns the evidence

3 of 3 shown

This duty holder creates, maintains and can produce the evidence.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

What has to be done

1 of 1 shown

This is what concretely has to be done under the obligation.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

What has to be recorded

1 of 1 shown

This is what has to be in the file to show that the action was carried out.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

What keeps it in place

1 of 1 shown

This is what keeps compliance in place over time, periodic or event-driven.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

Public tools

1 of 1 shown

This is the public route a reader can actually use.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
    • Condition | any ofThe deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).
    • ExceptionIn the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Consequence

What points at this object

Objects hanging off this obligation

12 of 14 shown

The object belongs to this obligation. The source line it hangs off sits there.

  1. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allYou are a body governed by public law, a private entity providing public services, or a deployer of a system under Annex III point 5(b) or 5(c), and you deploy a high-risk system under Article 6(2).
    • ExceptionHigh-risk AI systems intended for the area listed in Annex III point 2 fall outside the Article 27(1) FRIA duty.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Relation recorded on: Map the affected groups and their specific risks of harm

    Consequence

  2. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: Perform a FRIA before deployment

    Consequence

  3. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe Article 27(1) FRIA duty applies to the system.

    Relation recorded on: Set up the complaint mechanism and internal governance before the system runs

    Consequence

  4. Source

    Official fact on this object, with its locator.

    • Digital Omnibus on AI 2026/1744

      Locator: Article 27 amendment and amended Article 113

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: FRIA follows new date and may cross-reference a DPIA

    Consequence

  5. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe system is in use and an assessment under Article 27(1) has been performed or relied upon.

    Relation recorded on: Currency check on the FRIA elements during use

    Consequence

  6. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: Pre-deployment FRIA go/no-go

    Consequence

  7. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allThe assessment under Article 27(1) has been performed.
    • ExceptionIn the case referred to in Article 46(1), deployers may be exempt from the notification duty; the assessment itself does not fall away.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Relation recorded on: Notification to the market surveillance authority with the completed template

    Consequence

  8. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    • Condition | allA data protection impact assessment has been carried out or is required for the same deployment.

    Relation recorded on: Crosswalk showing the FRIA complements rather than repeats the DPIA

    Consequence

  9. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    • Digital Omnibus on AI 2026/1744

      Locator: Amended application schedule and Article 27 DPIA cross-reference

      praxikon:eu:ai-act:source:reg-eu-2026-1744

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: FRIA report and notification

    Consequence

  10. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1), (3) and (5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: Awarding social assistance in a municipality: the FRIA and the notification

    Consequence

  11. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1)-(3)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: Recidivism scoring in police work: when the assessment must be redone

    Consequence

  12. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 27(1), (2) and (4)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    No condition or exception recorded on this object.

    Relation recorded on: Selection at student admission: a DPIA is not yet a FRIA

    Consequence

Open the full list in the explorer

The list there can be slightly wider than this group: the filter also counts the object itself, and for a role the broader role above it.

What this object states

Official fact

Attributable to a named primary source, with a locator. Where they differ, the official source prevails.

  • The listed deployers must perform a FRIA before deployment. For this Annex III route, the obligation follows the application date of 2 December 2027.

    • Locator: Article 27(1)-(5)praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source
    • Locator: Amended application schedule and Article 27 DPIA cross-referencepraxikon:eu:ai-act:source:reg-eu-2026-1744Open official source

Our interpretation

Our own reading. It can change without the law changing, and it is not the position of a supervisory authority.

  • A FRIA is not a generic risk assessment for every AI system. First establish the system route, Annex III category and type of deployer.

Recommended step

A practical step we consider appropriate. Not an obligation following from the Regulation.

  • Link the FRIA to the AI inventory and, where relevant, the DPIA. Keep scope, affected groups, mitigations, residual risks and notification in one versioned record.

    • Locator: Article 27 amendment on DPIA inclusion or cross-referencepraxikon:eu:ai-act:source:reg-eu-2026-1744Open official source

When this applies

  1. 1The system is high-risk under Article 6(2) and Annex III, excluding Annex III point 2.
  2. 2The deployer is a body governed by public law, a private provider of public services or uses a relevant system in Annex III point 5(b) or 5(c).

When this does not apply

  • In the situation covered by Article 46(1), an exemption from notification may apply. This does not generally remove the assessment itself.

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "Article 27: FRIA",
praxikon:eu:ai-act:obligation:article-27-fria@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0),
effective_at 2026-07-27T00:00:00.000Z, known_at 2026-08-08T00:00:00.000Z,
sha256 498c93501f9972d34831aea9c643908d910568bd188c1f76ddb2786c3836b98e,
https://www.praxikon.com/en/verkenner/obligation/article-27-fria
(https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-27-fria&effective_at=2026-07-27&known_at=2026-08-08&lang=en, accessed 2026-08-23)

Short form

praxikon:eu:ai-act:obligation:article-27-fria@1.0.0 (sha256 498c9350)

BibTeX

@misc{praxikon-eu-ai-act-obligation-article-27-fria-1-0-0,
  author       = {{Praxikon}},
  title        = {Article 27: FRIA},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:obligation:article-27-fria},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.1.0, schema 1.4.0},
  note         = {effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 498c93501f9972d34831aea9c643908d910568bd188c1f76ddb2786c3836b98e},
  url          = {https://www.praxikon.com/en/verkenner/obligation/article-27-fria},
  urldate      = {2026-08-23},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:obligation:article-27-fria@1.0.0",
    "type": "dataset",
    "title": "Article 27: FRIA",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:obligation:article-27-fria",
    "URL": "https://www.praxikon.com/en/verkenner/obligation/article-27-fria",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          8
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          8,
          23
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0; schema 1.4.0; effective_at 2026-07-27T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 498c93501f9972d34831aea9c643908d910568bd188c1f76ddb2786c3836b98e; retrieved_from https://www.praxikon.com/api/v1/obligations?id=praxikon%3Aeu%3Aai-act%3Aobligation%3Aarticle-27-fria&effective_at=2026-07-27&known_at=2026-08-08&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

For agents and integrations

This page and the machine output come from the same object and the same two time axes.

Open as JSONOpen as JSON-LDHuman explanationRead the methodology