DPIA, FRIA, CA: the AI assessments required by law

Today, there are various regulations that require companies and public administrations that provide or use artificial intelligence systems to conduct assessments on the impacts of AI and how these systems comply with the law. This is the case, for example, with the General Data Protection Regulation (GDPR): those intending to use an AI system must conduct a Data Protection Impact Assessment (DPIA). Additionally, the AI Act, the new European law on artificial intelligence, requires conducting a Fundamental Rights Impact Assessment (FRIA) when using an AI system. The same law also introduces the obligation to conduct a Conformity Assessment (CA) to demonstrate the compliance of one's AI system with the requirements of the AI Act. This speech will present the various assessments that businesses and public entities must conduct on their AI systems to comply with legal obligations. It will explain how to conduct these evaluations and with what methodologies, highlighting points of contact and differences, while also focusing on the benefits that can arise from their correct and timely completion