Impact assessments for AI

FRIA and DPIA consultant for AI systems

For organisations deploying AI in decision-making, HR, education, credit, public services or other sensitive contexts.

Zahed combines GDPR/DPIA thinking with AI Act risk, FRIA structure and practical governance.

When this matters

AI affects individuals or groups
There is profiling, ranking or assessment
A supplier provides insufficient impact information
Legal asks for DPIA, FRIA or fundamental rights analysis

Approach

1

Context and role

We determine use case, affected persons, role allocation, data and decision impact.

2

Risk analysis

We assess privacy, bias, transparency, human oversight, appeal options and fundamental rights.

3

Measures

We translate risk into controls, documentation, supplier questions and governance.

What you get

DPIA/FRIA boundaries
Risk and mitigation matrix
Supplier questions
Human oversight plan
Decision note for legal or leadership

FAQ

When do I need a FRIA?

A FRIA is especially relevant for certain high-risk AI systems, public contexts and situations affecting fundamental rights. The exact duty depends on system, role and context.

What is the difference between DPIA and FRIA?

A DPIA focuses on privacy risk under the GDPR. A FRIA looks more broadly at fundamental rights in the AI Act context. AI projects often require both to be considered together.

Discuss your situation

Schedule a 30-minute conversation. We look at what is happening, what is urgent and which first step makes sense.

Schedule a call