Impact assessment by design
Already applicable
- When it relates
- Recommended if an AI system processes personal data.
- What the rule provides
- Assess data protection impact from the start, with minimization, anonymization, encryption and retention periods.
- Typical evidence
- Dated impact assessment.
- Related base documents
- Supporting documents
- Verification
- Verified in the official source on November 4, 2026Checked against the guide text published by the AAIP (final version 2025; the draft dates from October 2024), system design (impact assessment) stage. Not binding.