Article 27 — Fundamental rights impact assessment for high-risk AI systems
APPLIES DEC 2, 2027 WAS 2026-08-02 AMENDED BY OMNIBUS
Chapter III · High-risk tier
Source: EUR-Lex · CELEX 32024R1689
Verified 2026-07-16
Source: EUR-Lex · CELEX 32024R1689
Verified 2026-07-16
PLAIN-LANGUAGE SUMMARY — ORIGINAL INTERPRETATION, NOT THE OFFICIAL TEXT
Before first use, deployers that are public bodies or private entities providing public services, plus deployers of the creditworthiness and life or health insurance pricing systems in Annex III, must assess how an Annex III high-risk system could affect fundamental rights; uses in critical infrastructure are excluded. The assessment covers processes, timing, affected groups, specific harms, human oversight, and mitigation and complaint arrangements. Results go to the market surveillance authority. It supplements any data-protection impact assessment.
AMENDED BY THE DIGITAL OMNIBUS ON AI
This provision's application date moved under the Omnibus. It now applies from 2027-12-02 (originally 2026-08-02). Source: Omnibus final text (OJ pending) · verified 2026-07-16
AT A GLANCE
Chapter: III — High-risk AI systems
Applies: Dec 2, 2027
Tier: High-risk tier
PENALTY EXPOSURE
€15M or 3%
of worldwide turnover — see Art. 99 penalties framework.
← PREVIOUS · ART. 26 Obligations of deployers of high-risk AI systems NEXT · ART. 28 → Notifying authorities
ELSEWHERE IN CHAPTER III — High-risk AI systems