GDPR Article 35 DPIA + EU AI Act risk documentation for AI systems
⚠️
GDPR Art. 35 DPIA is mandatory for large-scale AI processing, automated decisions (Art. 22), or special-category data. EU AI Act obligations for high-risk systems are in force from August 2026.
GDPR Art. 35EU AI ActArt. 22 ADMBias AssessmentFree
1
AI System & Classification
2
Data, Risks & Safeguards
Organisation & Assessment Details
AI System Details
EU AI Act Classification
Provider = you built or fine-tuned the AI. Deployer = you use an AI system (e.g. OpenAI API) in your product.