Definition
ISO/IEC 42001:2023 · clauses 6.1.4 and 8.4, control A.5A documented assessment of the consequences an AI system may have for individuals, groups and society: fairness, safety, privacy, livelihoods, the environment. Clause 6.1.4 requires you to define a process for it and clause 8.4 to run it at planned intervals and when a significant change is proposed; Annex A objective A.5 adds the controls. It differs from an AI risk assessment, which looks at risk to the organisation, and overlaps with a Data Protection Impact Assessment under DPDP s. 10(2)(c) and GDPR Art. 35 where personal data is involved.
Also called AI impact assessmentAIIA