Rights & Ethics

FRIA

Fundamental Rights Impact Assessment.

How the laws define this

Both instruments establish that a fundamental rights impact assessment is a structured, systematic process to identify, evaluate, and mitigate the potential risks and impacts that AI systems pose to fundamental rights across their design and deployment. However, they differ in their scope, framing, and regulatory purpose. The Proposal for Parliamentary Resolution to Establish an Independent AI Supervisory Authority under the Data Protection Authority (B 90) explicitly models the assessment after a DPIA, highlighting specific rights such as privacy, non-discrimination, and freedom of expression, and emphasizes its role in informing supervisory oversight measures. In contrast, the Catalonia AI 2030 Strategy (Estratègia Catalunya IA 2030) introduces the assessment as a model aimed at documenting effects to ensure alignment with both ethical and legal standards, extending the process beyond design and deployment to explicitly encompass the operational use of AI systems.

Synthesised from the 2 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first.

Jurisdiction	Instrument	Status	What is distinctive
Catalonia, Spain	Catalonia AI 2030 Strategy	In Force	This definition specifies it as a model introduced by the Catalonia AI 2030 Strategy for public bodies and businesses to evaluate AI impacts on rights.
Denmark	Proposal for Parliamentary Resolution to Establish an Independent AI Supervisory Authority under the Data Protection Authority (B 90)	Withdrawn	This definition analogizes it to a DPIA and ties it to a proposed independent AI supervisory authority, but the proposal was withdrawn.

What it triggers

In Catalonia, the Catalonia AI 2030 Strategy sets out a structured methodology for identifying, assessing, and mitigating risks to rights in AI systems.source

Definitions (2)

A systematic assessment, analogous to a DPIA, designed to identify, evaluate and mitigate impacts of AI systems on fundamental rights (e.g., privacy, non‑discrimination, freedom of expression), informing design, deployment and supervisory oversight measures.

Proposal for Parliamentary Resolution to Establish an Independent AI Supervisory Authority under the Data Protection Authority (B 90)Definition 1 of 2

A Rights Impact Assessment (FRIA) model introduced by the strategy to evaluate and document the potential effects of AI systems on fundamental rights and freedoms. It is intended as a structured methodology for identifying, assessing, and mitigating risks to rights across AI design, deployment and use, to ensure alignment with ethical and legal standards.

Catalonia AI 2030 Strategy (Estratègia Catalunya IA 2030)Definition 2 of 2

Not to be confused with

Data Protection Impact Assessment (DPIA)

FRIA covers broader fundamental rights beyond just privacy and data protection addressed by DPIA.

Human Rights Impact Assessment

FRIA specifically focuses on fundamental rights and freedoms, while human rights impact assessment may encompass a wider range of rights.

Questions and answers

What makes Catalonia's FRIA different from others?

Catalonia's FRIA is a specific model under the AI 2030 Strategy for ethical AI deployment by public bodies and businesses.

Is FRIA mandatory anywhere?

No, the Catalonia definition is from a non-binding policy, and the Denmark one was withdrawn.

How does FRIA relate to DPIA?

Denmark's FRIA is modeled as analogous to DPIA but extends to broader fundamental rights like non-discrimination and freedom of expression.