Skip to content

Assessment

Personal data: what AI regulations require

Lawful basis, minimisation, privacy by design.

10 requirements · 7 regulations · 5 checks

Requirements by regulation

EUAI Act1

EX-019

DPIA Art. 26§9

CoECoE Convention1

COE-11

Privacy and data protection Art. 11

USNIST AI RMF2

MEASURE-2.2

Evaluations involving human subjects meet applicable requirements (including human subject protection) and are representative of the relevant population. MEASURE

MEASURE-2.10

Privacy risk of the AI system - as identified in the map function - is examined and documented. MEASURE

CACCPA ADMT1

ADMT-04

Risk assessment before processing §7150-7157

BRPL 23381

BR-14

Algorithmic impact assessment Arts. 25-28

INTLOECD AI1

OECD-1.2

Human rights, democratic values, fairness, privacy 1.2

Checks in this theme

Most shared first

Code	Check	Used by
VER-019-D-02	DPIA carried out in accordance with GDPR Art. 35	PL 2338 CoE Convention RGPD CCPA ADMT
VER-019-D-01	Need for a DPIA assessed	RGPD NIST AI RMF OECD AI
VER-AUTO-06	DPIA completed	AI Act
CHK-HUMAN-SUBJECTS	Human-subject evaluations meet protection requirements and are representative	NIST AI RMF
NEW-GDPR-01	Lawful basis documented per purpose (training, inference)	RGPD

Related themes

Prohibited practices Impact assessments Fairness & non-discrimination

Run these requirements across all your AI systems

TrustFlow inventories your systems, qualifies them under each regulation and collects evidence once for every referential.