03/09/2026
⚠️ Does your organisation need to carry out an AI risk assessment? In many cases, the answer is yes — and it may be a legal requirement. The use of AI, particularly for profiling or decisions that have a significant impact on individuals, may require a DPIA under the UK GDPR. 👉 Our article explains when a risk assessment becomes mandatory and how to identify the relevant situations.
In many cases, yes, and this is not simply best practice but a legal requirement. Under Article 35 of UK GDPR, you must carry out a Data Protection Impact Assessment before starting any processing likely to result in a high risk to individuals' rights and freedoms, and the ICO specifically lists A