Identify affected people and impacts before determining the depth of assessment required.
Map who may be affected directly or indirectly, the decisions influenced, potential benefits, foreseeable harms and vulnerable groups.
For EU AI Act work, determine whether specific fundamental-rights impact assessment duties or other sector/privacy assessments are triggered; escalate legal uncertainty.
For ISO/IEC 42001 implementation, impact assessment supports systematic consideration of consequences across the AI lifecycle.
Create an affected-person map for an AI recruitment system and identify the impact questions you would ask before deployment.
EU AI Act source pack plus ISO/IEC 42001 impact-assessment concepts. Specialist legal/privacy review may still be required.