The EU AI Act requires providers of high-risk AI systems to conduct a fundamental rights impact assessment. Which entity is PRIMARILY responsible for this assessment?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — the deployer of the high-risk AI system is primarily responsible in certain cases, especially when it's a public-sector user. You're the one deploying the system, so you own the fundamental rights impact assessment for your specific context.
Full Explanation
The correct answer is the deployer (user) of the high-risk AI system in certain cases, such as public sector deployers, because under the EU AI Act, deployers that are bodies governed by public law or private entities carrying out public functions are required to conduct a fundamental rights impact assessment before deploying certain high-risk AI systems. This recognizes that deployers bear responsibility for impacts in their specific context. The European AI Office oversees the framework but does not conduct assessments. The accredited notified body independent of the provider conducts conformity assessments, not fundamental rights assessments. The data protection authority in the jurisdiction where the system is deployed oversees data protection, not AI fundamental rights assessments specifically.