8. Glossary

AIPD (Data Protection Impact Analysis); DPIA (Data Protection Impact Assessment)

A systematic process for assessing risks to individuals’ rights and freedoms in the context of high-risk processing of personal data, as required by Article 35 of the GDPR.

Appendix A; Annex A

A list of reference controls in ISO/IEC 42001 covering the organizational, human, technical, and operational aspects of AI management. The organization must compare its controls against this annex to verify that no necessary controls have been omitted.

AI Risk Assessment

A comprehensive process involving the identification, analysis, and assessment of risks associated with AI systems (Section 6.1.2 of ISO/IEC 42001).

Algorithmic bias

A systematic...