Tools·EDPBEN
Export
Checklist for AI auditing (EDPB Support Pool of Experts)
An end-to-end, socio-technical checklist for auditing an algorithm against data protection law, written by an external expert for the EDPB’s Support Pool of Experts at the AEPD’s initiative (published June 2024), with proposals for AI leaflets and "algo-scores". Commissioned by the EDPB; not its official position.
When to use itYou audit an AI system’s processing of personal data, inside or outside a DPIA.
- Published by
- EDPB (supervisory authority)
- Written for
- EU
- For
- DPOs and privacy officers, AI providers and deployers, researchers and lawyers
- Cost
- free
- Languages
- English
- Provisions
- GDPR Art. 5, GDPR Art. 22, GDPR Art. 25, GDPR Art. 35
Open the tooledpb.europa.eu
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
Standard Standard Data Protection Model (SDM), German DPAs The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation,… DE ·Datenschutzkonferenz (DSK)
Rijksoverheid / AP AVG-regelhulp voor bedrijven The Dutch government’s online rule guide for businesses: a series of questions about your organisation and its processing, ending in a personal list of GDPR duties (register,… NL ·checklist ·in Dutch
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist
Datatilsynet (NO) Datatilsynet checklist for businesses (Norway) The Norwegian DPA’s checklist of the duties a business has under the GDPR (applicable in Norway through the EEA Agreement), each point linking to the authority’s guidance. NO ·checklist
FG Toetsingskader DPIA (DPO assessment framework for DPIAs) The framework the data protection officers of the ministries of Justice and Security and of Asylum and Migration use to assess a DPIA the same way every time: a manual and a… NL ·checklist ·in Dutch