Which tool? (optional)
Question 1 of 5 What is it mainly used for? Pick the closest. If it does several things, sort each use as its own line on the ledger.
Writing, research or summaries Drafting text, answering questions, summarising documents. Code or data analysis Writing software, spreadsheets, analysing figures. Making images, audio or video Pictures, voice, music or video for any purpose. Talking to customers or the public A chatbot, voice agent or assistant outside the company. Meetings and transcription Notes, transcripts, call summaries. Hiring and managing staff Screening CVs, ranking candidates, scheduling, monitoring or rating staff. Credit checks on individuals Scoring whether a person gets credit or on what terms. Life or health insurance pricing Assessing risk or setting prices for individuals. Education and training Admissions, marking exams, assessing learners, monitoring tests. Faces, voices or other biometrics Identifying people, reading emotions, grouping people by traits. Something else None of the above fits.
Question 2 of 5 Who deals with it directly? Direct means typing to it, talking to it or receiving its answers without a person in between.
Only our own staff Nobody outside the company talks to it. Customers, candidates or the public People outside the company interact with it directly.
Question 3 of 5 Does anything it produces feed a decision about a person? For example who gets hired, promoted or let go, who gets credit, a school place, a benefit or insurance. This question decides whether a tool is high-risk.
No Nothing it makes is used to judge, rank or select anyone. Yes, about staff or job applicants Screening, ranking, allocating work, performance, promotion, dismissal. Yes, about customers or members of the public Credit, insurance, access to a service or benefit. Not sure We will flag it for an adviser rather than guess.
Question 4 of 5 Who sees what it makes? Think about the final output, not the draft.
Only us Output stays inside the company. Published text, checked by a person A person edits it and takes responsibility before it goes out. Published text, not checked by a person Goes out as written, for example automatic news or updates. Realistic images, audio or video Could pass as real people, places or events.
Question 5 of 5 Did you build it or change it? Putting your own name on a system, or changing what it is for, can make you its provider.
We use it as supplied Bought or subscribed, used for its normal purpose. We changed it or put our name on it Rebranded, substantially modified, or used for a new high-risk purpose. We built it Our own system, or one built for us that we place on the market.
Could it be doing something banned? (most tools: no)
Manipulates people with subliminal or deceptive techniques that can cause harm (Art. 5(1)(a)) Exploits vulnerabilities of age, disability or social situation (Art. 5(1)(b)) Scores people on social behaviour or personality, leading to unfair treatment (Art. 5(1)(c)) Predicts that a person will commit a crime based only on profiling (Art. 5(1)(d)) Builds face recognition databases by scraping images from the internet or CCTV (Art. 5(1)(e)) Infers emotions of people at work or in education (Art. 5(1)(f)) Sorts people by biometrics into race, politics, religion or sexual orientation (Art. 5(1)(g)) Generates non-consensual intimate images or abuse material (Art. 5, added by the Omnibus) Show the result
Nothing you enter is stored. This is a general indication, not legal advice.