What is an algorithmic impact report?

Assessing the risks of an artificial intelligence system before and during its use.

Definition

An algorithmic impact report is a document that describes an artificial intelligence system, its purpose, the data used, the risks to individuals and groups, mitigation measures, and the form of human oversight. It is prepared before the system is put into use and reviewed throughout its lifecycle.

It is the equivalent, for AI systems, of RIPD for the processing of personal data. The two documents complement each other: the RIPD looks at the data and the algorithmic report looks at the decision, bias and social impact.

What the rules say

O PL 2338 / 2023The bill, currently being processed in the National Congress, proposes algorithmic impact assessment as a mandatory requirement for high-risk systems. AI Act The European Union requires implementers of high-risk systems to conduct an impact assessment on fundamental rights (Article 27) and suppliers to implement a risk management system (Article 9). LGPD This connects to the topic through Article 20 (automated decisions) and Article 38 (impact report).

In practice

Start with inventory: what AI systems does the organization use and for what purpose?
Classify the risk based on its purpose and the audience affected.
Describe training data, performance metrics, bias testing, and human supervision.
Review the report with each relevant system change.

How Privacy Tools it deals with the topic

The module of AI Governance maintains the inventory of AI systems and the Diagnoses and Assessments They apply the algorithmic impact assessment model, based on PL 2338/2023, the AI Act, ISO/IEC 42001 and the NIST AI RMF.

Updated October 3th, 2026.

Want to see this concept applied in practice?

Request a demo and see how... Privacy Tools It organizes mapping, legal bases, rights holder applications, and evidence all in one place.