A guide to identifying foreseeable impacts of AI systems on individuals, groups and society, then documenting evidence, responses and reassessment.
Scope and use
ISO/IEC 42005:2025 provides guidance for AI system impact assessment. It does not automatically replace legally required assessments or a privacy impact assessment where applicable.
Key requirements
- Describe the system, intended and foreseeable uses, affected people, context and assessment boundaries.
- Assess potential benefits and adverse impacts, including discrimination, privacy, safety, access to services and effects on groups.
Implementation outline
- Describe the system, intended and foreseeable uses, affected people, context and assessment boundaries.
- Assess potential benefits and adverse impacts, including discrimination, privacy, safety, access to services and effects on groups.
- Document evidence, uncertainty, mitigation, accountable owners, residual impacts and conditions that trigger reassessment.
- Screen the use case; identify affected groups; assess impacts across the lifecycle; consult where appropriate; decide measures; monitor outcomes and update the assessment.