## 3 Results
### Components of the New DPIA--FRIA Framework
#### 3.1.2 The FPIA Part of the Framework
These include rights tied to individual freedoms, equality, and procedural safeguards (e.g., bans on body searches, the right to leave the country, and the right to government-funded legal aid). This results in a comprehensive set of rights that must be evaluated for every high-risk AI system. * Fundamental rights
* Does the system impact any human rights? **(D)**, \(\to\)_DPIA: Q66_
* Applicable laws and standards:
* Are there particular legal regulations or standards that address violations of human rights? **(D)**, \(\leftarrow\)_DPIA: Q8, \(\to\)_DPIA: Q66_
* Defining seriousness:
* To what extent does the system impact on human rights? **(D)**, \(\leftarrow\)_DPIA: Q14-Q16, \(\to\)_DPIA: Q66_ Objective
* Which objectives are pursued by using the system? **(D)**, \(\to\)_DPIA: Q66_ Efficacy
* Is the system that is to be used a suitable means to realize the set objectives? **(D)**, \(\to\)_DPIA: Q66_
* Necessity and subsidiarity
* Is using this specific system necessary to achieve this objective, and are there no other or mitigating measures available to do so? **(D)**, \(\to\)_DPIA: Q66_ Balancing interests/proportionality
* Does the use of the system result in a reasonable balance between the objectives pursued and the fundamental rights that will be infringed? **(D)**, \(\to\)_DPIA: Q66_ Assessment Category 13: Preventative and Mitigating Measures  
Finally, the preventative and mitigating measures section outlines various preventative and mitigating strategies to address potential issues in the development and use of the system, particularly concerning their impact on fundamental rights (Figure 12). The corresponding stakeholders for addressing this subsection could be either the Deployer or the Provider. Adapted/enriched based on [44; 47]. * During the development and implementation of the AI system
* Have actions been taken to reduce bias risks through instance class adjustment, instance filtering, or instance weighting? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have you employed tools like \"gender tagging\" to highlight how protected personal characteristics influence the system's operation? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Is the developed system \"fairness-aware\"? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have \"in-processing\" or \"post-processing\" methods of \"bias mitigation\" been implemented? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have mechanisms for \"ethics by design\", \"equality by design\", and \"security by design\" been implemented? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have \"Testing and validation\" been performed **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have methods to enhance the system openness and interpretability such as a \"crystal box\" or \"multi-stage\" implemented? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Administrative measures
* Did the initial development involve a trial phase using a limited dataset and restricted access, before gradually expanding upon successful results? **(P)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have requirements been set for regular reporting and auditing to periodically review the system's effects and its impact on human rights? **(P/D)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have you adopted a ban or moratorium on specific uses of the system? **(P/D)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have you formulated upper limits for the use of specific AI systems? **(P/D)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have you established \"codes of conduct\", \"professional guidelines\", or \"ethical standards\" for stakeholders who will operate the system? **(P/D)**, \(\rightarrow\)_DPIA: Q68 or Q69, depending on the answer._
* Have you established a formal ethical commitment for the system's Providers and Deployers?