# AI Impact Assessment Starter

Use this prompt set to document a proportionate review before approval, pilot, major change or renewal.

## 1. Use case
- Name and description:
- Business owner:
- Technical owner:
- Intended users:
- People affected by outputs or decisions:
- Organisation role in the AI value chain:

## 2. Purpose and necessity
- What outcome is intended?
- Why is AI appropriate for this task?
- What non-AI alternatives were considered?
- What uses are explicitly outside scope?

## 3. Data
- Data sources and categories:
- Personal or sensitive data:
- Data quality and relevance checks:
- Retention and deletion:
- Supplier access or secondary use:

## 4. Human impact
- How could people benefit?
- What errors, exclusion, unfairness or accessibility barriers are plausible?
- Can affected people understand and challenge the process?
- Which decisions must remain with a qualified person?

## 5. Security and operational risk
- Access and ownership controls:
- Supplier and dependency risks:
- Testing before release:
- Monitoring and incident path:
- Fallback and service continuity:

## 6. Controls and evidence
- Required human review:
- Approved users and data boundaries:
- Testing evidence:
- Training required:
- Logging and review frequency:

## 7. Decision
- Decision: Approve / Approve with conditions / Pilot / Redesign / Reject / Retire
- Conditions and action owners:
- Residual risk:
- Decision authority:
- Next review date:
- Evidence links:

This starter is a general governance tool, not legal advice or a substitute for a required formal assessment.