---
title: "Draft a privacy-impact or algorithmic-impact assessment for the system"
url: "https://ailawframework.com/obligations/ai-decision-systems/draft-a-privacy-impact-or-algorithmic-impact-assessment-for-the-system"
type: "task"
site: "AI Law Framework"
id: "A45-A20260923-2"
practice_area: "AI decision systems (the firm's and clients')"
tier: "yellow"
lawyer_review: "required"
last_reviewed: "2026-10-22"
---

# Draft a privacy-impact or algorithmic-impact assessment for the system

> Structure an impact assessment from the system description: flows, affected people, risks, mitigations and sign-off questions.

Canonical page: https://ailawframework.com/obligations/ai-decision-systems/draft-a-privacy-impact-or-algorithmic-impact-assessment-for-the-system  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [AI decision systems (the firm's and clients')](https://ailawframework.com/obligations/ai-decision-systems.md) |
| Human involvement | Yellow: Lawyer and AI draft together |
| How AI is used | Structure an impact assessment from the system description: flows, affected people, risks, mitigations and sign-off questions. |
| What the lawyer must review | Check the flow map matches the actual system Do not sign off a generic template |
| Written for / versions | 1 jurisdiction versions below |

## Checking plan

The flow map must match the actual system. Do not sign off a generic template.

- What the AI does: Structure an impact assessment from the system description: flows, affected people, risks, mitigations and sign-off questions.
- What the lawyer does: Set the scope, verify the evidence, resolve exceptions and approve the final output for its intended use.
- Basis: Suggested checking approach based on the task guidance. Complete the assessment for the actual tool, information and jurisdiction.

## Checks the lawyer makes

1. Confirm the output against the client’s instructions and the complete relevant source material, including omissions or contradictions.
2. Verify every relied-on citation, figure and name against the source document.
3. The responsible lawyer approves the exact version before use.

## Sources

- [IAPP: Head-start templates, tools and sample documents](https://iapp.org/resources/templates-tools-documents) (checked 2026-09-23)

## Forms and precedents for this task

| Form or precedent | Kind | AI level | Summary |
| --- | --- | --- | --- |
| [Law firm generative AI use policy (United States)](https://ailawframework.com/precedents/ai-decision-systems/us-law-firm-generative-ai-use-policy.md) | Policy | Yellow | An internal policy for a US law firm on which generative AI tools may be used, what may be put into them, who must review output, and when the client is told.… |
| [Approval and training record for a generative AI tool (United States)](https://ailawframework.com/precedents/ai-decision-systems/us-generative-ai-tool-approval-record.md) | Checklist | Yellow | The record a US firm completes before a generative AI tool is put on the permitted list, covering confidentiality settings, retention, reliability, liability, notice of breach, and who has been… |
| [Record that a person reviewed an automated output](https://ailawframework.com/precedents/ai-decision-systems/human-review-of-automated-output.md) | Form | Yellow | Short record that a named person reviewed one automated output before anyone acted on it, what they checked, and whether they departed from it.… |
| [Reassessment when a model, purpose or provider changes](https://ailawframework.com/precedents/ai-decision-systems/model-or-purpose-change-reassessment.md) | Checklist | Yellow | Checklist for when the model, the purpose, the data or the provider of a decision system changes, asking which earlier conclusions have to be made again and by whom. |

Signed-in accounts can read the full text of each one.

## Jurisdiction versions

| Jurisdiction | Level |
| --- | --- |
| [United States](https://ailawframework.com/obligations/ai-decision-systems/draft-a-privacy-impact-or-algorithmic-impact-assessment-for-the-system/united-states.md) | Yellow |

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*