Back to Module
3 of 3|AI & DPDPA
video 20 min•AI Governance
AI Risk Assessment
How to assess the risks of an AI system.
🎯 Learning Objectives
- ▸ Learn the steps of an AI risk assessment
- ▸ Understand the different categories of AI risk
The AI Risk Framework
An AI risk assessment evaluates:
- • Privacy Risk: Does the AI process personal data? Is there a lawful basis?
- • Bias Risk: Is the AI biased against certain groups based on race, gender, etc.?
- • Security Risk: Can the AI be manipulated or hacked?
- • Transparency Risk: Can the AI explain its decisions?
- • Human Oversight Risk: Is there a human in the loop for critical decisions?
The DPDPA requires Data Fiduciaries to ensure data accuracy. If an AI makes decisions based on biased or inaccurate data, the company is liable.
📖 Glossary
- Algorithmic Bias
- Systematic and repeatable errors in a computer system that create unfair outcomes.
- Human in the Loop
- A model that requires human interaction or oversight for decision-making.
🔑 Key Takeaways
- AI risk assessment covers privacy, bias, and security.
- High-risk AI systems require stricter controls.
- Documentation is essential for compliance.
📚 Further Reading
- NIST AI Risk Management Framework — NIST (2023)

Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...