LocusLabsEU RegTech
Run Free Audit
← Back to Free Compliance AssessmentEU AI Act & GDPR Use-Case Compliance Guide

EU AI Act & GDPR Compliance Checklist for AI Creditworthiness & Fintech Underwriting

Credit scoring AI falls under Annex III Point 5(b) High-Risk AI, GDPR Article 22 automated decision-making rules, and DORA ICT third-party risk requirements.

Statutory Baseline Classification

Default EU AI Act TierHIGH_RISK_ANNEX_III
GDPR Article 35 DPIAMandatory Prior Assessment

Required Regulatory Deliverables for AI Creditworthiness & Fintech Underwriting:

  • EU AI Act Annex IV Technical Documentation
  • Article 9 Continuous Risk Management Framework
  • Article 14 Human Oversight System & Kill-Switch Spec
  • Article 27 Fundamental Rights Impact Assessment (FRIA)
  • Article 35 DPIA (Necessity, Proportionality & Residual Risk)
  • Article 30 Record of Processing Activities (RoPA) Entry
  • Article 28 Data Processing Agreement & Sub-processor Audit