Control #
D
4
.
5
Conduct legal and policy reviews of high-risk AI use cases prior to deployment
Establish a formal review process for AI deployments in sensitive domains (e.g., employment, credit, health). Ensure use cases are reviewed for legal exposure under bias law, AI regulation, or sector-specific rules.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.