# AI Deployment Privacy Checklist Template

## Organisation: Cerebrum AI Labs

| Field | Value |
|-------|-------|
| AI System Name | |
| Deployment Date | |
| Gate Review Date | |

## CHECKLIST

| # | Category | Check | Reference | Pass/Fail | Notes |
|---|----------|-------|-----------|-----------|-------|
| 1 | Legal | DPIA completed | Art. 35 | | |
| 2 | Legal | AI Act classification | Art. 6 | | |
| 3 | Legal | Lawful basis (training) | Art. 6(1) | | |
| 4 | Legal | Lawful basis (inference) | Art. 6(1) | | |
| 5 | Legal | Art. 22 assessment | Art. 22 | | |
| 6 | Legal | Vendor agreements | Art. 28/26 | | |
| 7 | Technical | Privacy audit | Best practice | | |
| 8 | Technical | Bias assessment | Art. 10 | | |
| 9 | Technical | PII filtering | Minimisation | | |
| 10 | Technical | Encryption | Art. 32 | | |
| 11 | Transparency | Privacy notice | Arts. 13-14 | | |
| 12 | Transparency | AI notification | Art. 50 | | |
| 13 | Transparency | Explainability | Art. 13(2)(f) | | |
| 14 | Oversight | Human oversight | Art. 14 | | |
| 15 | Oversight | Contestation | Art. 22(3) | | |
| 16 | Rights | Explanation mechanism | Art. 15(1)(h) | | |
| 17 | Rights | Erasure capability | Art. 17 | | |
| 18 | Operational | Incident response | Art. 33-34 | | |
| 19 | Operational | Monitoring | Art. 9 | | |

## GATE DECISION: Approved / Conditional / Rejected

| Role | Name | Decision | Date |
|------|------|----------|------|
| DPO | | | |
| System Owner | | | |
| IT Security | | | |