Find out what can go wrong when you use AI.

Answer twelve questions, and find out what can go wrong and what applies in Norway today.

Take the test

No login. We store nothing until you choose to save.

Example of an answer

What you wrote

“A system that decides applications for financial social assistance and sends the decision straight to the applicant.”

High risk

You should look at this more closely before you go further.

LowLimitedHigh riskNot allowed

Four findings

1AI decides who gets a public benefitAI Act Annex III point 5(a)
2No person looks at the decision before it takes effectAI Act Art. 14
3Children or vulnerable groups are affected by the decisionno article of its own
4Sensitive data is used to decide something about peopleAI Act Annex III together with Art. 27

Calculated by the test from twelve example answers, not written by hand.

How it works

Test
Tell us what you use AI for.
5min
12 questions in plain words.
Answer
What can go wrong, and what applies in Norway.
4answers per finding
Four blocks per finding.
Checklist
Save and tick off measures.
1account
Email and password, nothing more.
Survey
Find out what your staff actually use.
6questions
Anonymous, no login.

No login. We store nothing until you choose to save.

Take the test

Four answers for every finding

Every finding in the answer gets the same four blocks. Here is finding 2 from the example above, in excerpt.

No person looks at the decision before it takes effect

The four blocks for the finding “No person looks at the decision before it takes effect”
Block	What it contains	Legal basis
What can go wrong	The system makes the decision alone, without a person looking at the case before it goes out. Anything unusual about this particular person may not be caught, because the system is made for the usual. The error may only be discovered when someone complains. By then the decision has already taken effect, and the person who complains must first find out that it was a machine that decided.
What applies in Norway today	GDPR Art. 22(3) gives the right to have a person involved in the case. Section 17 of the Public Administration Act requires the case to be investigated, sections 24 and 25 require the decision to be reasoned, and section 28 requires an appeal to be handled. All of this applies today, regardless of the AI Act.	GDPR Art. 22(3)Public Administration Act s. 17Public Administration Act ss. 24 and 25Public Administration Act s. 28
What the EU says is coming	Human oversight, together with Annex III. Applies in the EU from 2 December 2027 (postponed from 2 August 2026). No Norwegian date has been set.	AI Act Art. 14
What you should do	Three of eight measures in the answer: Make sure a person looks at the case before anything goes out, and that they can stop it Make a simple routine for complaints and errors: who receives them, who corrects them, how long it takes Decide who is responsible for this use, by name

What do your staff use AI for?

Send a link to a department, and staff answer anonymously without logging in. The report shows what people actually do, and no breakdown until at least five have answered.

ExampleCase handling, 23 answers9 paste in text from cases, documents or email

Start a survey

The AI Act has not been incorporated into the EEA, and none of its provisions apply in Norway yet. We do not sell a duty. We show what can go wrong.

How it works

Test

Tell us what you use AI for.

5min

12 questions in plain words.

Answer

What can go wrong, and what applies in Norway.

4answers per finding

Four blocks per finding.

Checklist

Save and tick off measures.

1account

Email and password, nothing more.

Survey

Find out what your staff actually use.

6questions

Anonymous, no login.

No login. We store nothing until you choose to save.

Take the test

What can go wrong

The system makes the decision alone, without a person looking at the case before it goes out. Anything unusual about this particular person may not be caught, because the system is made for the usual. The error may only be discovered when someone complains. By then the decision has already taken effect, and the person who complains must first find out that it was a machine that decided.

What applies in Norway today

GDPR Art. 22(3) gives the right to have a person involved in the case. Section 17 of the Public Administration Act requires the case to be investigated, sections 24 and 25 require the decision to be reasoned, and section 28 requires an appeal to be handled. All of this applies today, regardless of the AI Act.

GDPR Art. 22(3)Public Administration Act s. 17Public Administration Act ss. 24 and 25Public Administration Act s. 28

What the EU says is coming

Human oversight, together with Annex III. Applies in the EU from 2 December 2027 (postponed from 2 August 2026). No Norwegian date has been set.

AI Act Art. 14

What you should do

Three of eight measures in the answer:

Make sure a person looks at the case before anything goes out, and that they can stop it
Make a simple routine for complaints and errors: who receives them, who corrects them, how long it takes
Decide who is responsible for this use, by name