Who must carry out a FRIA
Article 27 covers specified Annex III deployers and uses.
It includes public-law bodies and private providers of public services.
The obligation is not universal for every AI user. Check exact actor and use, including the critical-infrastructure exclusion in Article 27.
Creditworthiness and life/health-insurance uses have specific coverage.