Who Are Your Interested Parties? Everyone Touched by Your AI

ISO 42001 asks you to identify your "interested parties." Ignore the jargon. It means: who is affected by your AI, and what do they expect from you?

Your customers are interested parties. If your AI decides something about them — a loan, a job, a grade, a medical referral — they expect fairness and a way to question the decision.

Your employees are interested parties. If AI changes how they work or whether they keep their jobs, they expect honesty and training, not surprises.

Regulators are interested parties. They expect you to follow the law. Under the EU AI Act, in force since August 2024, some of those expectations now carry serious penalties.

Your suppliers, your community, the public — depending on what your AI does, the circle widens.

Why does the standard make you list them? Because expectations you never named are expectations you will accidentally violate. Writing them down forces the uncomfortable but useful question: are we actually meeting what these people reasonably expect?

Make the list. Keep it short and honest. Revisit it when your AI changes or your world does. Governance starts with knowing whose trust you hold.

I explain frameworks; I don't give legal counsel.