Risks.
Named risks, not vague hazards: each entry is a specific, recognised AI risk, with the controls that mitigate it, the clauses that cite it and the sources behind it. 169 risks across 16 categories.
Severity by category
A compact map of the whole register before you filter it.
| Category | critical | high | medium | low | Total |
|---|---|---|---|---|---|
| Governance & Accountability | – | 11 | 10 | – | 21 |
| Model Performance & Reliability | – | 7 | 6 | – | 13 |
| Data Protection & Privacy | 2 | 7 | 4 | – | 13 |
| Fairness, Bias & Impact | – | 4 | 5 | – | 9 |
| Conduct & Customer Outcomes | – | 8 | 4 | – | 12 |
| Transparency & Explainability | – | 2 | 4 | – | 6 |
| Human Factors & Workforce | – | 4 | 3 | – | 7 |
| Model & Application Security | – | 12 | 5 | – | 17 |
| Adversarial ML & Model Integrity | 1 | 4 | 3 | – | 8 |
| Agentic & Autonomous Systems | 1 | 10 | 4 | – | 15 |
| Generative Content & Information Integrity | 1 | 2 | 5 | – | 8 |
| Intellectual Property & Legal Liability | – | 5 | 3 | – | 8 |
| Third-Party & Supply Chain | – | 5 | 4 | – | 9 |
| Operational Resilience | – | 7 | 2 | – | 9 |
| Prohibited & High-Risk Practices | 8 | 1 | – | – | 9 |
| Systemic & Societal | – | 2 | 2 | 1 | 5 |
Browse by list, category or framework
16 of 169 risks shown.
| ID | Risk | Category | Severity |
|---|---|---|---|
| R-050 | Agent tool misuse An agent uses a tool it is permitted to use in an unsafe or unintended way, such as a destructive command or a wrong parameter, causing data loss, unauthorised transactions or disruption. | Agentic & Autonomous Systems | High |
| R-017 | Automated decision-making without safeguards AI is used to take significant decisions about individuals with no meaningful human involvement and without the safeguards UK data protection law requires. | Data Protection & Privacy | Critical |
| R-158 | Automation bias and over-reliance People accept AI outputs without the scrutiny they would give another source, and the system's errors pass into decisions unchallenged. | Human Factors & Workforce | High |
| R-001 | Excessive agency in autonomous agents An agent is given more functions, permissions or independence than its task requires, so an error, an ambiguous instruction or a manipulated input turns into a damaging action that no one approved. | Agentic & Autonomous Systems | High |
| R-057 | Human-agent trust exploitation People approve an agent's request or accept its account of events because it is fluent and familiar, so the human check that was meant to stop a harmful action passes it instead. | Agentic & Autonomous Systems | Medium |
| R-135 | Inability to stop or roll back AI A misbehaving system cannot be disabled, reverted to a known good version, or have its actions reversed quickly enough to limit harm. | Operational Resilience | High |
| R-121 | Inadequate contestability and redress People affected by an AI-supported decision cannot challenge it, cannot have it reviewed by someone with the authority and information to change it, or cannot obtain a remedy. | Conduct & Customer Outcomes | High |
| R-034 | Inadequate explainability for affected individuals A person materially affected by an AI-supported decision is not given an explanation they can understand and use to challenge it. | Transparency & Explainability | High |
| R-025 | Inadequate human oversight design An AI system is built with no human oversight, or with an oversight step that lacks the time, information, competence or authority to change an outcome. | Governance & Accountability | High |
| R-159 | Ineffective human review A human review step exists and operates, but reviewers do not in practice detect or correct the system's errors. | Human Factors & Workforce | High |
| R-167 | Loss of control of advanced AI A highly capable AI system pursues objectives or acquires capabilities beyond the oversight of its developer or deployer, and cannot readily be corrected or stopped. | Systemic & Societal | Medium |
| R-126 | No route to a human A customer cannot reach a person when the automated channel fails them, or the route to one is hidden or obstructed. | Conduct & Customer Outcomes | Medium |
| R-058 | Rogue agent behaviour An agent departs from its intended function or acts deceptively or outside its mandate, through misaligned objectives, emergent behaviour or a compromise that persists, while each action appears legitimate. | Agentic & Autonomous Systems | High |
| R-061 | Unauthorised commitments by agents An agent makes a statement, offer or transaction that binds the organisation, without the authority a person in the same position would need. | Agentic & Autonomous Systems | High |
| R-162 | Unfair algorithmic management AI is used in recruitment, task allocation, performance assessment or dismissal without fairness testing, explanation, human review or a route to challenge. | Human Factors & Workforce | High |
| R-120 | Wrongful automated refusal A system incorrectly declines, blocks or withdraws a product, payment or claim, and the person affected has no effective way to have it corrected. | Conduct & Customer Outcomes | High |