The Fundamental Rights Impact Assessment (FRIA) under the EU AI Act is meant to protect fundamental rights from AI harms, but its practical rollout raises hard questions. This article unpacks FRIA’s core components and its relationship to the GDPR’s Data Protection Impact Assessment, showing how FRIA’s focus on “interferences” — rather than just quantifiable “damages” — gives it a far broader reach, including cases with no personal data at all.