Join our Newsletter — 33% off our NHI Course
Home› Glossary› Governance, Ownership & Risk› Disparate Impact Ratio
Governance, Ownership & Risk

Disparate Impact Ratio

← Back to Glossary
By NHI Mgmt Group Updated October 29, 2026 Domain: Governance, Ownership & Risk

A disparate impact ratio is a fairness metric that compares how often different groups pass or fail a decision process. It is calculated by dividing one group’s selection rate by another’s, usually to spot whether a screening, scoring or access decision has a materially uneven effect.

What Disparate Impact Ratio Measures

The disparate impact ratio compares selection rates across groups in a decision process. It is a simple way to see whether a screening, scoring, or access decision is producing materially different outcomes for one group versus another.

Because it is a ratio, the metric focuses on relative pass-through rather than the raw number of approvals or rejections. That makes it useful for spotting inequity in hiring, lending, tenant screening, fraud review, eligibility checks, and other high-volume decision systems where small process changes can affect many people.

How to Interpret the Ratio

Practitioners usually read the metric by comparing one group's selection rate against a reference group's rate. A lower ratio suggests the group is selected less often, while a ratio closer to parity suggests more similar outcomes across the compared groups.

The number alone does not explain why the gap exists. A disparity can come from the data, the model, a policy threshold, human override behaviour, upstream sampling bias, or a decision rule that is formally neutral but uneven in effect.

Because selection rate depends on the denominator, the ratio can move quickly when group sizes are small. That is why the metric should be read alongside sample size, confidence, and the actual decision workflow rather than treated as a standalone verdict.

Where It Fits in Fairness Review

Disparate impact ratio is best treated as a screening metric, not a complete fairness test. It helps identify whether a process deserves deeper review, such as testing for selection-rate gaps across protected or operationally sensitive groups, reviewing cutoff choices, or checking whether the same feature set is being applied consistently.

In practice, teams use it during model validation, audit preparation, policy review, and post-deployment monitoring. It is especially useful when the question is not just whether a system is accurate, but whether its outcomes are distributed in a way that is acceptable for the organisation's legal, ethical, or business obligations.

For hiring and other employment-related use cases, the metric is often discussed alongside local automated decision requirements. NYCHIMG's NYC Automated Employment Decision Tools (AEDT) Law Guide covers how impact ratios, independent bias audits, notices, and related compliance duties fit into that workflow.

Common Failure Modes and Interpretation Pitfalls

A ratio can look acceptable while the underlying process still has a meaningful fairness problem, especially when the decision is applied inconsistently across time, teams, or channels. The opposite can also happen, where a concerning ratio reflects a legitimate business rule, a data issue, or a temporary transition rather than structural discrimination.

The biggest mistake is to treat one metric as proof of fairness or unfairness. A good review looks at the full decision chain, including training data, feature engineering, thresholding, human review, appeals, and downstream outcomes after the initial decision is made.

When used well, the metric helps narrow the investigation. When used poorly, it can create false confidence, encourage threshold gaming, or hide the fact that the same apparent selection rate can still produce very different lived outcomes.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST AI RMF and NIST CSF 2.0 set the technical controls, while EU AI Act and ISO/IEC 27001:2022 define the regulatory obligations.

FrameworkControl / ReferenceRelevance
EU AI ActHigh-risk AI system governance and monitoringThis metric is used in AI decision oversight where fairness and outcome review are material.
Recommendation — Document and monitor disparate impact findings as part of high-risk AI governance and post-deployment oversight.
NIST AI RMFGovern map measure manage governFairness metrics support AI risk measurement and governance for decision systems.
Recommendation — Track outcome disparities as part of measurable AI risk controls and governance review.
NIST CSF 2.0GV.RM-01 — Risk Management StrategyOutcome disparity is a governance risk that should feed the organisation's risk strategy.
Recommendation — Incorporate disparate-impact monitoring into your AI and model risk management strategy.
ISO/IEC 27001:2022A.5.7 — Threat intelligenceOutcome-monitoring signals can inform broader governance intelligence about control weakness and misuse.
Recommendation — Use monitored fairness anomalies to inform governance review and corrective action.

Practitioner Guidance

What to watch for: Use the ratio as an early warning signal when a screening or access decision is repeatedly producing uneven pass rates across groups. The main value is not the number itself, but the prompt it creates for a deeper review of the decision logic, data lineage, and human override behaviour.

Governance implication: Assign clear ownership for who reviews the metric, who investigates exceptions, and who can approve changes to thresholds or criteria. If the ratio is monitored but no one is accountable for acting on it, it becomes a reporting artefact rather than a control.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on October 29, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org