The right not to be subjected to automated decision-making protects individuals (data subjects) from automated processing and profiling which significantly affects them.
This is closely connected to the right to object to data processing.
The data controller is obligated to give individuals information about data processing, present a simple way for data subjects to request human intervention or challenge the decision, and execute regular check-ups of the system.
Processing personal data by automated decision-making is possible if:
• processing of personal data is allowed by law
• it is necessary for the execution of the contract
• individuals gave explicit consent
