Rights in relation to automated decision making and profiling

The right not to be subjected to automated decision-making is described in Article 22 of the GDPR protects the data subjects from automated processing and profiling which significantly affects them.

This is closely connected to the right to object to data processing. Article 22 only applies if such a decision is made solely on automated processing which produces legal effects for the data subject.

The data controller is obligated to give data subjects information about data processing, present a simple way for data subjects to request human intervention or challenge the decision, and execute regular check-ups of the system.

Processing personal data by automated decision-making  is possible if:

•processing of personal data is allowed by law

•necessary for the execution of the contract

• data subject gave explicit consent (provided that the data processor placed appropriate safeguards mentioned above)