Decisions made solely by automated means — with special safeguards where they have legal or similarly significant effects.
Automated decision-making produces a decision without meaningful human involvement. Where such a decision has a legal or similarly significant effect (e.g. credit, hiring), Article 22 restricts it.
It is generally only allowed with explicit consent, contractual necessity, or legal authorisation — and individuals can ask for human review.
In the Regulation
Related terms
Need this applied to your business?
The articles and FAQs turn GDPR terms into working knowledge.