Automated Decision-Making
What is Automated Decision-Making?
Decisions made by algorithms or AI systems without significant human involvement. Under GDPR Article 22, individuals have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Terms that appear alongside automated decision-making
Each of these is named in at least one of the same controls as automated decision-making. The number is how many controls name both.
- data subject 57 shared controls
- data subject rights 45 shared controls
- gdpr 45 shared controls
- consent 42 shared controls
- profiling 36 shared controls
- right to object 28 shared controls
- data protection 25 shared controls
- data portability 25 shared controls
Frameworks that govern automated decision-making
What the standards actually require on automated decision-making
Requirements naming automated decision-making across 6 standards, quoted from the control text.
Standard 6 per Sections 37-43 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in accordance with the rights of data subjects under this Act.
JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction · Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Decision-Making Restrictions + Profiling + Restriction Right →Adhere to Oman PDPL Articles 25-28 covering automated decision-making + profiling + children + direct marketing. Automated decision-making and profiling per Article 25 requires (a) restriction of solely-automated decisions producing legal or similarly signific...
OMANPDPL-7 · Automated Decision-Making, Profiling, Children, Direct Marketing →Automated decision-making must be transparent and fair; no unreasonable differential treatment in transaction terms; decisions with major effect entitle individuals to an explanation and to refuse decisions made solely by automated means;
PIPL-Art24 · Automated Decision-Making →The organization must identify and address the obligations, including legal obligations, that it owes to individuals arising from decisions it makes about them based solely on automated processing of their personal data, taking account of jurisdictions that im...
iso-27701-2019::7.3.10 · Automated decision making →Articles 5-15 of UU PDP grant Data Subjects 9 core rights. Article 5: right to obtain information regarding identity of Personal Data Controller + legal basis + purpose + accountability party representing Personal Data Controller.
IDPdp-DataSubjectRights-Art5to15-Access-Correction-Erasure-Portability-Object-Withdraw-Automated · Indonesia PDP Articles 5-15 + Data Subject Rights + Access + Correction + Erasure + Portability + Object + Withdraw Consent + Automated Decision-Making + Damages Claim + Identity Verification + Response 3 Days →Section 26 of the Kenya DPA establishes comprehensive data subject rights closely modelled on EU GDPR. (1) Section 26 Seven Data Subject Rights: (a) Right to be Informed of use of personal data; (b) Right of Access - request access to personal data;
KE-DPA-Data-Subject-Rights-Sections26-Access-Correction-Erasure-Object-Portability-Restriction-30-Days · Kenya DPA Data Subject Rights + Section 26 + Right to be Informed + Access + Correction + Erasure + Object + Restriction + Portability + Automated Decision-Making + 30-Day Response + Free for First Request + Refusal Grounds Limited →Questions people ask about automated decision-making
What is Automated Decision-Making?
Why is Automated Decision-Making important for compliance?
Which compliance frameworks address Automated Decision-Making?
Where can I learn more about Automated Decision-Making?
See how Automated Decision-Making applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.