Automated Decision-Making
What is Automated Decision-Making?
Decisions made by algorithms or AI systems without significant human involvement. Under GDPR Article 22, individuals have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
Terms that appear alongside automated decision-making
Each of these is named in at least one of the same controls as automated decision-making. The number is how many controls name both.
- data subject 57 shared controls
- data subject rights 45 shared controls
- gdpr 45 shared controls
- consent 42 shared controls
- profiling 36 shared controls
- right to object 28 shared controls
- data protection 25 shared controls
- data portability 25 shared controls
Frameworks that govern automated decision-making
What the standards actually require on automated decision-making
Requirements naming automated decision-making across 6 standards, quoted from the control text.
Where a significant decision about a data subject is based wholly or partly on personal data and solely on automated processing, the controller must ensure safeguards are in place that give the data subject information about such decisions taken about them, en...
uk-gdpr-uk-general-data-protection-regulation::Art.22C · Article 22C Safeguards for automated decision-making →Standard 6 per Sections 37-43 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in accordance with the rights of data subjects under this Act.
JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction · Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Decision-Making Restrictions + Profiling + Restriction Right →A data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, unless the decision is necessary for entering into or performing a contract with the c...
nigeria-data-protection-act-2023-ndpa::37 · Automated decision making →Adhere to Oman PDPL Articles 25-28 covering automated decision-making + profiling + children + direct marketing. Automated decision-making and profiling per Article 25 requires (a) restriction of solely-automated decisions producing legal or similarly signific...
OMANPDPL-7 · Automated Decision-Making, Profiling, Children, Direct Marketing →A processor using personal information for automated decision-making must ensure the transparency of the decision-making and the fairness and impartiality of the results and may not apply unreasonable differential treatment in transaction prices or other condi...
china-personal-information-protection-law-pipl::24 · Art. 24 Automated decision-making: transparency, fairness, no unreasonable price discrimination, opt-out from targeted push, explanation and refusal of solely automated significant decisions →The organization must identify and address the obligations, including legal obligations, that it owes to individuals arising from decisions it makes about them based solely on automated processing of their personal data, taking account of jurisdictions that im...
iso-27701-2019::7.3.10 · Automated decision making →Questions people ask about automated decision-making
What is Automated Decision-Making?
Why is Automated Decision-Making important for compliance?
Which compliance frameworks address Automated Decision-Making?
Where can I learn more about Automated Decision-Making?
See how Automated Decision-Making applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.