Article 13(2): In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing: [...] (f) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Article 14(2): [...] (g) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Article 15(1): The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: [...] (h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
How this was checked
GDPR information on automated decision-making
Verified · last checked Settled, with the evidence a claim at this level needs.
Under the GDPR, a controller collecting personal data from the person concerned must, at the time the data are obtained, tell that person of the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4), and at least in those cases give meaningful information about the logic involved and the significance and envisaged consequences of the processing for them; the same information is due where the data are obtained from elsewhere, and a person exercising the right of access is entitled to it as well.
At a glance
The statement laid out, in its own words. The statement above and its sources are what count.
The information
- The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4)
- At least in those cases, meaningful information about the logic involved
- The significance and the envisaged consequences of the processing for the person
When it is due
- When the data are collected from the person (Article 13(2)(f))
- When the data are obtained from elsewhere (Article 14(2)(g))
- On a request for access (Article 15(1)(h))
Where the book relies on it
- The AI Act at Work: Hiring and Managing People with AI, Telling candidates. About The AI Act at Work: Hiring and Managing People with AI
- The AI Act at Work: Hiring and Managing People with AI, When someone asks why. About The AI Act at Work: Hiring and Managing People with AI
- The AI Act at Work: Hiring and Managing People with AI, One company, one year. About The AI Act at Work: Hiring and Managing People with AI
- Kind of evidence
- documentarySettled by a first-hand source, quoted below with the day it was read.
The evidence
Every sentence in our books that makes a claim about the world points at a page like this one.