Automated decision making is the use of algorithms or machine learning models to reach decisions about individuals or situations without meaningful human involvement. It ranges from rule-based scoring to predictions from trained models, applied to outcomes such as eligibility, pricing or risk classification. Because such decisions can significantly affect people, data protection frameworks like the GDPR grant rights around solely automated decisions, including a right to obtain human intervention and an explanation. Responsible deployment depends on fairness, transparency and accountability safeguards.

Overview

  • Automated decisions span simple rule engines to complex model-driven predictions applied to consequential outcomes.
  • When decisions are made solely by automation and have legal or similarly significant effects, data protection regimes attach specific individual rights.
  • The central tension is between efficiency at scale and the need for Fairness, contestability and human oversight.

Key aspects

  • Solely automated versus human-assisted decisions, a distinction that determines applicable obligations.
  • Right to explanation and to obtain Human in the Loop intervention for affected individuals.
  • Risk of encoding Bias from training data into systematic, repeated decisions.

Mechanisms

  • A trained Model or scoring rule maps inputs to a decision or risk classification.
  • Risk Assessment and impact analysis evaluate harms before deployment.
  • Explainable AI techniques produce justifications for individual outcomes.
  • Oversight and audit trails support Accountability and contestability.

Applications

  • Credit, insurance and eligibility scoring.
  • Fraud and risk classification.
  • Content moderation and prioritisation at scale.
  • Triage and recommendation in operational workflows.

Provenance