GDPR Article 22 compliance concerns adherence to the EU General Data Protection Regulation provision that grants individuals the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Compliance requires lawful bases, human oversight, the ability to contest decisions, and meaningful information about the logic involved. It is a key constraint on automated decision-making and policy enforcement systems.
Content
- The provision applies when automated processing alone produces legal or similarly significant effects, permitting it only under specific conditions such as explicit consent, contractual necessity, or authorising law with safeguards. Controllers must implement human review, allow data subjects to express their view and contest outcomes, and provide meaningful explanation. It interacts closely with broader AI governance and accountability obligations.