thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Automated Individual Decision-Making

GDPR Article 22 right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Definition

Such decisions, including profiling, are permitted only when necessary for a contract, authorized by law, or based on explicit consent, with safeguards like human intervention, the ability to express a view, and to contest the decision. Transparency about the logic involved is required. Article 22 is increasingly relevant to AI systems.

Example

An automated loan rejection without human review triggers Article 22 rights.

Exam tip

Key word is 'solely' automated; meaningful human review takes processing outside Article 22.

Related terms