Automated decision-making under UK’s data protection law

Qualifying significant decision

Clause 14 DPA specifies the obligations of the controller regarding the automated decision-making. For example, it defines the “qualifying significant decision” as:

1. a significant decision concerning a data subject,
2. being required or approved by law and
3. not falling under Article 22 (2)(a) or (c) of the GDPR (decisions required for a contract or made with the explicit consent of the data subject).

In addition, clause 14 DPA puts further obligations on the person responsible for the data processing.