Automated decision-making under the GDPR

Individuals have a right not to be subjected to decisions based solely on automated processing (without any human intervention in the decision-making), including profiling. Data subjects can exercise this right, if such decisions have legal effects or other significant effects on them.

More details can be found in the WP29 Guidelines on Automated individual decision-making and Profiling available at: https://ec.europa.eu/newsroom/document.cfm?doc_id=47742.