Automated decision-making under Dutch data protection law

Controllers may implement automated individual decision-making if this is necessary for their compliance with a legal obligation or carrying out a public interest task. This exception, however, applies only to automated decision-making not based on profiling (Article 40 UAVG).