Automated decisions can require safeguards
Decisions made purely by a machine, with legal or similarly significant effects, carry extra obligations.
The person can require human involvement, express a view and contest the outcome. It matters increasingly as models are used in credit, recruitment and pricing, and the difficulty is usually that the system cannot explain itself, so the human review becomes somebody confirming a number they cannot interrogate. That is not the safeguard the law intends.
More on UK GDPR
- Lawful basis is the reason processing is permittedIt will not turn without the reason
- Consent is one lawful basis, not the default answerOne setting out of six
- Access rights concern personal data, not every documentThe lines about you, not the page
- Erasure is not an absolute delete buttonIt will not travel the whole way
- Data portability is narrower than a database exportOnly what fits the frame
- Rectification requires organisations to be able to correct inaccurate personal data wherever it is maintainedCorrect it once, then chase every copy