For Heads-of · Practitioner
Automated decision-making safeguards
Process guaranteeing a right to human review, an ability to contest, and a documented rationale for any solely-automated decision with significant effect.
- directive
- data-protection
- automated-decisions
- policy
What it does
Builds a human-review path, a right to express a view, and a documented, explainable rationale into any decision pipeline that could otherwise operate as a solely-automated decision with legal or similarly significant effect.
Where it fits
The direct mitigation for automated-decision-making-without-safeguards, and the mechanism that makes inadequate-explainability-for-affected-individuals actionable rather than theoretical.
Risks this mitigates
The risks this control addresses, ranked by effectiveness.
Inadequate explainability for affected individuals
An AI-driven decision materially affecting a person can't be explained to them in a way they can meaningfully understand or challenge.
Automated decision-making without safeguards
AI is used to make solely-automated decisions with legal or similarly significant effects on individuals, without the safeguards UK GDPR requires.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| UK General Data Protection Regulation | Article 22 | Automated individual decision-making, including profiling |