ABSTRACT

Automated decision-making Data Subjects have the right to ‘require’ a Data Controller, in writing, not to make any decisions about them entirely automatically.

If they have not done this, decisions may be made automatically, but they have the right to know ‘as soon as reasonably practicable’ that this is happening. They

then have the right to ask for the decision to be reconsidered manually within 21 days. They can go to court to enforce these rights if the Data Controller does not comply with them.