Regulation (EU) 2016/679 of the European Parliament and of the CouncilShow full title

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

[F1Article 22AU.K.Automated processing and significant decisions

1.For the purposes of Articles 22B and 22C—

(a)a decision is based solely on automated processing if there is no meaningful human involvement in the taking of the decision, and

(b)a decision is a significant decision, in relation to a data subject, if—

(i)it produces a legal effect for the data subject, or

(ii)it has a similarly significant effect for the data subject.

2.When considering whether there is meaningful human involvement in the taking of a decision, a person must consider, among other things, the extent to which the decision is reached by means of profiling.]

Textual Amendments

F1Ch. 3 Section 4A substituted for Art. 22 (19.6.2025 for specified purposes) by Data (Use and Access) Act 2025 (c. 18), ss. 80(1), 142(1)(2)(h)