(1)A controller may not take a significant decision based solely on automated processing unless that decision is required or authorised by law.
(2)A decision is a “significant decision” for the purpose of this section if, in relation to a data subject, it—
(a)produces an adverse legal effect concerning the data subject, or
(b)significantly affects the data subject.]
Textual Amendments
F1Ss. 50A-50D substituted for ss. 49, 50 (19.6.2025 for specified purposes) by Data (Use and Access) Act 2025 (c. 18), ss. 80(3), 142(1)(2)(h)
Commencement Information
I1S. 49 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)