Does UK Data Protection Act 2018 — Automated Decision-Making require Human Oversight?
United Kingdom • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 4 specific requirements for Human Oversight across 1 provision:
- Right not to be subject to ADM — Individuals have the right not to be subject to decisions based solely on automated processing with legal or significant effects
- Human review — Right to obtain human intervention and contest automated decisions
- Explanation — Right to meaningful information about the logic involved
- Data Protection Impact Assessment — Required when automated processing may result in high risk
Automated Decision-Making Rights (Article 22 UK GDPR) #
Requirements
| Requirement | Details |
|---|---|
| Right not to be subject to ADM | Individuals have the right not to be subject to decisions based solely on automated processing with legal or significant effects |
| Human review | Right to obtain human intervention and contest automated decisions |
| Explanation | Right to meaningful information about the logic involved |
| Data Protection Impact Assessment | Required when automated processing may result in high risk |
Penalties
| Violation | Fine |
|---|---|
| Non-compliance | Up to GBP 17.5M or 4% global turnover |