Does UK Data Protection Act 2018 — Automated Decision-Making require Transparency & Disclosure?
United Kingdom • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 3 specific requirements for Transparency & Disclosure across 1 provision:
- Logic disclosure — Arts. 13(2)(f) and 14(2)(g): controllers must disclose the existence of automated decision-making, including profiling, that is subject to the Art. 22C safeguard requirement, and at least in those cases provide meaningful information about the logic involved
- Significance and consequences — The same provisions require the significance and the envisaged consequences of the processing for the data subject to be given
- Point of disclosure — Art. 13 applies where data is collected from the data subject; Art. 14 where it is obtained from another source
Transparency in Automated Processing #
Requirements
| Requirement | Details |
|---|---|
| Logic disclosure | Arts. 13(2)(f) and 14(2)(g): controllers must disclose the existence of automated decision-making, including profiling, that is subject to the Art. 22C safeguard requirement, and at least in those cases provide meaningful information about the logic involved |
| Significance and consequences | The same provisions require the significance and the envisaged consequences of the processing for the data subject to be given |
| Point of disclosure | Art. 13 applies where data is collected from the data subject; Art. 14 where it is obtained from another source |
Penalties
| Violation | Fine |
|---|---|
| Non-compliance | Up to GBP 17.5M or 4% global turnover |