Does UK Data Protection Act 2018 — Automated Decision-Making require Transparency & Disclosure?

United Kingdom • enforcing

Yes — 1 provision

Requirements at a glance

This regulation imposes 3 specific requirements for Transparency & Disclosure across 1 provision:

Transparency in Automated Processing #

Obligation:
Transparency
enforcing
Effective:
May 25, 2018
Risk tier:
all
Scope:
deployers

Requirements

RequirementDetails
Logic disclosureArts. 13(2)(f) and 14(2)(g): controllers must disclose the existence of automated decision-making, including profiling, that is subject to the Art. 22C safeguard requirement, and at least in those cases provide meaningful information about the logic involved
Significance and consequencesThe same provisions require the significance and the envisaged consequences of the processing for the data subject to be given
Point of disclosureArt. 13 applies where data is collected from the data subject; Art. 14 where it is obtained from another source

Penalties

ViolationFine
Non-complianceUp to GBP 17.5M or 4% global turnover
View full regulation View obligation Obligation matrix