EveryAILaw.comDoes UK Data Protection Act 2018 — Automated Decision-Making require Transparency & Disclosure?
United Kingdom • enforcing
Yes — 1 provision
Requirements at a glance
This regulation imposes 3 specific requirements for Transparency & Disclosure across 1 provision:
- Logic disclosure — Arts. 13(2)(f) and 14(2)(g): controllers must disclose the existence of automated decision-making, including profiling, that is subject to the Art. 22C safeguard requirement, and at least in those cases provide meaningful information about the logic involved
- Significance and consequences — The same provisions require the significance and the envisaged consequences of the processing for the data subject to be given
- Point of disclosure — Art. 13 applies where data is collected from the data subject; Art. 14 where it is obtained from another source
Transparency in Automated Processing
Source boundary: Retained official UK GDPR text captured on 3 October 2026 uses 'Commission' in Articles 13(2)(d) and 14(2)(e); the amendment notes date these substitutions to 30 September 2026. [S.I. 2026/1015 regulation 2(b)-(c)](https://legislation.gov.uk/uksi/2026/1015/regulation/2/made) commenced abolition of the office of Information Commissioner and transfer of functions to the Information Commission on that date. This observation concerns the complaint-recipient wording and institutional functions. It does not establish a change to the substantive ADM safeguards in Articles 22A-22D. The associated authority identity mapping and broader currentness remain unresolved.
Requirements
| Requirement | Details |
|---|---|
| Logic disclosure | Arts. 13(2)(f) and 14(2)(g): controllers must disclose the existence of automated decision-making, including profiling, that is subject to the Art. 22C safeguard requirement, and at least in those cases provide meaningful information about the logic involved |
| Significance and consequences | The same provisions require the significance and the envisaged consequences of the processing for the data subject to be given |
| Point of disclosure | Art. 13 applies where data is collected from the data subject; Art. 14 where it is obtained from another source |
Penalties
| Violation | Fine |
|---|---|
| Non-compliance | Up to GBP 17.5M or 4% global turnover |