How can you comply with the requirement for substantial human review?

In principle, it is not allowed to make automated decisions about a person, if the decision leads to legal consequences or other major consequences (Art. 22 GDPR) for them. There are a number of exceptions to this principle, but in all of them, the data subject has the right to human review of the automated decision. The GDPR calls this human intervention, where the data subject may express his or her point of view and challenge the decision. In the reassessment by the human reviewer, the data subject may expect a reasoned explanation of a new decision. Thus, the reviewer may not say that they decided not to change the decision because the computer said so.

See also this explanation from the Personal Data Authority: https://autoriteitpersoonsgegevens.nl/nl/zelf-doen/gebruik-uw-privacyrechten/recht-op-menselijke-blik-bij-besluiten

Details
More questions?

If you were not able to find an answer to your question, contact us via our member-only helpdesk or our contact page.

Recent Articles