Required actions
- Do not subject people to decisions based solely on automated processing with legal or similarly significant effects unless an Article 22 exception applies, and provide human intervention and the right to contest - Give meaningful information about the logic involved in automated decision-making and profiling - Carry out a data protection impact assessment before high-risk processing such as systematic profiling - Identify a lawful basis for training and operating models on personal data and honour data-subject rights, including in model outputs