Required actions
- Article 21: inform individuals of decisions based exclusively on automated processing with legal or significant effects and allow them to state their position and request human review - Conduct a data protection impact assessment for high-risk processing such as extensive profiling
